$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/859b6607-3814-391c-9486-8abbbf067d70.roa File: 859b6607-3814-391c-9486-8abbbf067d70.roa (raw, json) Hash identifier: /2WmaIE5Jzriv5qI9m6gLpFnnFkj+BVa3LIID3eUdsE= Subject key identifier: A3:48:ED:7B:E1:DC:CA:CD:5C:80:FE:68:62:77:82:A2:03:0A:3E:9D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BA6FD5196D3B9A1828B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/859b6607-3814-391c-9486-8abbbf067d70.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:a6:fd:51:96:d3:b9:a1:82:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c24b1c3c-d980-4169-a548-e4a9443b64b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:1b:0e:0f:69:5a:14:42:57:bb:db:ab:2a: 0e:88:cf:0e:27:0e:d3:36:c6:19:c0:b5:07:c3:2b: eb:ef:f9:20:6c:20:1a:8f:4f:dd:84:9f:fc:da:fb: 64:1b:51:48:0a:24:4c:c4:ca:8f:9f:0c:a9:83:54: 7b:29:55:91:79:82:75:7d:32:52:4f:e3:28:0c:0d: 63:70:41:17:81:6a:29:6e:7d:10:a9:dc:70:f2:b5: 47:2f:e8:50:5a:d6:51:21:c8:36:0f:9d:07:5f:f8: 4e:bd:8b:93:03:2d:13:c6:fc:3d:4f:7c:d9:ac:33: e0:ae:58:c4:37:1a:17:4d:89:4b:83:27:47:1d:c1: 4e:fc:97:d1:58:13:3e:cf:12:4e:1f:b8:4c:0c:b0: 59:74:be:8d:78:f2:96:b0:07:53:06:a0:b3:70:1b: 55:68:4f:96:e7:a2:5a:07:c2:d4:2f:ee:00:ef:dc: 25:07:c2:54:87:32:9e:d8:31:7d:a2:11:72:a8:24: 4a:f5:70:e0:1e:cd:8c:34:68:e0:94:a2:17:79:e7: a4:d2:cc:fa:50:b4:57:0d:b7:95:f8:d8:59:59:28: 1c:aa:75:d3:7e:2e:36:f1:99:d8:d8:e7:1e:c4:19: de:19:92:13:5f:07:40:da:c5:72:82:1a:ac:5b:93: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:48:ED:7B:E1:DC:CA:CD:5C:80:FE:68:62:77:82:A2:03:0A:3E:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/859b6607-3814-391c-9486-8abbbf067d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:1f:57:0b:16:74:12:c7:55:02:d6:b5:a5:62:7c:ab:e2:1d: 46:2e:a9:71:2e:f4:87:2d:7a:22:c3:36:0f:9a:0f:13:2f:a0: b6:33:94:ab:49:08:04:39:23:a5:49:0b:3e:2e:8f:24:2f:f6: 07:71:89:90:8b:5f:37:45:6a:04:a8:01:50:f6:be:2a:00:a6: 72:ff:03:50:95:f3:ac:40:cc:85:64:e4:9f:42:87:69:d5:83: 0c:20:4d:38:83:23:46:83:d9:d8:fc:3d:64:a1:99:71:27:15: 97:4b:2b:80:ca:2a:a2:dc:89:5f:b9:60:02:09:3c:c7:05:f4: f2:73:ed:e0:93:f0:ad:de:04:a0:b9:85:d5:b3:78:13:4a:78: a8:3d:58:25:d4:d7:e1:87:20:cf:6c:b3:e8:83:ea:fe:a8:fa: 46:f0:83:12:50:40:a8:5d:65:38:6f:16:c7:53:30:99:4b:ee: 29:b3:e2:62:b8:94:cb:77:f4:b1:90:c3:8c:1b:8e:20:eb:50: 4c:bc:87:66:9d:fe:1e:10:8b:cb:e6:11:ae:3c:45:e9:d7:dc: c4:34:3e:d5:dd:63:2a:c2:86:fe:48:4d:f0:6b:37:db:d8:62: ec:71:73:47:69:c0:ee:62:62:c3:d7:74:3d:fa:1d:94:80:1e: 01:a5:0b:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je6b9UZbTuaGCi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzI0YjFjM2MtZDk4MC00MTY5LWE1NDgtZTRhOTQ0M2I2NGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC8bDg9pWhRCV7vbqyoOiM8OJw7TNsYZwLUH wyvr7/kgbCAaj0/dhJ/82vtkG1FICiRMxMqPnwypg1R7KVWReYJ1fTJST+MoDA1j cEEXgWopbn0Qqdxw8rVHL+hQWtZRIcg2D50HX/hOvYuTAy0Txvw9T3zZrDPgrljE NxoXTYlLgydHHcFO/JfRWBM+zxJOH7hMDLBZdL6NePKWsAdTBqCzcBtVaE+W56Ja B8LUL+4A79wlB8JUhzKe2DF9ohFyqCRK9XDgHs2MNGjglKIXeeek0sz6ULRXDbeV +NhZWSgcqnXTfi428ZnY2OcexBneGZITXwdA2sVyghqsW5NXMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNI7Xvh3MrNXID+aGJ3gqIDCj6dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODU5YjY2MDctMzgxNC0z OTFjLTk0ODYtOGFiYmJmMDY3ZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL0fVwsWdBLHVQLWtaVifKviHUYuqXEu9IcteiLDNg+aDxMvoLYzlKtJ CAQ5I6VJCz4ujyQv9gdxiZCLXzdFagSoAVD2vioApnL/A1CV86xAzIVk5J9Ch2nV gwwgTTiDI0aD2dj8PWShmXEnFZdLK4DKKqLciV+5YAIJPMcF9PJz7eCT8K3eBKC5 hdWzeBNKeKg9WCXU1+GHIM9ss+iD6v6o+kbwgxJQQKhdZThvFsdTMJlL7imz4mK4 lMt39LGQw4wbjiDrUEy8h2ad/h4Qi8vmEa48RenX3MQ0PtXdYyrChv5ITfBrN9vY Yuxxc0dpwO5iYsPXdD36HZSAHgGlCxw= -----END CERTIFICATE-----Generated at Sun Oct 4 19:41:23 2026 by rpki-client