$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85c55c31-9549-3580-b586-7fb9c98358e7.roa File: 85c55c31-9549-3580-b586-7fb9c98358e7.roa (raw, json) Hash identifier: MXQNpl8V6YbJTxWJXt6kucI8PatEDkFD12cGDuXnANM= Subject key identifier: 3D:C5:91:FF:1D:52:CB:DE:F4:D9:F1:C1:20:6A:37:E8:B4:2D:BF:86 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49843C9BA9682A00678CF780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85c55c31-9549-3580-b586-7fb9c98358e7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 198.45.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:3c:9b:a9:68:2a:00:67:8c:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7e83ae8e-2ce2-4de6-b1f0-391970d48cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:36:d9:a3:82:51:af:13:0e:cb:c1:8a:86:70: d6:18:f5:0e:9f:d2:4f:21:15:ba:18:df:d4:40:36: e4:78:e4:f7:cd:cc:62:f1:df:1a:e9:66:09:ca:44: 76:40:58:2e:a2:d9:c6:a5:45:e9:72:89:4a:c8:21: 93:65:3c:10:4c:77:ee:1e:04:5b:01:63:c0:b7:42: 4a:ef:ec:38:a5:9d:ee:45:eb:71:e6:1a:fb:6f:eb: 44:c4:af:19:26:0a:e1:d2:b8:1a:c0:3f:20:64:bd: 0b:35:4e:c3:9a:d0:f6:4c:41:10:40:27:da:96:bb: 23:fe:fd:95:e9:2e:21:16:0a:4a:63:04:b0:8e:17: 69:5a:55:a4:8b:7f:aa:38:54:22:71:47:28:c9:92: 8b:94:3e:46:ec:d6:c2:2c:9c:c6:67:5c:7a:00:5a: c1:1f:0c:57:1a:0e:79:67:50:66:13:0f:d8:24:c3: 49:03:59:a1:96:e3:01:08:f9:29:56:4c:97:19:45: 25:cc:a1:f1:f0:60:29:c6:17:83:42:31:78:96:b2: 3d:8e:5f:1b:cb:e5:1a:25:27:cd:03:2f:1f:a3:7a: d4:b1:98:6e:64:d0:a9:5d:0b:bf:66:d0:09:d9:e7: c0:3c:33:a5:3d:39:4f:70:20:40:20:9b:1b:4a:7a: 78:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C5:91:FF:1D:52:CB:DE:F4:D9:F1:C1:20:6A:37:E8:B4:2D:BF:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85c55c31-9549-3580-b586-7fb9c98358e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:51:af:57:96:db:74:7c:ae:73:8e:51:9a:9b:9e:9b:a3:01: 72:fe:47:72:d3:ca:4a:44:92:ac:f4:dd:81:74:8f:05:3a:67: 26:ff:83:6d:31:be:26:8f:25:10:d0:7f:46:fa:a7:ae:f5:af: dc:59:c8:97:a1:e3:a1:a3:04:2f:fc:c7:ef:cb:55:09:2a:73: e2:90:5b:6a:25:44:75:0b:51:e1:8a:09:8e:0a:52:fd:bd:9e: 33:43:85:99:5d:35:31:1f:60:c3:9b:64:92:15:2a:b7:49:5c: 00:36:ec:f3:cb:32:58:76:65:c3:dc:a0:0d:73:99:f3:56:60: 82:79:04:92:e3:17:fe:66:28:97:c4:16:c4:b0:5a:16:8a:6b: b8:6e:5e:bd:e3:3a:9d:59:13:c2:27:ec:69:6c:ee:19:36:db: 4e:0f:c0:92:a8:ff:34:ce:a5:76:5f:fa:b7:91:b2:04:1d:e5: 7b:8c:b1:9a:1c:23:3e:3a:6e:9b:b2:cc:7a:05:33:39:90:22: 10:0e:7c:de:46:c7:15:a1:9a:1e:31:bb:b8:69:10:d7:c9:5e: e4:03:2c:37:ee:16:e1:1a:5b:a8:36:6f:9d:15:64:9b:08:19: 82:19:52:36:26:b7:b3:d9:38:15:d1:3f:21:56:c3:d9:7e:e0: c8:24:b8:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhDybqWgqAGeM94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2U4M2FlOGUtMmNlMi00ZGU2LWIxZjAtMzkxOTcwZDQ4Y2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTbZo4JRrxMOy8GKhnDWGPUOn9JPIRW6GN/U QDbkeOT3zcxi8d8a6WYJykR2QFguotnGpUXpcolKyCGTZTwQTHfuHgRbAWPAt0JK 7+w4pZ3uRetx5hr7b+tExK8ZJgrh0rgawD8gZL0LNU7DmtD2TEEQQCfalrsj/v2V 6S4hFgpKYwSwjhdpWlWki3+qOFQicUcoyZKLlD5G7NbCLJzGZ1x6AFrBHwxXGg55 Z1BmEw/YJMNJA1mhluMBCPkpVkyXGUUlzKHx8GApxheDQjF4lrI9jl8by+UaJSfN Ay8fo3rUsZhuZNCpXQu/ZtAJ2efAPDOlPTlPcCBAIJsbSnp4EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3Fkf8dUsve9NnxwSBqN+i0Lb+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODVjNTVjMzEtOTU0OS0z NTgwLWI1ODYtN2ZiOWM5ODM1OGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdRr1eW23R8rnOOUZqbnpujAXL+R3LTykpEkqz03YF0jwU6Zyb/g20x viaPJRDQf0b6p671r9xZyJeh46GjBC/8x+/LVQkqc+KQW2olRHULUeGKCY4KUv29 njNDhZldNTEfYMObZJIVKrdJXAA27PPLMlh2ZcPcoA1zmfNWYIJ5BJLjF/5mKJfE FsSwWhaKa7huXr3jOp1ZE8In7Gls7hk2204PwJKo/zTOpXZf+reRsgQd5XuMsZoc Iz46bpuyzHoFMzmQIhAOfN5GxxWhmh4xu7hpENfJXuQDLDfuFuEaW6g2b50VZJsI GYIZUjYmt7PZOBXRPyFWw9l+4MgkuA8= -----END CERTIFICATE-----Generated at Tue Sep 29 03:39:04 2026 by rpki-client