$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8615eb89-654a-31a3-8f79-ae5d7f3bd9c7.roa File: 8615eb89-654a-31a3-8f79-ae5d7f3bd9c7.roa (raw, json) Hash identifier: y91OocHvsLsj3hWIaBWtImmwyNBEoq9+W7LLPZrEOyk= Subject key identifier: BA:A0:84:D6:01:21:9B:33:01:74:39:27:8D:16:01:4D:FC:AF:D3:C4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983CD4F58BCB22D9A07D300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8615eb89-654a-31a3-8f79-ae5d7f3bd9c7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:cd:4f:58:bc:b2:2d:9a:07:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c4f51b8f-3f3b-48a9-bece-bb1bf7144bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7b:04:c0:9d:89:f1:bd:52:6e:f3:fe:b9:fb: 08:a3:15:6d:fa:cb:34:18:b5:8d:b5:b5:ef:fb:7c: ef:23:35:3a:d7:33:80:4f:96:5c:b9:80:f8:f3:cd: 94:c4:77:98:77:8e:ce:33:9a:05:15:33:26:c0:9e: 3f:dd:3a:44:2d:93:b5:a8:17:de:c5:4c:5f:a5:f1: 4f:6e:96:8b:63:10:d1:84:53:93:78:b5:ef:59:2f: 47:0f:3f:65:42:70:21:e9:c7:31:4b:d4:48:1e:3a: 1a:90:14:47:d2:c9:bc:41:f7:40:b7:37:71:59:c1: a9:16:cc:dc:5b:4d:fb:f2:b6:b9:ef:7c:a0:5b:1e: 85:01:ae:e9:e1:42:62:6a:81:b6:4e:a8:46:f2:9d: f9:4e:2a:af:32:4b:cd:6d:e0:82:58:da:f4:0f:60: 57:78:67:ce:e9:2e:11:b1:71:6f:e9:bc:bf:04:bb: 8d:3e:b7:ea:2a:e5:71:05:76:75:9f:69:6e:30:93: 51:c5:d4:f6:3c:5b:94:77:99:e5:03:04:21:1f:56: 9e:ab:e4:e5:a2:76:f3:28:a0:0d:c3:75:b7:93:13: cd:a3:f2:e7:f1:3e:11:78:36:a0:c0:70:cd:71:2c: f1:5f:ec:b3:2f:ab:af:08:4b:4e:66:4b:7d:7c:67: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A0:84:D6:01:21:9B:33:01:74:39:27:8D:16:01:4D:FC:AF:D3:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8615eb89-654a-31a3-8f79-ae5d7f3bd9c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:cb:4f:a4:fc:cc:14:e4:ec:1d:34:f0:bb:da:aa:6f:36:12: ad:d0:84:31:ff:fc:6a:c2:36:ee:0d:32:71:01:b3:6b:89:fb: ea:9e:b7:a1:d0:23:86:78:c7:2f:93:35:46:e4:88:bb:a6:99: 5e:05:2a:38:3b:bf:82:b5:60:e6:21:1b:bc:48:0d:32:80:fc: a1:d0:46:34:0b:d4:de:45:a5:fd:f0:b3:b8:0a:b8:c3:7c:9e: 7a:d0:82:e7:c8:96:f4:c3:18:d1:e2:14:0a:47:80:30:a6:b9: 91:99:20:22:0e:5b:df:4b:f0:81:30:05:4e:8b:55:04:ae:28: a6:bc:1a:a9:47:32:e1:b6:94:e9:d5:f1:3c:81:70:4d:b0:16: 19:b2:2a:f1:3b:01:94:a2:e4:33:df:56:1c:9d:e1:d6:9b:9a: 66:02:e8:33:4e:26:60:94:75:4c:a4:74:f0:fc:77:bb:23:45: f0:de:67:48:0e:d5:8a:e2:be:46:37:0b:48:15:77:d9:a6:66: 67:23:35:da:7f:86:d7:c2:8f:c3:e8:cf:0e:ef:57:43:49:42: c6:87:aa:31:ea:17:16:0f:12:63:c9:96:a6:11:50:78:4b:4c: b3:21:fc:59:13:b5:aa:0a:ac:37:76:36:13:1c:4e:20:e8:cb: 45:46:1e:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg81PWLyyLZoH0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzRmNTFiOGYtM2YzYi00OGE5LWJlY2UtYmIxYmY3MTQ0YmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3sEwJ2J8b1SbvP+ufsIoxVt+ss0GLWNtbXv +3zvIzU61zOAT5ZcuYD4882UxHeYd47OM5oFFTMmwJ4/3TpELZO1qBfexUxfpfFP bpaLYxDRhFOTeLXvWS9HDz9lQnAh6ccxS9RIHjoakBRH0sm8QfdAtzdxWcGpFszc W0378ra573ygWx6FAa7p4UJiaoG2TqhG8p35TiqvMkvNbeCCWNr0D2BXeGfO6S4R sXFv6by/BLuNPrfqKuVxBXZ1n2luMJNRxdT2PFuUd5nlAwQhH1aeq+TlonbzKKAN w3W3kxPNo/Ln8T4ReDagwHDNcSzxX+yzL6uvCEtOZkt9fGfQwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqghNYBIZszAXQ5J40WAU38r9PEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODYxNWViODktNjU0YS0z MWEzLThmNzktYWU1ZDdmM2JkOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbLT6T8zBTk7B008Lvaqm82Eq3QhDH//GrCNu4NMnEBs2uJ++qet6HQ I4Z4xy+TNUbkiLummV4FKjg7v4K1YOYhG7xIDTKA/KHQRjQL1N5Fpf3ws7gKuMN8 nnrQgufIlvTDGNHiFApHgDCmuZGZICIOW99L8IEwBU6LVQSuKKa8GqlHMuG2lOnV 8TyBcE2wFhmyKvE7AZSi5DPfVhyd4dabmmYC6DNOJmCUdUykdPD8d7sjRfDeZ0gO 1YrivkY3C0gVd9mmZmcjNdp/htfCj8Pozw7vV0NJQsaHqjHqFxYPEmPJlqYRUHhL TLMh/FkTtaoKrDd2NhMcTiDoy0VGHqc= -----END CERTIFICATE-----Generated at Mon Oct 5 00:47:35 2026 by rpki-client