$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/875e1d65-b3a3-3f98-a573-0d5574a74afe.roa File: 875e1d65-b3a3-3f98-a573-0d5574a74afe.roa (raw, json) Hash identifier: zf4j/iT3TXLf/IjJm9E9/vUuCnm9P/GV7sXQYTuCj0E= Subject key identifier: BA:07:16:5B:C7:D4:A8:AA:D9:76:82:31:D8:62:2F:0D:0E:FD:AC:F8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B8F6CCB6BDB82A8766940 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/875e1d65-b3a3-3f98-a573-0d5574a74afe.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:8f:6c:cb:6b:db:82:a8:76:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=57eef241-7afd-4697-8b82-550e2f1ffb91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6c:12:9f:80:56:6a:8e:45:5c:3d:8b:b2:9b: 7f:7f:a7:5d:74:3a:99:1e:ea:f0:f6:dc:75:e5:c7: 26:63:03:9e:27:79:1c:c9:75:a6:7c:dd:61:4e:5f: 6f:3a:58:a6:f5:e8:57:84:48:9f:28:83:37:6e:21: df:4b:35:00:d2:e9:90:d8:af:13:71:88:71:5a:f5: 28:3b:38:4a:5b:a0:03:49:d5:71:ad:74:34:93:2b: 37:31:ce:7e:51:85:89:5a:23:fd:29:33:76:80:81: f9:e0:6b:a1:79:cb:62:15:6e:db:83:97:2a:2c:a0: 3f:8a:80:6e:1c:80:1b:1b:95:b1:cf:94:a9:91:a7: 60:47:99:a6:2f:08:92:ee:0d:1e:d8:bd:10:e0:61: b3:a6:21:b4:be:2f:7c:03:d2:60:04:5a:e1:e3:da: 67:6c:75:d7:1c:c1:9d:8a:df:97:06:a4:88:d1:49: 53:12:ed:35:41:f0:3d:d7:7c:d4:f3:1b:69:42:b4: 7b:80:87:0d:79:9c:f7:34:3f:32:ba:b5:47:23:9c: 66:b8:a5:4c:28:2c:e2:03:1c:9f:d5:e6:db:fb:ac: 85:4b:25:78:18:bd:14:d8:b7:18:ab:33:37:19:32: 82:4c:ea:2b:01:40:b2:a2:fe:7b:c8:6c:3f:d9:17: d4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:07:16:5B:C7:D4:A8:AA:D9:76:82:31:D8:62:2F:0D:0E:FD:AC:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/875e1d65-b3a3-3f98-a573-0d5574a74afe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:7b:34:d6:d8:74:06:04:d5:e9:ff:5b:13:57:7e:ec:9b:b5: 40:7e:cb:9a:a0:87:8a:4b:38:a2:03:98:fe:72:dc:da:4e:97: 40:13:24:91:92:1d:3a:6d:dc:58:7e:2e:05:8d:b3:64:b2:ef: e3:34:8a:de:26:9f:05:cd:05:8b:61:61:b9:06:28:f7:45:60: 67:cf:41:2c:47:e3:b7:10:3c:64:f3:9a:3f:11:4a:3e:d8:4b: 2d:5f:07:26:09:87:18:f5:d1:07:ce:d8:fb:16:4c:80:34:4b: 89:cc:56:5e:24:8a:5b:37:f1:51:d0:12:ff:bd:02:a7:c9:e3: 3c:bb:d2:55:a7:d7:6c:29:4c:bc:96:b2:3b:4b:23:b3:1d:f1: ff:35:50:5a:42:8b:3a:5e:6d:70:ea:80:45:7b:c9:34:75:52: 4f:13:b6:89:98:ad:bb:df:d2:83:55:c3:e1:40:f2:c4:d8:3a: e3:a1:8b:0b:b5:27:ca:17:fe:cb:9f:df:55:ba:fa:d2:d7:1f: c2:ad:61:67:b9:f9:84:b3:9c:ec:59:94:0b:c0:d9:d6:1d:a5: ab:16:b1:62:6b:f6:cb:de:da:f8:dd:41:7a:47:3f:99:70:40: a8:16:95:e5:70:09:17:5a:a4:ac:f4:71:02:6d:e0:33:fa:9b: 57:1a:4e:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je49sy2vbgqh2aUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTdlZWYyNDEtN2FmZC00Njk3LThiODItNTUwZTJmMWZmYjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2wSn4BWao5FXD2Lspt/f6dddDqZHurw9tx1 5ccmYwOeJ3kcyXWmfN1hTl9vOlim9ehXhEifKIM3biHfSzUA0umQ2K8TcYhxWvUo OzhKW6ADSdVxrXQ0kys3Mc5+UYWJWiP9KTN2gIH54GuhectiFW7bg5cqLKA/ioBu HIAbG5Wxz5SpkadgR5mmLwiS7g0e2L0Q4GGzpiG0vi98A9JgBFrh49pnbHXXHMGd it+XBqSI0UlTEu01QfA913zU8xtpQrR7gIcNeZz3ND8yurVHI5xmuKVMKCziAxyf 1ebb+6yFSyV4GL0U2LcYqzM3GTKCTOorAUCyov57yGw/2RfUWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoHFlvH1Kiq2XaCMdhiLw0O/az4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODc1ZTFkNjUtYjNhMy0z Zjk4LWE1NzMtMGQ1NTc0YTc0YWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA97NNbYdAYE1en/WxNXfuybtUB+y5qgh4pLOKIDmP5y3NpOl0ATJJGS HTpt3Fh+LgWNs2Sy7+M0it4mnwXNBYthYbkGKPdFYGfPQSxH47cQPGTzmj8RSj7Y Sy1fByYJhxj10QfO2PsWTIA0S4nMVl4kils38VHQEv+9AqfJ4zy70lWn12wpTLyW sjtLI7Md8f81UFpCizpebXDqgEV7yTR1Uk8TtomYrbvf0oNVw+FA8sTYOuOhiwu1 J8oX/suf31W6+tLXH8KtYWe5+YSznOxZlAvA2dYdpasWsWJr9sve2vjdQXpHP5lw QKgWleVwCRdapKz0cQJt4DP6m1caTpE= -----END CERTIFICATE-----Generated at Sun Oct 4 12:03:55 2026 by rpki-client