$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a07dd20-2bbb-332f-9dd9-941594ae0ed4.roa File: 8a07dd20-2bbb-332f-9dd9-941594ae0ed4.roa (raw, json) Hash identifier: EqPEVx3EQLYeA6Xky36pQ5HuMuLR5YCfXspD6iDH390= Subject key identifier: 57:D8:C4:27:41:8B:98:55:BD:79:86:40:F0:6F:A0:6B:CF:E9:3A:A7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983EAD9A5670E0F59A3C920 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a07dd20-2bbb-332f-9dd9-941594ae0ed4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:ea:d9:a5:67:0e:0f:59:a3:c9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1f68fb6c-0637-47b6-a6f6-043be198c387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:20:e8:fa:fd:1f:c8:d0:81:dc:a0:d0:b6:90: 9d:5c:9f:7f:25:8a:55:c1:3d:ac:dc:26:7c:9f:9b: 79:90:9a:6f:3f:96:96:45:f6:17:4f:e9:da:55:99: 5b:16:ce:63:b5:ab:80:05:3f:62:c1:23:5e:46:12: ba:71:43:c1:16:13:3f:a5:8a:5a:07:40:2d:f9:c7: a3:db:e1:0f:08:e6:0f:5b:3e:48:bb:bb:3a:e8:9d: dd:60:82:04:92:f2:da:26:6b:fa:65:7c:a4:46:0e: a1:0b:d3:d4:74:62:07:39:63:97:d3:b1:46:b2:a6: d9:a3:fb:f8:88:4a:83:d8:d6:70:04:06:4d:0e:e2: 19:2a:45:9e:66:dc:52:be:fa:79:f0:30:62:39:7f: 54:46:10:68:46:5a:cd:1a:4c:fa:f8:43:db:1e:49: 10:17:26:de:1b:b4:9b:bc:3a:81:4f:e6:36:82:92: 6d:9c:60:d1:98:ff:28:7f:02:f2:76:d7:df:60:cd: db:0a:41:1f:64:ff:6f:42:06:da:1f:8e:ec:88:69: 5f:43:9b:e0:5d:44:8e:18:f4:a8:f9:04:8f:0d:33: 38:f9:7c:9f:61:74:9d:f1:61:6d:99:cb:8a:a0:2c: 39:93:4e:d7:f3:ec:42:f3:4d:db:80:47:50:ea:90: 00:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D8:C4:27:41:8B:98:55:BD:79:86:40:F0:6F:A0:6B:CF:E9:3A:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a07dd20-2bbb-332f-9dd9-941594ae0ed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:41:63:ee:f6:bc:41:87:2f:cf:26:b7:87:53:fb:3a:12:70: 7f:9a:96:6b:cc:eb:06:99:63:e8:85:b3:48:d9:10:5d:e5:ab: fd:3d:0e:9d:d1:4f:a3:98:cf:54:fc:33:93:55:e2:33:b1:b6: e1:b7:cc:c8:dc:78:e6:4c:94:97:0b:be:57:c2:fd:f2:38:6d: c8:12:1d:ba:df:98:39:b4:cd:9e:11:44:25:08:6e:50:38:32: 08:01:e2:9d:38:3a:82:f3:f0:4c:ae:12:27:e9:60:87:a4:19: a5:2f:1c:13:ed:b7:bc:90:c0:f3:6f:c2:7e:18:7e:54:34:72: b3:80:d2:ee:de:00:cb:27:bf:15:5e:a7:a4:12:34:e1:a6:55: 84:ea:ef:c3:ee:ae:dc:c5:64:0b:19:4e:41:ba:87:11:a3:2e: d4:1c:71:aa:fa:2c:4d:75:45:ec:63:c9:64:e3:1d:47:5b:09: cc:a4:c4:94:0d:f8:f5:29:63:1d:ea:13:25:f8:1a:15:6d:f7: 52:15:17:04:15:68:66:aa:44:79:59:a3:97:bd:a0:b8:f0:a1: 2a:02:08:52:3e:f0:26:d7:77:bd:2c:40:21:52:13:ad:5d:62: 1c:d6:f0:3b:15:eb:e0:ca:0c:00:d1:67:58:bd:d7:34:2f:78: 0e:36:bf:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg+rZpWcOD1mjySAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWY2OGZiNmMtMDYzNy00N2I2LWE2ZjYtMDQzYmUxOThjMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyDo+v0fyNCB3KDQtpCdXJ9/JYpVwT2s3CZ8 n5t5kJpvP5aWRfYXT+naVZlbFs5jtauABT9iwSNeRhK6cUPBFhM/pYpaB0At+cej 2+EPCOYPWz5Iu7s66J3dYIIEkvLaJmv6ZXykRg6hC9PUdGIHOWOX07FGsqbZo/v4 iEqD2NZwBAZNDuIZKkWeZtxSvvp58DBiOX9URhBoRlrNGkz6+EPbHkkQFybeG7Sb vDqBT+Y2gpJtnGDRmP8ofwLydtffYM3bCkEfZP9vQgbaH47siGlfQ5vgXUSOGPSo +QSPDTM4+XyfYXSd8WFtmcuKoCw5k07X8+xC803bgEdQ6pAA9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfYxCdBi5hVvXmGQPBvoGvP6TqnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGEwN2RkMjAtMmJiYi0z MzJmLTlkZDktOTQxNTk0YWUwZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpBY+72vEGHL88mt4dT+zoScH+almvM6waZY+iFs0jZEF3lq/09Dp3R T6OYz1T8M5NV4jOxtuG3zMjceOZMlJcLvlfC/fI4bcgSHbrfmDm0zZ4RRCUIblA4 MggB4p04OoLz8EyuEifpYIekGaUvHBPtt7yQwPNvwn4YflQ0crOA0u7eAMsnvxVe p6QSNOGmVYTq78PurtzFZAsZTkG6hxGjLtQccar6LE11RexjyWTjHUdbCcykxJQN +PUpYx3qEyX4GhVt91IVFwQVaGaqRHlZo5e9oLjwoSoCCFI+8CbXd70sQCFSE61d YhzW8DsV6+DKDADRZ1i91zQveA42v6E= -----END CERTIFICATE-----Generated at Fri Sep 25 22:29:14 2026 by rpki-client