$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/908acec5-dff3-31a9-9913-a2e2cc620be8.roa File: 908acec5-dff3-31a9-9913-a2e2cc620be8.roa (raw, json) Hash identifier: 4poJH+KLGMbxpnIbzHVYwbnfo3Y1w0BEoaLd03qL36Y= Subject key identifier: 8F:50:76:E6:E2:F6:81:97:83:A8:EB:3A:34:4F:B4:2D:60:1B:97:BF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983D0E37D514625E5230080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/908acec5-dff3-31a9-9913-a2e2cc620be8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:d0:e3:7d:51:46:25:e5:23:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=de3bd7ed-8f0a-4cde-8fa0-881d7acf2da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2e:cf:16:8f:f4:15:71:1d:ed:d6:e3:bf:cb: a0:6b:8c:37:e5:48:d5:53:a9:32:83:6b:ab:4d:a3: 3c:22:b2:08:83:87:9d:f0:4c:55:ba:d0:fc:b4:07: 07:99:42:26:da:5d:b3:fb:3d:22:38:e0:b8:c2:4a: af:d5:a2:46:54:1a:77:6c:5d:4d:3c:a8:be:a9:ee: 35:03:d0:fb:a7:16:89:4a:4c:ad:e0:08:96:b9:9d: 77:c4:e2:84:6c:69:35:08:0e:81:03:ef:be:3b:88: a9:52:ee:e4:06:ce:6e:40:83:bb:c2:4a:ce:b7:dc: e7:49:61:2d:9f:9b:05:e0:f8:07:af:60:c0:bf:62: 9e:70:e2:70:bb:3f:9f:f4:a2:db:1e:bf:34:80:cc: 20:7f:08:d1:75:1b:ff:6e:76:39:44:18:f7:fb:4f: 56:7d:3e:df:b8:36:db:3f:ae:c6:8d:57:78:bb:fc: b1:97:2c:e2:73:d3:b2:04:85:a1:80:13:65:85:38: 7c:55:d2:db:17:a3:47:e3:cf:08:05:da:6b:c6:3d: d7:6e:1c:c5:0a:e1:b8:4f:c5:5c:d3:e3:bd:93:77: 86:d0:e8:6a:cc:25:47:3f:ec:03:be:02:9b:27:13: 28:75:0b:ea:10:8d:dd:a0:54:22:2a:42:06:6b:1a: bb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:50:76:E6:E2:F6:81:97:83:A8:EB:3A:34:4F:B4:2D:60:1B:97:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/908acec5-dff3-31a9-9913-a2e2cc620be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:3f:27:7e:08:42:35:a7:a0:4f:59:38:0f:4a:d1:bb:ff:a6: 65:d6:cb:38:94:fd:5a:da:4e:37:a4:28:09:c1:03:9e:ac:0b: 03:b2:14:01:47:45:01:99:49:e4:61:94:76:50:60:ac:63:0e: bc:64:2d:7f:75:e8:60:97:3c:12:a8:bd:f7:81:c0:f6:d9:a1: 3d:15:fc:dc:c4:64:1d:28:9a:96:ba:db:c6:07:b1:b1:5b:5c: 9c:9e:f6:ec:6b:48:46:51:1c:a3:3d:29:e1:98:ba:ce:6b:b4: c4:ec:d9:ac:a5:d1:49:da:4d:76:28:01:e1:9d:07:e1:a8:ea: 31:77:9b:67:5a:28:32:c5:d7:88:10:c1:87:ab:fc:f0:d9:f5: c6:85:20:2e:50:d6:92:54:8e:ec:f6:9a:19:24:49:46:e1:24: c7:af:58:34:35:72:6e:22:b2:ef:03:d8:d6:4b:b2:de:11:3f: 40:43:a6:11:cd:2c:26:b0:f3:c5:44:61:f7:34:41:b0:47:03: 4c:fd:80:48:ce:18:0c:79:3d:d6:84:23:c4:20:6f:e7:ad:d8: 34:75:04:8c:70:02:29:76:f1:5f:8a:7c:67:7e:cb:f2:0c:8e: 06:bd:32:54:c8:90:18:20:35:de:80:93:55:94:ad:90:ce:f5: 7b:a0:47:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg9DjfVFGJeUjAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGUzYmQ3ZWQtOGYwYS00Y2RlLThmYTAtODgxZDdhY2YyZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS7PFo/0FXEd7dbjv8uga4w35UjVU6kyg2ur TaM8IrIIg4ed8ExVutD8tAcHmUIm2l2z+z0iOOC4wkqv1aJGVBp3bF1NPKi+qe41 A9D7pxaJSkyt4AiWuZ13xOKEbGk1CA6BA+++O4ipUu7kBs5uQIO7wkrOt9znSWEt n5sF4PgHr2DAv2KecOJwuz+f9KLbHr80gMwgfwjRdRv/bnY5RBj3+09WfT7fuDbb P67GjVd4u/yxlyzic9OyBIWhgBNlhTh8VdLbF6NH488IBdprxj3XbhzFCuG4T8Vc 0+O9k3eG0OhqzCVHP+wDvgKbJxModQvqEI3doFQiKkIGaxq7/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9Qdubi9oGXg6jrOjRPtC1gG5e/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTA4YWNlYzUtZGZmMy0z MWE5LTk5MTMtYTJlMmNjNjIwYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMM/J34IQjWnoE9ZOA9K0bv/pmXWyziU/VraTjekKAnBA56sCwOyFAFH RQGZSeRhlHZQYKxjDrxkLX916GCXPBKovfeBwPbZoT0V/NzEZB0ompa628YHsbFb XJye9uxrSEZRHKM9KeGYus5rtMTs2ayl0UnaTXYoAeGdB+Go6jF3m2daKDLF14gQ wYer/PDZ9caFIC5Q1pJUjuz2mhkkSUbhJMevWDQ1cm4isu8D2NZLst4RP0BDphHN LCaw88VEYfc0QbBHA0z9gEjOGAx5PdaEI8Qgb+et2DR1BIxwAil28V+KfGd+y/IM jga9MlTIkBggNd6Ak1WUrZDO9XugR0A= -----END CERTIFICATE-----Generated at Sat Sep 26 15:21:16 2026 by rpki-client