$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa File: 97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa (raw, json) Hash identifier: aILlM8QkB6sH54XYN3y83b0TdF/PYqjXivZQZHizgzM= Subject key identifier: FA:63:92:15:0C:E3:0A:C0:4D:6A:88:74:CA:E8:1C:60:6B:C3:58:5E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BA0F5F6167F39D6AD6A80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:a0:f5:f6:16:7f:39:d6:ad:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=33ca46c5-b0e7-485f-b549-b3e5cb42a2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ad:fe:f9:46:b0:12:19:f5:37:82:18:19:eb: 2a:94:ac:23:82:ec:98:00:3f:b7:86:cb:d2:5a:97: 9c:75:49:b8:3c:a5:97:78:bf:4f:f8:6f:30:56:ab: 8d:f9:de:a6:7d:d2:c4:70:84:59:33:17:16:eb:57: 9d:b8:98:fb:b3:2c:99:b9:57:44:bd:ba:4b:24:19: cc:33:1e:b9:1a:6d:aa:5e:44:98:5e:29:6b:80:bb: 2c:12:2b:84:ec:bf:d5:34:75:fd:b5:96:e9:97:d0: c1:9e:9b:c3:e2:ae:6e:43:bc:61:48:fa:d8:33:80: ca:b0:7e:7e:9e:10:59:9d:c8:1c:aa:c1:c5:21:53: d7:df:ed:8e:07:c8:bc:9b:c4:7f:a6:ae:78:0b:f7: 7c:fc:3e:c4:a8:47:a8:5e:d5:dd:4f:6a:0f:cc:10: e9:a2:07:92:c8:7c:28:9c:da:6d:92:a1:85:0b:68: e9:cf:ee:5f:ec:18:e3:f7:50:1c:93:28:13:f1:c8: 50:81:92:6b:4a:d4:0a:98:8b:0a:27:9f:28:4c:05: a5:ff:69:0f:9b:c7:b7:4f:2d:92:76:81:a8:fa:2c: 9b:ee:b3:df:30:27:02:f1:4c:73:3f:12:9c:f3:4d: 28:a5:41:19:c8:67:25:cf:5c:37:1c:0a:b2:08:1f: 9c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:63:92:15:0C:E3:0A:C0:4D:6A:88:74:CA:E8:1C:60:6B:C3:58:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:7c:1e:b2:e9:7c:16:1f:f6:bc:4f:00:95:28:c4:37:e7:da: e3:b0:a9:71:4c:00:3e:c9:f6:c6:05:fc:a5:b1:43:f1:64:f9: 77:cc:27:3e:fc:6c:0f:27:94:31:3b:bd:ce:6d:27:f9:80:94: 33:5d:1f:07:14:c0:42:23:5b:dc:58:ef:1f:ca:4d:d0:11:2e: 12:23:63:50:43:29:27:ae:0e:a7:e5:db:13:e6:31:b8:fe:89: b3:24:61:93:6b:e9:d7:a0:2c:6e:0d:64:0a:05:22:54:74:bc: f9:22:9a:37:d5:01:d0:ca:1f:0a:52:69:3c:09:3b:d8:6d:40: 0d:c5:d4:ab:14:7c:05:73:82:2e:cf:f7:6d:ab:d1:23:0a:50: 1d:53:03:7f:a2:ef:73:39:6b:70:97:3c:fd:57:b1:fd:d2:7e: aa:31:5f:20:b3:ae:55:d9:c7:72:a9:ef:5f:1a:3f:00:69:97: a1:5c:48:8f:ca:c3:0f:92:ec:6b:02:3e:2f:e5:4e:aa:1e:8d: 2f:dc:7c:2b:63:fa:1a:6c:e9:be:20:86:22:ce:53:bd:b6:95: a3:8d:99:76:1c:f0:88:ae:47:01:81:fe:ce:8d:e3:bd:14:8e: 71:13:14:b7:b2:80:af:6d:ed:c9:91:cf:c7:78:0b:98:4a:bd: d8:7a:ad:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je6D19hZ/OdataoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzNjYTQ2YzUtYjBlNy00ODVmLWI1NDktYjNlNWNiNDJhMmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq3++UawEhn1N4IYGesqlKwjguyYAD+3hsvS WpecdUm4PKWXeL9P+G8wVquN+d6mfdLEcIRZMxcW61eduJj7syyZuVdEvbpLJBnM Mx65Gm2qXkSYXilrgLssEiuE7L/VNHX9tZbpl9DBnpvD4q5uQ7xhSPrYM4DKsH5+ nhBZncgcqsHFIVPX3+2OB8i8m8R/pq54C/d8/D7EqEeoXtXdT2oPzBDpogeSyHwo nNptkqGFC2jpz+5f7Bjj91AckygT8chQgZJrStQKmIsKJ58oTAWl/2kPm8e3Ty2S doGo+iyb7rPfMCcC8UxzPxKc800opUEZyGclz1w3HAqyCB+cUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpjkhUM4wrATWqIdMroHGBrw1heMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTdhZTI2NDAtMjZhZC0z YTY4LWI4M2QtN2QyYmIwYmQ1OTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGt8HrLpfBYf9rxPAJUoxDfn2uOwqXFMAD7J9sYF/KWxQ/Fk+XfMJz78 bA8nlDE7vc5tJ/mAlDNdHwcUwEIjW9xY7x/KTdARLhIjY1BDKSeuDqfl2xPmMbj+ ibMkYZNr6degLG4NZAoFIlR0vPkimjfVAdDKHwpSaTwJO9htQA3F1KsUfAVzgi7P 922r0SMKUB1TA3+i73M5a3CXPP1Xsf3SfqoxXyCzrlXZx3Kp718aPwBpl6FcSI/K ww+S7GsCPi/lTqoejS/cfCtj+hps6b4ghiLOU722laONmXYc8IiuRwGB/s6N470U jnETFLeygK9t7cmRz8d4C5hKvdh6rWk= -----END CERTIFICATE-----Generated at Tue Sep 29 13:38:13 2026 by rpki-client