$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9de78308-59ad-33b2-a95c-5da471104942.roa File: 9de78308-59ad-33b2-a95c-5da471104942.roa (raw, json) Hash identifier: cdoBVkL22kCTTYRfLeHB8NmLsEvxpJdU62hvaL7L0gs= Subject key identifier: 35:19:69:54:7D:14:89:61:FC:E6:31:34:74:92:C1:1D:E8:CC:ED:85 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B9CF332BB0A4AF2A6BE00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9de78308-59ad-33b2-a95c-5da471104942.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:9c:f3:32:bb:0a:4a:f2:a6:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cff41add-4a93-4908-9373-6a80454cb4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:15:67:ec:49:f2:31:f3:99:b8:1e:f7:88:86: 3b:c0:26:60:dc:4b:c5:16:2f:e8:0c:1c:5a:cb:b5: e4:f5:22:66:ed:d9:02:c6:9a:b6:0f:60:9e:9d:27: 34:70:b3:9f:34:80:b7:c8:e9:15:0b:b5:52:62:e7: 21:f9:1f:2f:4c:95:d8:e3:7e:19:78:2b:63:00:01: 8c:c9:3c:d5:ab:76:b2:da:6c:82:af:53:9f:36:14: b4:a5:f1:a8:e0:61:8c:29:eb:d6:04:a0:36:9d:8b: bc:d5:a6:87:04:a7:9f:d5:7e:0d:21:58:47:56:ef: 0d:d8:9b:49:f0:fe:8f:69:d6:63:03:80:b5:27:f0: 81:46:2c:55:71:a8:57:b9:f4:e5:29:2f:a2:7b:9c: 0a:ac:75:f8:02:6b:f8:f7:a4:ac:05:69:50:92:cd: 3c:37:25:97:83:f7:6f:c9:38:c9:70:2d:f5:b1:37: 79:de:4c:06:1b:10:0b:49:e8:80:29:da:98:76:a0: 58:72:34:30:ef:be:a7:4f:c9:5d:50:54:18:54:06: 38:d2:77:06:86:15:4d:2c:b5:4b:f2:f3:1b:d4:2d: f0:4f:41:ee:e8:ef:8f:c6:1b:58:71:e9:12:ec:90: 5f:de:3c:00:0e:0c:9d:fd:d2:b9:1b:a9:c9:3d:3e: b0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:19:69:54:7D:14:89:61:FC:E6:31:34:74:92:C1:1D:E8:CC:ED:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9de78308-59ad-33b2-a95c-5da471104942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:53:7d:ff:d9:25:97:6f:6c:c5:e4:70:36:18:92:12:1d:c9: 3f:27:8d:86:9c:2e:f1:28:bd:72:4a:31:a3:05:61:0a:9a:c1: 9a:2e:80:94:8a:57:f3:d5:6d:6e:3d:a9:b5:a7:9a:42:d5:a6: 20:ce:c5:0f:6f:60:1c:b7:7b:1c:66:f5:09:aa:64:51:4e:dc: b9:24:f8:0d:64:52:b7:ff:79:fc:da:a1:1a:bc:07:84:1a:e6: b8:42:39:61:d6:cd:04:d6:53:38:7e:66:b9:9f:0a:d8:c7:98: a6:db:4c:82:26:3e:2e:2a:a5:3a:40:9f:ae:77:57:20:bc:fa: e2:eb:75:85:1c:96:e0:48:8a:f9:ce:24:e5:ca:c1:28:49:b2: 1c:73:c0:a5:e2:b3:ad:a0:03:91:fd:94:1d:b1:f8:28:0c:09: c0:5a:c7:61:01:6a:0e:75:76:d6:00:e8:6b:85:2a:6d:ce:25: 87:5e:1c:87:1b:17:f1:8e:ac:6a:d5:b7:2d:b5:22:b4:48:f8: c2:96:dc:72:a4:0d:f9:20:46:98:59:c4:51:2f:ae:db:60:be: 88:55:d9:53:a9:e2:f7:84:f6:26:6b:9a:ea:45:27:5f:1b:36: f0:e1:4f:ad:5e:f5:5e:bd:13:38:ce:1d:48:a5:b3:cd:42:ee: c3:4a:62:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je5zzMrsKSvKmvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2ZmNDFhZGQtNGE5My00OTA4LTkzNzMtNmE4MDQ1NGNiNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxVn7EnyMfOZuB73iIY7wCZg3EvFFi/oDBxa y7Xk9SJm7dkCxpq2D2CenSc0cLOfNIC3yOkVC7VSYuch+R8vTJXY434ZeCtjAAGM yTzVq3ay2myCr1OfNhS0pfGo4GGMKevWBKA2nYu81aaHBKef1X4NIVhHVu8N2JtJ 8P6PadZjA4C1J/CBRixVcahXufTlKS+ie5wKrHX4Amv496SsBWlQks08NyWXg/dv yTjJcC31sTd53kwGGxALSeiAKdqYdqBYcjQw776nT8ldUFQYVAY40ncGhhVNLLVL 8vMb1C3wT0Hu6O+PxhtYcekS7JBf3jwADgyd/dK5G6nJPT6wFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUZaVR9FIlh/OYxNHSSwR3ozO2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWRlNzgzMDgtNTlhZC0z M2IyLWE5NWMtNWRhNDcxMTA0OTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9Tff/ZJZdvbMXkcDYYkhIdyT8njYacLvEovXJKMaMFYQqawZougJSK V/PVbW49qbWnmkLVpiDOxQ9vYBy3exxm9QmqZFFO3Lkk+A1kUrf/efzaoRq8B4Qa 5rhCOWHWzQTWUzh+ZrmfCtjHmKbbTIImPi4qpTpAn653VyC8+uLrdYUcluBIivnO JOXKwShJshxzwKXis62gA5H9lB2x+CgMCcBax2EBag51dtYA6GuFKm3OJYdeHIcb F/GOrGrVty21IrRI+MKW3HKkDfkgRphZxFEvrttgvohV2VOp4veE9iZrmupFJ18b NvDhT61e9V69EzjOHUils81C7sNKYqo= -----END CERTIFICATE-----Generated at Sat Oct 10 17:18:19 2026 by rpki-client