$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a03c8890-91ef-36f6-b735-c81baa1583e9.roa File: a03c8890-91ef-36f6-b735-c81baa1583e9.roa (raw, json) Hash identifier: 8ax7V3Ms5NGAdfPAnWJwwVriOyMFzwEfzWDYD+Y6clg= Subject key identifier: D6:0F:AC:65:C8:78:59:2F:E1:DB:91:03:09:04:EB:E5:4B:A5:E8:B6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BADA5258C9773BC8E2480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a03c8890-91ef-36f6-b735-c81baa1583e9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:ad:a5:25:8c:97:73:bc:8e:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a9a09555-bb4c-458e-8a7b-2c7eac8bcf7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0b:6a:d3:36:f3:91:06:20:85:78:e3:fe:d5: db:0b:50:ac:10:c5:e6:c1:85:c4:a1:54:fe:ca:93: b5:6e:15:fb:de:91:5e:a7:43:21:c2:ba:bf:55:85: 5c:15:88:0b:19:2d:6f:b6:88:fa:69:73:71:37:07: e1:ec:1f:1f:f8:83:01:7c:3a:19:34:d8:27:24:1a: 64:93:41:a9:64:1d:a5:9f:ef:7e:04:6d:4e:62:b1: 86:86:93:eb:ff:4c:2e:d8:bf:d7:5f:8a:e8:3f:5a: c8:3f:77:90:01:bf:bb:ca:b3:78:bd:81:b5:55:3d: fc:e8:76:06:f2:c1:20:49:a1:a5:cf:a4:d3:c8:da: 62:e9:ed:a8:87:a3:8b:a9:3f:94:0b:d4:e0:73:52: 63:8b:a1:66:05:1b:10:65:33:1d:fd:d6:19:46:a2: 5c:08:54:af:f7:9f:3c:b4:db:17:41:d0:c4:7f:b8: 37:c4:dd:56:c7:7f:20:47:3c:a2:ba:bc:80:91:d3: b1:65:02:da:17:4b:18:20:de:05:49:26:86:1a:88: 2d:5b:4e:be:b6:49:b3:b9:29:18:3d:83:aa:20:2e: 83:a7:56:b3:88:4a:92:87:f5:99:de:dd:e8:ab:c7: 3a:43:d4:9e:db:cc:9d:e5:18:a7:76:89:dc:9a:4c: 71:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0F:AC:65:C8:78:59:2F:E1:DB:91:03:09:04:EB:E5:4B:A5:E8:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a03c8890-91ef-36f6-b735-c81baa1583e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:bb:08:ee:37:1c:d7:67:29:f7:7c:fb:ff:69:49:17:90:62: 8b:5c:0f:34:34:ec:15:82:a8:0b:c1:e4:95:f7:e8:25:fe:ae: 4e:48:90:ba:77:e5:a9:e2:82:40:5a:a5:d1:a8:0a:b8:b2:52: 82:ec:bf:61:24:a6:65:74:13:71:61:7d:c2:1e:3c:b6:a1:5a: 8a:e9:a8:c1:a1:b6:f6:5c:64:3a:36:ea:96:a5:8d:76:bc:20: 05:18:97:f9:20:2d:6a:ad:76:7f:bd:9e:25:5a:cc:e9:e8:fd: de:8c:25:f9:49:75:bf:fb:67:fb:7b:6e:47:d3:77:f6:2e:71: c0:4f:c4:47:e3:8b:be:66:7e:a7:85:c0:ed:6f:dd:1d:ac:3c: 2b:a0:6e:77:9a:c9:db:33:88:30:56:e0:12:e9:75:73:b8:97: 72:a4:d0:02:57:49:6d:ac:bd:70:9a:96:bc:a9:c3:c7:dd:e2: c1:81:96:0a:bb:4d:de:ad:92:24:3b:5d:75:35:ec:41:df:b3: 2c:4d:ef:c0:9a:00:df:4c:3e:be:fe:bd:af:f5:cb:cd:3e:7e: 61:1e:67:16:6b:35:4d:96:4d:79:5a:9a:98:12:e9:e0:5d:f9: 41:b0:e6:54:48:4e:ce:bc:56:9a:61:6c:92:e1:7a:90:de:93: 76:ab:50:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je62lJYyXc7yOJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTlhMDk1NTUtYmI0Yy00NThlLThhN2ItMmM3ZWFjOGJjZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Atq0zbzkQYghXjj/tXbC1CsEMXmwYXEoVT+ ypO1bhX73pFep0Mhwrq/VYVcFYgLGS1vtoj6aXNxNwfh7B8f+IMBfDoZNNgnJBpk k0GpZB2ln+9+BG1OYrGGhpPr/0wu2L/XX4roP1rIP3eQAb+7yrN4vYG1VT386HYG 8sEgSaGlz6TTyNpi6e2oh6OLqT+UC9Tgc1Jji6FmBRsQZTMd/dYZRqJcCFSv9588 tNsXQdDEf7g3xN1Wx38gRzyiuryAkdOxZQLaF0sYIN4FSSaGGogtW06+tkmzuSkY PYOqIC6Dp1aziEqSh/WZ3t3oq8c6Q9Se28yd5RindoncmkxxXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYPrGXIeFkv4duRAwkE6+VLpei2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTAzYzg4OTAtOTFlZi0z NmY2LWI3MzUtYzgxYmFhMTU4M2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+7CO43HNdnKfd8+/9pSReQYotcDzQ07BWCqAvB5JX36CX+rk5IkLp3 5anigkBapdGoCriyUoLsv2EkpmV0E3FhfcIePLahWorpqMGhtvZcZDo26paljXa8 IAUYl/kgLWqtdn+9niVazOno/d6MJflJdb/7Z/t7bkfTd/YuccBPxEfji75mfqeF wO1v3R2sPCugbneaydsziDBW4BLpdXO4l3Kk0AJXSW2svXCalrypw8fd4sGBlgq7 Td6tkiQ7XXU17EHfsyxN78CaAN9MPr7+va/1y80+fmEeZxZrNU2WTXlampgS6eBd +UGw5lRITs68VpphbJLhepDek3arUJc= -----END CERTIFICATE-----Generated at Sat Sep 26 17:37:10 2026 by rpki-client