$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2002b14-896a-3c37-9c2d-2dc5e00ae522.roa File: a2002b14-896a-3c37-9c2d-2dc5e00ae522.roa (raw, json) Hash identifier: 9wuXiITeqF284kFQ4ZXsvMUVPVRH4h+j50s9HX1E6/E= Subject key identifier: 63:75:A8:02:6F:B9:A5:C5:6D:9B:3B:F5:13:CF:61:B5:89:72:C5:43 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BA6D76024344921320780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2002b14-896a-3c37-9c2d-2dc5e00ae522.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:a6:d7:60:24:34:49:21:32:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e3a9f675-4fbe-4ae6-87db-8022a0d6c258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b7:cb:0a:86:7d:70:4d:60:ba:8c:79:52:d1: 1c:7e:54:5c:66:88:59:21:68:c0:76:11:8a:e7:61: 2e:9f:8f:04:a8:1a:17:4b:b9:15:b1:7c:96:7f:f7: 24:dd:e4:88:c5:5c:08:dc:cf:cd:9f:3e:74:a9:bd: d0:58:3f:b2:5e:f4:2c:5e:90:ab:25:06:1b:f4:d6: a3:c9:25:52:b5:62:e7:f6:05:7e:64:7b:8c:7f:30: 9a:f5:8d:f4:d3:14:ce:87:1f:6f:c1:c0:2e:94:31: 07:20:17:5a:6f:03:6a:6c:e8:67:df:02:1c:7c:78: 3d:30:ca:91:d8:fb:07:fb:c7:db:94:46:f2:b9:7f: 8a:be:e5:05:d8:c9:0c:f9:49:45:7e:c2:47:a8:86: a7:40:50:10:10:de:23:24:cb:80:a9:a5:51:15:e4: 25:94:9d:71:db:ff:e2:31:2a:f9:70:67:92:2e:83: 29:f1:60:59:1e:09:ee:b9:70:d7:ab:6a:dc:4b:a4: 55:aa:f0:60:f8:be:29:f5:05:a8:b8:90:24:3d:69: 62:a3:7d:67:05:93:68:bd:e6:c4:a8:e8:f7:b6:b5: 00:af:16:75:cb:89:d4:a7:af:0e:2b:b1:aa:d4:de: 29:65:ba:b8:c3:cb:dd:14:e0:dc:10:29:f7:d4:c9: 4a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:75:A8:02:6F:B9:A5:C5:6D:9B:3B:F5:13:CF:61:B5:89:72:C5:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2002b14-896a-3c37-9c2d-2dc5e00ae522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:cc:13:6b:36:e8:e8:9d:73:dc:9f:09:d3:18:91:c0:89:18: 1f:f1:ae:f8:f7:79:ec:a0:47:2f:18:fd:fc:d8:95:2e:25:0d: c8:99:a6:83:24:a1:8e:3e:f3:98:e5:3f:3e:16:4b:25:fc:55: 47:d8:4c:66:a7:96:c7:f5:5b:58:30:9f:c5:96:7f:b0:14:3f: d2:1f:11:01:c6:23:82:3c:37:38:b6:de:b4:38:6f:0f:46:b4: 44:76:8b:aa:7e:12:07:c6:65:c2:82:42:68:49:72:70:87:3f: ee:a0:fc:34:a6:4f:96:e0:ee:5e:1f:0a:b9:96:da:7e:cf:83: d1:a8:ea:33:7e:4d:8e:6b:53:35:aa:f2:6a:50:70:f9:85:33: fb:05:8e:fc:d7:7e:af:b5:9c:b7:25:7c:b7:79:1b:05:5f:f1: a6:2e:24:8e:6c:ca:6c:75:e6:aa:51:2b:12:8b:ff:b2:bb:ac: 73:9d:84:68:76:31:c9:7f:16:04:6c:fc:1a:13:12:ad:b5:a5: b1:27:00:11:c2:c3:e3:83:3f:cd:92:8f:70:0c:f9:d2:99:24: f6:07:34:3d:ca:30:bd:14:ec:0a:34:99:99:d9:8d:bd:41:bf: 28:89:ec:18:60:21:f3:5e:ef:db:4c:2b:39:a5:16:5e:75:bd: ae:44:86:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je6bXYCQ0SSEyB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTNhOWY2NzUtNGZiZS00YWU2LTg3ZGItODAyMmEwZDZjMjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobfLCoZ9cE1guox5UtEcflRcZohZIWjAdhGK 52Eun48EqBoXS7kVsXyWf/ck3eSIxVwI3M/Nnz50qb3QWD+yXvQsXpCrJQYb9Naj ySVStWLn9gV+ZHuMfzCa9Y300xTOhx9vwcAulDEHIBdabwNqbOhn3wIcfHg9MMqR 2PsH+8fblEbyuX+KvuUF2MkM+UlFfsJHqIanQFAQEN4jJMuAqaVRFeQllJ1x2//i MSr5cGeSLoMp8WBZHgnuuXDXq2rcS6RVqvBg+L4p9QWouJAkPWlio31nBZNovebE qOj3trUArxZ1y4nUp68OK7Gq1N4pZbq4w8vdFODcECn31MlKvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGN1qAJvuaXFbZs79RPPYbWJcsVDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTIwMDJiMTQtODk2YS0z YzM3LTljMmQtMmRjNWUwMGFlNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLME2s26Oidc9yfCdMYkcCJGB/xrvj3eeygRy8Y/fzYlS4lDciZpoMk oY4+85jlPz4WSyX8VUfYTGanlsf1W1gwn8WWf7AUP9IfEQHGI4I8Nzi23rQ4bw9G tER2i6p+EgfGZcKCQmhJcnCHP+6g/DSmT5bg7l4fCrmW2n7Pg9Go6jN+TY5rUzWq 8mpQcPmFM/sFjvzXfq+1nLclfLd5GwVf8aYuJI5symx15qpRKxKL/7K7rHOdhGh2 Mcl/FgRs/BoTEq21pbEnABHCw+ODP82Sj3AM+dKZJPYHND3KML0U7Ao0mZnZjb1B vyiJ7BhgIfNe79tMKzmlFl51va5EhvU= -----END CERTIFICATE-----Generated at Sun Sep 27 11:57:22 2026 by rpki-client