$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3117d42-d5b8-3316-afa1-5b3198177348.roa File: a3117d42-d5b8-3316-afa1-5b3198177348.roa (raw, json) Hash identifier: otklQRemuCsoqr0SFxrTisq5oSSiJk5fAZ9QyuHs5/w= Subject key identifier: F3:41:25:C3:6E:2C:F2:DE:29:9D:4F:2A:1D:7D:7D:33:05:67:18:CE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983D4F2B57AD18561F32980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3117d42-d5b8-3316-afa1-5b3198177348.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:d4:f2:b5:7a:d1:85:61:f3:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ed83c567-b317-4cd9-a9af-42ecc1cdaa9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:16:fa:d5:84:c3:58:45:b2:17:61:f9:33:88: 39:27:03:91:7f:f8:fa:60:a6:a6:4a:c6:da:46:5e: df:50:61:a5:a1:89:dd:4b:4b:e9:33:84:af:bf:95: c4:f1:18:01:e6:ba:71:b1:cc:35:d7:78:39:c1:8e: bd:47:d0:d4:a7:f3:fa:12:fa:44:ad:15:0c:a5:4f: c8:9b:7c:f9:67:7e:fc:00:77:fb:f5:3a:76:1e:4e: 35:f4:83:f9:b9:bd:d2:e0:df:07:84:12:fc:c0:66: e9:37:a9:66:e6:b4:59:4c:76:6e:96:5d:b1:6f:83: c0:57:ef:70:84:57:0c:8b:d8:31:d3:15:96:1f:e5: 49:18:f6:1a:16:99:ce:6e:12:64:b3:44:6c:8a:b5: b2:7a:7c:13:6b:d1:9e:37:62:54:02:e0:0c:43:aa: 8f:34:09:68:d4:a9:42:27:9c:c1:28:c9:02:53:d1: aa:fa:e6:6c:2b:8c:39:3f:b9:c6:e2:cb:a6:19:be: be:1b:6e:6a:87:3f:df:59:a2:57:4f:51:b6:72:0b: 73:ea:f0:7f:c7:9e:a3:8e:39:c9:6c:a9:7c:81:4c: 55:b5:4d:40:de:3e:bd:a0:49:80:17:e0:bd:59:0a: f1:de:88:13:69:7b:fd:03:1d:f2:e8:99:d7:06:5f: f6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:41:25:C3:6E:2C:F2:DE:29:9D:4F:2A:1D:7D:7D:33:05:67:18:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3117d42-d5b8-3316-afa1-5b3198177348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:aa:1e:75:9a:16:df:fa:04:00:83:81:64:f4:03:94:36:84: b1:00:6c:d8:16:ac:1f:25:ae:3f:b1:3c:37:32:c5:d1:57:7e: 6d:03:34:5e:11:32:a6:c0:db:d2:09:62:59:b9:c0:91:ea:e3: 6a:40:8b:b6:fc:bb:47:75:5f:f9:64:b8:a1:76:8c:10:81:69: 3b:a6:a8:99:66:ac:96:92:ef:0a:d1:be:5e:df:79:64:23:38: 1e:5f:7b:be:13:51:0a:85:d6:2a:31:1a:31:33:06:e1:0f:58: d6:e8:c4:ee:fb:42:0e:57:21:44:9c:8d:6c:5e:3c:fc:3e:16: 81:eb:e0:a5:45:85:c3:99:2b:6e:37:3e:d8:84:db:fd:1c:97: cf:bb:5e:b3:41:62:b7:9a:3e:79:1f:c7:61:00:96:d3:f6:a0: 96:cb:35:b3:ea:43:8c:92:69:fd:13:b5:fb:e1:74:9e:4b:4f: 66:89:58:b6:b8:e2:2a:5a:f6:25:69:d1:60:0c:85:8b:b4:4c: 03:9f:63:eb:df:f8:49:8f:b5:8e:70:3f:5c:f6:20:77:a8:12: 6c:02:09:73:84:49:d3:9e:26:d3:83:cf:29:93:d5:68:77:d1: bc:4c:bb:df:01:bd:fc:b1:25:1d:95:af:f0:f5:7d:e1:df:52: 15:4b:eb:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg9TytXrRhWHzKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWQ4M2M1NjctYjMxNy00Y2Q5LWE5YWYtNDJlY2MxY2RhYTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Rb61YTDWEWyF2H5M4g5JwORf/j6YKamSsba Rl7fUGGloYndS0vpM4Svv5XE8RgB5rpxscw113g5wY69R9DUp/P6EvpErRUMpU/I m3z5Z378AHf79Tp2Hk419IP5ub3S4N8HhBL8wGbpN6lm5rRZTHZull2xb4PAV+9w hFcMi9gx0xWWH+VJGPYaFpnObhJks0RsirWyenwTa9GeN2JUAuAMQ6qPNAlo1KlC J5zBKMkCU9Gq+uZsK4w5P7nG4sumGb6+G25qhz/fWaJXT1G2cgtz6vB/x56jjjnJ bKl8gUxVtU1A3j69oEmAF+C9WQrx3ogTaXv9Ax3y6JnXBl/2wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNBJcNuLPLeKZ1PKh19fTMFZxjOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTMxMTdkNDItZDViOC0z MzE2LWFmYTEtNWIzMTk4MTc3MzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJ5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMuqHnWaFt/6BACDgWT0A5Q2hLEAbNgWrB8lrj+xPDcyxdFXfm0DNF4R MqbA29IJYlm5wJHq42pAi7b8u0d1X/lkuKF2jBCBaTumqJlmrJaS7wrRvl7feWQj OB5fe74TUQqF1ioxGjEzBuEPWNboxO77Qg5XIUScjWxePPw+FoHr4KVFhcOZK243 PtiE2/0cl8+7XrNBYreaPnkfx2EAltP2oJbLNbPqQ4ySaf0TtfvhdJ5LT2aJWLa4 4ipa9iVp0WAMhYu0TAOfY+vf+EmPtY5wP1z2IHeoEmwCCXOESdOeJtODzymT1Wh3 0bxMu98BvfyxJR2Vr/D1feHfUhVL6zk= -----END CERTIFICATE-----Generated at Thu Oct 8 02:23:34 2026 by rpki-client