$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9d396f3-b384-32f0-a298-d58e2d50d0a4.roa File: a9d396f3-b384-32f0-a298-d58e2d50d0a4.roa (raw, json) Hash identifier: 29FBWwXydiHPHM549w9OUPF7nh2I9Fxhusc9iJqMUYM= Subject key identifier: 6A:61:13:2B:CA:B7:D8:6B:8E:1D:3E:6B:F2:F4:8C:F6:FB:D8:58:5E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BFF6A5D9A26FBC392C100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9d396f3-b384-32f0-a298-d58e2d50d0a4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 198.45.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:ff:6a:5d:9a:26:fb:c3:92:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b9e06ae2-33aa-413a-88a6-dc53545ddb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fd:d6:8f:a1:17:a1:d4:e5:34:c8:fd:86:37: 3c:c5:9c:be:5b:b7:47:d1:e9:a4:a6:7f:4d:76:31: 90:a2:44:99:ff:1f:db:69:4e:4d:76:6c:08:dc:7b: 81:41:3e:9e:6c:10:4a:ca:45:e2:f5:16:79:65:51: c4:ef:f4:61:95:0b:16:aa:3d:ac:19:35:8d:90:90: 4f:36:83:f7:9a:71:7c:fa:db:33:38:f2:fe:86:08: f8:b0:e8:87:31:5f:60:8e:18:27:07:d2:ef:09:e4: a0:65:01:fd:5e:7b:53:a4:f1:c6:38:1c:46:94:74: 18:c4:49:68:05:ce:ab:a3:92:8d:18:83:b7:71:fd: 50:79:d6:63:2b:b7:8a:fb:14:41:8e:e6:51:4c:ce: 44:a8:2f:33:40:a2:54:89:0c:a9:5f:14:d6:dc:c6: 58:e1:d3:da:a0:74:b7:b6:22:e0:9a:86:59:a9:d1: 76:92:78:ec:f6:6b:8b:51:08:11:90:fc:cf:39:89: 83:e5:4d:46:d4:8a:b6:03:8b:76:df:f6:61:bd:c3: 53:1c:f1:20:2d:1d:1b:00:45:38:41:ba:ee:70:a3: 6c:7e:5f:d2:10:c4:24:af:8b:fa:16:25:9e:15:64: 89:81:56:89:af:4b:dc:88:c2:09:44:f0:10:b1:9e: dd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:61:13:2B:CA:B7:D8:6B:8E:1D:3E:6B:F2:F4:8C:F6:FB:D8:58:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9d396f3-b384-32f0-a298-d58e2d50d0a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d4:de:1f:d9:bb:5a:9c:d9:de:cf:16:19:8e:5e:f5:f5:57: 51:b1:30:29:91:42:5a:bb:0f:37:ae:0a:dd:80:6c:7f:e0:6c: 49:62:46:7b:0f:25:12:f8:10:57:62:53:75:82:35:bc:8e:17: 4a:13:59:d4:2a:82:2e:83:9c:d9:0b:e4:c8:93:63:bc:39:c6: 07:49:dd:19:7b:fa:fd:20:4f:ef:ba:c7:39:2f:17:26:85:2d: ab:ac:f3:14:86:76:c4:d0:01:87:a4:c6:ff:52:c1:1a:52:6c: 9b:89:3e:71:75:17:59:da:d3:c7:74:a3:2d:1c:3f:68:c2:2e: 20:ef:0f:2a:ef:95:35:7f:c2:78:f7:72:ac:db:58:aa:ae:72: ac:6b:6d:03:23:1d:6b:7d:98:fe:4b:34:1a:1b:8d:23:1d:df: 76:6e:8e:e8:d7:d8:dd:f8:2b:1f:44:ba:da:dc:37:f0:79:b0: e9:6f:3b:1e:13:ef:24:a1:76:50:60:5e:99:70:a2:dc:78:3a: d6:48:0a:ac:86:8e:c6:eb:48:e7:56:e6:ab:f4:5b:27:b1:06: 9d:65:fe:0b:c2:8d:b3:17:f4:4f:d5:bf:cf:fd:64:2e:ea:a2: 62:95:af:9f:ef:68:f9:47:38:0e:38:fc:17:d5:69:0a:61:b6: d9:c4:d2:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je/9qXZom+8OSwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjllMDZhZTItMzNhYS00MTNhLTg4YTYtZGM1MzU0NWRkYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf3Wj6EXodTlNMj9hjc8xZy+W7dH0emkpn9N djGQokSZ/x/baU5NdmwI3HuBQT6ebBBKykXi9RZ5ZVHE7/RhlQsWqj2sGTWNkJBP NoP3mnF8+tszOPL+hgj4sOiHMV9gjhgnB9LvCeSgZQH9XntTpPHGOBxGlHQYxElo Bc6ro5KNGIO3cf1QedZjK7eK+xRBjuZRTM5EqC8zQKJUiQypXxTW3MZY4dPaoHS3 tiLgmoZZqdF2knjs9muLUQgRkPzPOYmD5U1G1Iq2A4t23/ZhvcNTHPEgLR0bAEU4 QbrucKNsfl/SEMQkr4v6FiWeFWSJgVaJr0vciMIJRPAQsZ7dIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGphEyvKt9hrjh0+a/L0jPb72FheMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTlkMzk2ZjMtYjM4NC0z MmYwLWEyOTgtZDU4ZTJkNTBkMGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHU3h/Zu1qc2d7PFhmOXvX1V1GxMCmRQlq7DzeuCt2AbH/gbEliRnsP JRL4EFdiU3WCNbyOF0oTWdQqgi6DnNkL5MiTY7w5xgdJ3Rl7+v0gT++6xzkvFyaF Laus8xSGdsTQAYekxv9SwRpSbJuJPnF1F1na08d0oy0cP2jCLiDvDyrvlTV/wnj3 cqzbWKqucqxrbQMjHWt9mP5LNBobjSMd33ZujujX2N34Kx9EutrcN/B5sOlvOx4T 7yShdlBgXplwotx4OtZICqyGjsbrSOdW5qv0WyexBp1l/gvCjbMX9E/Vv8/9ZC7q omKVr5/vaPlHOA44/BfVaQphttnE0hE= -----END CERTIFICATE-----Generated at Wed Sep 30 19:46:47 2026 by rpki-client