$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad57ab2b-0c0f-3449-9ff5-5e96282dda08.roa File: ad57ab2b-0c0f-3449-9ff5-5e96282dda08.roa (raw, json) Hash identifier: GIqt5FuOp31zHcyd2febWdM7GmDygqqiDAGRc/kSrpc= Subject key identifier: 76:16:A0:32:E6:79:0E:C9:C6:02:1B:0C:BB:BA:13:9D:21:B0:CD:16 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BA0EA9166295C144E4880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad57ab2b-0c0f-3449-9ff5-5e96282dda08.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:a0:ea:91:66:29:5c:14:4e:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fd8e9190-ad58-4d5e-9133-04b0ab7fd165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e1:2b:0d:a5:b8:42:c0:e8:bb:2e:b5:2f:4d: 92:32:6e:73:24:68:92:34:f6:f4:da:cc:2e:9b:94: d3:03:c0:68:b9:e6:73:78:08:e2:39:bd:97:a9:b8: 3c:4d:b7:d8:9c:ce:bd:5a:96:a3:1c:c9:41:d2:0e: a4:83:06:e3:54:c5:33:31:1d:7f:e6:72:95:15:3d: 92:4e:46:47:25:f8:7a:cf:4f:0c:d1:93:39:6a:5b: cb:01:f3:94:13:a0:39:0e:ac:60:94:02:50:d5:d5: 41:37:ae:b6:a7:db:7e:96:3d:f3:8d:d2:29:04:fa: c1:6f:fa:0a:d6:b1:ba:81:f6:95:94:6e:ce:5a:ef: 29:b3:90:1b:f8:1c:b4:33:e2:da:95:19:94:3b:55: 52:3d:79:f3:2f:af:4e:a1:09:87:b0:8a:42:8f:b2: e5:38:5c:4c:56:8e:2d:5b:e5:5b:cf:f6:d2:16:b4: 68:c1:85:52:7c:13:64:78:b5:92:9a:59:db:e9:81: 3b:b2:c6:02:38:7d:1c:a2:4f:78:ae:84:64:ee:7c: c6:20:9b:43:1d:c9:6c:15:e8:9c:6a:ed:c0:da:9b: 1e:c6:f2:bd:35:79:77:a6:72:19:83:92:03:45:d5: c1:73:2d:63:2b:e6:07:ed:f1:b8:01:47:4e:55:fa: ad:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:16:A0:32:E6:79:0E:C9:C6:02:1B:0C:BB:BA:13:9D:21:B0:CD:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad57ab2b-0c0f-3449-9ff5-5e96282dda08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:65:52:b7:62:52:b9:f4:64:46:e2:69:d6:c5:02:1a:4e:cd: b5:6b:03:71:03:e0:9d:64:39:da:e7:f9:1a:13:7e:14:00:f3: 7e:d6:f0:c4:c4:11:8b:3e:3d:7d:aa:ec:e0:1a:98:21:d8:02: ba:08:1d:cc:b4:e3:1c:29:15:2b:70:ee:01:62:99:56:ff:75: ed:71:5e:07:1b:71:9a:67:cf:0a:84:58:70:8e:6f:df:76:ab: e8:36:d3:82:5f:a0:37:e5:a0:e9:e8:c0:c9:b9:e7:9f:81:1a: 21:d8:ad:ea:31:81:5e:fe:ed:a8:16:e6:88:48:1f:ce:21:5e: 30:78:84:b4:0b:7a:64:d8:e8:27:83:6a:da:b0:bd:80:2b:a2: d0:7a:1d:cd:bc:a5:c9:4c:f5:b9:f3:8a:f4:f2:c3:3f:3f:e6: 25:20:ef:ac:ca:71:5e:fa:6e:48:c2:ae:47:d1:dd:54:ce:bb: 96:41:42:42:ee:60:8d:10:9b:c9:d1:53:76:19:e6:ea:7d:bd: 90:02:2e:35:3c:7c:16:8a:f1:82:99:04:c7:f6:af:1c:dc:15: 64:f1:5a:19:99:c6:34:e9:c5:60:09:8f:22:e0:19:aa:02:32: 9d:e5:89:79:b4:4c:ad:40:36:83:21:6c:68:d0:60:63:d9:d0: 33:a0:ec:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je6DqkWYpXBROSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmQ4ZTkxOTAtYWQ1OC00ZDVlLTkxMzMtMDRiMGFiN2ZkMTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+ErDaW4QsDouy61L02SMm5zJGiSNPb02swu m5TTA8BoueZzeAjiOb2Xqbg8TbfYnM69WpajHMlB0g6kgwbjVMUzMR1/5nKVFT2S TkZHJfh6z08M0ZM5alvLAfOUE6A5DqxglAJQ1dVBN662p9t+lj3zjdIpBPrBb/oK 1rG6gfaVlG7OWu8ps5Ab+By0M+LalRmUO1VSPXnzL69OoQmHsIpCj7LlOFxMVo4t W+Vbz/bSFrRowYVSfBNkeLWSmlnb6YE7ssYCOH0cok94roRk7nzGIJtDHclsFeic au3A2psexvK9NXl3pnIZg5IDRdXBcy1jK+YH7fG4AUdOVfqtawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYWoDLmeQ7JxgIbDLu6E50hsM0WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWQ1N2FiMmItMGMwZi0z NDQ5LTlmZjUtNWU5NjI4MmRkYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAplUrdiUrn0ZEbiadbFAhpOzbVrA3ED4J1kOdrn+RoTfhQA837W8MTE EYs+PX2q7OAamCHYAroIHcy04xwpFStw7gFimVb/de1xXgcbcZpnzwqEWHCOb992 q+g204JfoDfloOnowMm555+BGiHYreoxgV7+7agW5ohIH84hXjB4hLQLemTY6CeD atqwvYArotB6Hc28pclM9bnzivTywz8/5iUg76zKcV76bkjCrkfR3VTOu5ZBQkLu YI0Qm8nRU3YZ5up9vZACLjU8fBaK8YKZBMf2rxzcFWTxWhmZxjTpxWAJjyLgGaoC Mp3liXm0TK1ANoMhbGjQYGPZ0DOg7AU= -----END CERTIFICATE-----Generated at Thu Oct 8 11:32:48 2026 by rpki-client