$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa File: b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa (raw, json) Hash identifier: vB8yLXtUMhM/XpBBufXJa7yK3ln8RPwSX8ldBI5stWY= Subject key identifier: C4:5C:6B:41:C7:44:37:C8:0F:F4:48:62:9F:4A:0D:09:B0:B5:21:87 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983E8E9167A0A2CD82DD900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:e8:e9:16:7a:0a:2c:d8:2d:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=31790f3c-2a81-4386-bcd4-87a22203ff6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:de:9c:a1:c0:e7:22:86:58:04:a1:c0:b9: f8:6e:c7:4a:7e:91:9d:72:0f:6f:9e:63:b4:71:74: 0d:91:f2:28:30:85:c9:41:cb:20:ec:49:3a:12:69: 8b:15:65:43:96:98:67:34:49:cc:4d:2c:81:20:6b: 8a:aa:ba:7e:bb:e9:e1:eb:ae:96:f7:24:55:66:92: 8e:3a:3a:7a:bc:18:29:17:4f:10:9c:0e:6d:0f:75: fb:4d:af:4f:f6:ea:2f:e2:a7:c2:51:e1:e2:b6:b9: 9c:03:0b:86:fe:0a:0b:3c:07:1c:83:14:9f:18:f8: 3f:2b:1f:c2:d3:ac:9a:fd:da:75:be:dd:45:0f:fc: f7:9a:90:af:c7:f5:12:22:ba:28:23:47:6d:e3:c5: 7e:cf:3c:61:37:0f:19:4e:5c:d1:95:72:40:ee:5e: 2f:87:9d:5f:bd:97:2f:f1:7a:9a:ed:fb:3a:3e:c6: f1:32:fb:38:07:1b:c5:bd:51:6e:d0:63:fb:19:b1: ca:5e:f2:6a:ca:eb:c6:ef:ee:a2:13:1d:79:51:4c: b4:32:82:d7:42:b8:91:27:de:78:11:35:c3:c2:97: cc:d3:a3:97:49:4a:28:dc:d6:00:d0:06:00:86:db: b9:29:da:c5:60:34:bd:42:09:a8:cd:20:f8:7e:37: e8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5C:6B:41:C7:44:37:C8:0F:F4:48:62:9F:4A:0D:09:B0:B5:21:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:36:bb:bc:af:a2:cf:c4:55:62:bc:d8:c2:cd:45:4d:76:84: 0c:1d:f7:59:c8:c4:a6:ef:30:54:41:6c:e7:52:a4:bb:96:db: a4:7a:84:71:da:ea:67:a8:ba:3b:02:7c:9d:14:14:12:a7:66: 23:c7:d0:b0:7a:84:8d:64:b5:79:e0:1b:6b:b2:ed:25:f4:05: 06:94:b2:bc:93:96:63:13:c6:fd:ca:63:ff:13:28:04:0d:29: dc:56:82:ff:de:3a:23:85:fa:44:cf:82:c7:e7:c6:2b:f3:1b: fc:a3:99:93:1d:31:7b:ba:78:5f:22:db:92:c0:d2:7b:e0:2f: e2:28:db:f9:65:57:03:1c:6c:d2:b2:84:ee:ff:e8:3b:24:b6: 78:f4:af:41:04:6f:57:d6:54:a2:7f:b3:7b:ac:cb:05:09:c2: 35:8a:cc:bb:68:13:d3:52:8c:bb:eb:0b:63:5e:c8:88:6a:52: cd:b3:1b:09:37:6f:95:c8:99:8e:3c:52:ef:29:39:ad:8b:45: f9:4f:2d:46:77:4d:70:0f:ac:10:d6:bb:2d:53:97:7d:5b:e2: d8:ba:30:34:25:bf:7a:65:b8:18:41:70:e1:f1:ac:26:2a:ae: 60:8d:cf:9f:af:31:b7:ce:86:ac:00:c2:a4:ba:25:50:8d:e9: 2f:92:83:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg+jpFnoKLNgt2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzE3OTBmM2MtMmE4MS00Mzg2LWJjZDQtODdhMjIyMDNmZjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkTenKHA5yKGWAShwLn4bsdKfpGdcg9vnmO0 cXQNkfIoMIXJQcsg7Ek6EmmLFWVDlphnNEnMTSyBIGuKqrp+u+nh666W9yRVZpKO Ojp6vBgpF08QnA5tD3X7Ta9P9uov4qfCUeHitrmcAwuG/goLPAccgxSfGPg/Kx/C 06ya/dp1vt1FD/z3mpCvx/USIrooI0dt48V+zzxhNw8ZTlzRlXJA7l4vh51fvZcv 8Xqa7fs6PsbxMvs4BxvFvVFu0GP7GbHKXvJqyuvG7+6iEx15UUy0MoLXQriRJ954 ETXDwpfM06OXSUoo3NYA0AYAhtu5KdrFYDS9QgmozSD4fjfopQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRca0HHRDfID/RIYp9KDQmwtSGHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjM2ODVlMGQtNmE4NS0z NmQ0LWFhOWYtMTJiYjMwYWViYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU2u7yvos/EVWK82MLNRU12hAwd91nIxKbvMFRBbOdSpLuW26R6hHHa 6meoujsCfJ0UFBKnZiPH0LB6hI1ktXngG2uy7SX0BQaUsryTlmMTxv3KY/8TKAQN KdxWgv/eOiOF+kTPgsfnxivzG/yjmZMdMXu6eF8i25LA0nvgL+Io2/llVwMcbNKy hO7/6Dsktnj0r0EEb1fWVKJ/s3usywUJwjWKzLtoE9NSjLvrC2NeyIhqUs2zGwk3 b5XImY48Uu8pOa2LRflPLUZ3TXAPrBDWuy1Tl31b4ti6MDQlv3pluBhBcOHxrCYq rmCNz5+vMbfOhqwAwqS6JVCN6S+Sg1g= -----END CERTIFICATE-----Generated at Fri Sep 25 19:34:36 2026 by rpki-client