$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4b2503c-5390-3981-be32-71ec10a22037.roa File: b4b2503c-5390-3981-be32-71ec10a22037.roa (raw, json) Hash identifier: s5xAkbVjDX7YWoCt9WWSGvAWKDyJUC83r3hmlJChobY= Subject key identifier: AC:6B:FB:AF:3C:F9:E2:7D:3A:D1:CC:3F:6C:5C:19:0B:69:2F:85:29 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F498442C8F8852A6C4EECF480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4b2503c-5390-3981-be32-71ec10a22037.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 198.45.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:42:c8:f8:85:2a:6c:4e:ec:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=35cda153-196f-4109-b6b8-6ffd5a0c60c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:81:ec:53:d6:14:e1:b8:3d:eb:a1:cb:f1:0c: e1:ec:17:fb:fc:27:6c:48:1f:a8:35:14:f0:35:ad: de:9f:86:fd:a4:f9:b2:9c:fb:66:4d:81:e0:18:3b: dc:cb:49:9d:dc:79:9c:e9:25:92:00:f6:16:d4:e2: 36:18:20:a9:6d:6b:a5:ec:e4:63:ac:8c:b6:95:b1: a4:56:cb:36:4e:29:d9:48:20:4f:65:4a:1d:33:a7: 27:52:ec:2e:8b:c2:30:32:b0:bb:b6:6c:96:8a:53: d7:a6:12:c1:e1:1e:bd:4c:72:bf:b1:50:25:0b:61: dd:ea:87:26:35:8e:d5:f5:09:66:d6:8f:58:c2:6c: df:5d:c3:8e:8e:65:43:a7:dd:6a:15:ac:5f:6d:4a: 85:d2:e3:11:05:4e:d8:05:09:e8:53:8a:ad:25:58: 29:0f:32:c9:33:11:3d:d8:2a:be:e3:0e:df:90:1f: f0:57:ed:46:63:a2:9e:44:e5:61:71:0b:39:a7:09: 35:6b:14:f0:a0:3a:61:89:e0:b9:e2:0a:1f:af:8e: a3:0c:af:20:ee:0c:ad:80:e8:d7:50:89:9d:be:5e: 9f:da:f2:5c:6b:c1:ad:de:04:75:aa:a5:48:c4:e8: 20:d6:32:b0:ec:53:45:0d:31:f1:dd:9d:2b:7a:d2: 55:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6B:FB:AF:3C:F9:E2:7D:3A:D1:CC:3F:6C:5C:19:0B:69:2F:85:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4b2503c-5390-3981-be32-71ec10a22037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:0a:e5:94:3b:3d:7e:97:5a:fb:06:92:45:47:94:32:08:3d: 68:9a:1e:99:83:b6:7b:e9:78:32:46:0f:3a:6e:5b:a0:89:4c: 43:e0:4c:41:68:94:1c:a2:fd:85:37:c8:81:67:7a:fc:ea:cf: a1:09:6b:7e:22:b5:39:8c:b2:ad:9b:b4:ec:65:65:ab:bc:cc: 6b:08:67:69:ae:e4:c2:86:8a:d8:6c:d5:23:31:61:03:ce:3b: 73:5c:cf:f4:fe:89:29:43:01:1b:30:bf:f0:7d:84:ef:4e:b6: 6f:3d:82:8b:5d:c2:d1:3e:e5:9e:45:17:56:88:42:53:ca:22: 3d:6a:2b:12:ef:f3:f7:08:ba:b0:a6:c2:2a:b0:86:39:ec:73: c9:36:4a:85:8e:7e:bb:25:66:c2:22:f5:26:1e:8c:73:fb:84: da:ca:18:1c:93:bd:6e:bb:0b:f8:d2:f9:cc:6b:a6:f4:7b:86: 8f:0f:d4:28:a3:9a:de:39:62:88:7c:10:77:3e:6d:81:4f:b8: 7c:99:54:df:ba:70:fa:18:06:19:5f:31:3d:0b:f7:b0:a2:08: a4:b7:09:d9:9d:c3:6c:ed:dd:0d:50:31:8a:79:33:a5:7f:d4: 33:f9:5b:b7:07:38:4c:c1:b5:c0:c3:21:a9:ed:40:12:e5:90: de:38:42:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhELI+IUqbE7s9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzVjZGExNTMtMTk2Zi00MTA5LWI2YjgtNmZmZDVhMGM2MGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4HsU9YU4bg966HL8Qzh7Bf7/CdsSB+oNRTw Na3en4b9pPmynPtmTYHgGDvcy0md3Hmc6SWSAPYW1OI2GCCpbWul7ORjrIy2lbGk Vss2TinZSCBPZUodM6cnUuwui8IwMrC7tmyWilPXphLB4R69THK/sVAlC2Hd6ocm NY7V9Qlm1o9YwmzfXcOOjmVDp91qFaxfbUqF0uMRBU7YBQnoU4qtJVgpDzLJMxE9 2Cq+4w7fkB/wV+1GY6KeROVhcQs5pwk1axTwoDphieC54gofr46jDK8g7gytgOjX UImdvl6f2vJca8Gt3gR1qqVIxOgg1jKw7FNFDTHx3Z0retJV4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxr+688+eJ9OtHMP2xcGQtpL4UpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjRiMjUwM2MtNTM5MC0z OTgxLWJlMzItNzFlYzEwYTIyMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQK5ZQ7PX6XWvsGkkVHlDIIPWiaHpmDtnvpeDJGDzpuW6CJTEPgTEFo lByi/YU3yIFnevzqz6EJa34itTmMsq2btOxlZau8zGsIZ2mu5MKGiths1SMxYQPO O3Ncz/T+iSlDARswv/B9hO9Otm89gotdwtE+5Z5FF1aIQlPKIj1qKxLv8/cIurCm wiqwhjnsc8k2SoWOfrslZsIi9SYejHP7hNrKGByTvW67C/jS+cxrpvR7ho8P1Cij mt45Yoh8EHc+bYFPuHyZVN+6cPoYBhlfMT0L97CiCKS3Cdmdw2zt3Q1QMYp5M6V/ 1DP5W7cHOEzBtcDDIantQBLlkN44Qkk= -----END CERTIFICATE-----Generated at Sat Oct 3 08:27:21 2026 by rpki-client