$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b748ce12-9b16-3bce-985f-34ecf5c399d4.roa File: b748ce12-9b16-3bce-985f-34ecf5c399d4.roa (raw, json) Hash identifier: ZD86WB1b19Jq+p/Ilg4kdyKKlUA7sn5xgt3KXeweqx4= Subject key identifier: 16:49:3E:BF:D4:BA:03:76:29:63:60:72:97:47:B6:C1:01:C9:1E:8F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983D22FCAEB6D04BD07B840 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b748ce12-9b16-3bce-985f-34ecf5c399d4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:d2:2f:ca:eb:6d:04:bd:07:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4b34cee3-cd24-4be0-b17e-c52b92772984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2c:25:77:96:34:c2:fa:6a:90:f4:b0:25:6b: 79:77:bc:75:94:f6:28:ca:6e:ad:cd:a1:71:b1:ec: eb:ad:88:1d:09:40:85:91:0b:3d:d8:ba:ad:d2:50: 02:95:36:e4:2b:a5:c6:f2:bb:4a:c3:1f:f3:8c:19: 89:0b:e4:25:90:16:e4:ea:b2:f2:ac:fd:ef:ee:b4: a0:39:ab:5a:a2:d4:54:57:54:46:85:ee:71:54:ea: 2b:23:c4:d4:a2:de:c3:e9:f0:21:12:73:8e:59:d7: b1:54:e2:ee:81:61:af:24:c4:16:a0:61:a2:f2:a2: 84:67:fc:d6:37:7f:33:dd:2c:0c:6e:cb:0c:6f:96: 09:56:cf:23:e4:f2:0a:18:04:c6:bf:4d:e6:49:0e: a6:f6:d3:aa:57:5c:cc:17:9c:14:ad:93:1b:35:23: 45:7d:ad:1e:07:19:2b:63:0f:8f:4b:1e:d8:54:a1: 66:03:fc:6d:53:fc:32:d6:95:e0:c0:eb:5b:80:c8: 70:b7:29:49:32:72:e6:31:5b:57:0c:a8:14:0b:12: 40:e5:31:bb:5e:b8:99:16:e5:51:b0:4a:6e:9d:f3: 1a:76:35:58:33:08:7f:1f:d2:70:68:16:b5:ae:3d: c7:69:f5:55:69:6e:c7:6e:e4:39:f6:0d:6a:fe:bd: 1c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:49:3E:BF:D4:BA:03:76:29:63:60:72:97:47:B6:C1:01:C9:1E:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b748ce12-9b16-3bce-985f-34ecf5c399d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:5c:ee:23:fe:f9:64:06:89:05:a2:45:59:c7:c3:34:b0:e0: d5:2b:14:ff:29:08:0a:51:1a:bb:1b:50:48:fd:d9:72:28:b5: f9:59:15:8f:f9:02:d6:08:a4:ff:e5:a2:7e:58:1c:dc:b4:b2: d1:d9:77:d6:23:4a:83:2f:e2:de:e7:9a:80:63:c3:85:10:1e: 19:9c:25:52:98:00:b5:62:70:0d:85:da:f1:f0:d6:90:cc:93: 5a:20:4e:7b:23:30:a8:89:bf:bb:3b:79:e5:b9:28:7e:e9:8d: 2a:e3:7a:c0:f1:ad:b5:e2:b9:2c:a3:81:b3:4a:fe:f0:ef:ad: ec:0b:81:e4:43:a6:9b:84:7f:eb:25:97:71:9b:30:bf:d8:7b: ec:ce:9d:91:60:a3:2b:80:df:01:e8:3b:f0:31:b5:d3:47:89: 2c:0c:5b:37:8c:0b:a8:1a:1e:09:55:3a:dd:34:0a:86:e3:57: e4:0e:09:30:8a:cd:9a:3e:fb:4e:6e:b0:49:41:1e:08:7c:c4: 85:55:c3:a8:92:55:86:a9:a4:2c:eb:84:c6:3b:99:91:1a:de: 17:ce:71:eb:79:29:9a:dd:df:1f:6b:67:48:7f:76:12:60:df: 29:ad:48:b5:83:67:c3:7d:c0:db:45:a9:80:3b:54:ff:88:7b: 22:51:43:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg9IvyuttBL0HuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGIzNGNlZTMtY2QyNC00YmUwLWIxN2UtYzUyYjkyNzcyOTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCwld5Y0wvpqkPSwJWt5d7x1lPYoym6tzaFx sezrrYgdCUCFkQs92Lqt0lAClTbkK6XG8rtKwx/zjBmJC+QlkBbk6rLyrP3v7rSg OataotRUV1RGhe5xVOorI8TUot7D6fAhEnOOWdexVOLugWGvJMQWoGGi8qKEZ/zW N38z3SwMbssMb5YJVs8j5PIKGATGv03mSQ6m9tOqV1zMF5wUrZMbNSNFfa0eBxkr Yw+PSx7YVKFmA/xtU/wy1pXgwOtbgMhwtylJMnLmMVtXDKgUCxJA5TG7XriZFuVR sEpunfMadjVYMwh/H9JwaBa1rj3HafVVaW7HbuQ59g1q/r0cawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZJPr/UugN2KWNgcpdHtsEByR6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjc0OGNlMTItOWIxNi0z YmNlLTk4NWYtMzRlY2Y1YzM5OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPI+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5c7iP++WQGiQWiRVnHwzSw4NUrFP8pCApRGrsbUEj92XIotflZFY/5 AtYIpP/lon5YHNy0stHZd9YjSoMv4t7nmoBjw4UQHhmcJVKYALVicA2F2vHw1pDM k1ogTnsjMKiJv7s7eeW5KH7pjSrjesDxrbXiuSyjgbNK/vDvrewLgeRDppuEf+sl l3GbML/Ye+zOnZFgoyuA3wHoO/AxtdNHiSwMWzeMC6gaHglVOt00CobjV+QOCTCK zZo++05usElBHgh8xIVVw6iSVYappCzrhMY7mZEa3hfOcet5KZrd3x9rZ0h/dhJg 3ymtSLWDZ8N9wNtFqYA7VP+IeyJRQ7M= -----END CERTIFICATE-----Generated at Mon Oct 5 16:29:15 2026 by rpki-client