$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be34bac0-9fa1-3d66-adc1-b7d6984a4370.roa File: be34bac0-9fa1-3d66-adc1-b7d6984a4370.roa (raw, json) Hash identifier: n7q64dFb+FaE71EjssK7zKbGwJmiEjMjabXPwxWN3Bs= Subject key identifier: 68:80:23:A3:2C:66:63:B1:F0:DD:12:53:CB:64:28:55:45:E5:9A:3D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49843D63B2481E5FA2B8D800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be34bac0-9fa1-3d66-adc1-b7d6984a4370.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 198.45.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:3d:63:b2:48:1e:5f:a2:b8:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6f391ddd-250c-452a-8230-76b5330b4a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:77:5c:b3:ea:1d:b7:c4:be:6c:30:8e:f3:8f: d6:aa:60:fb:3b:99:ed:99:53:d2:13:9c:16:a3:3d: 64:4c:f0:6e:cd:11:6e:e2:04:1f:a9:8c:54:3e:bc: 2e:0b:74:d9:e0:df:ed:26:88:28:5a:e6:d1:a8:d9: 2c:d6:8a:1a:b5:12:52:4a:a9:ed:36:e3:f9:33:c2: db:e9:1e:d2:c6:28:8d:99:e1:30:2a:4b:65:25:ef: c9:72:1a:fe:96:33:12:8d:c6:3b:f8:0e:34:09:d7: 00:c8:59:18:3c:44:00:b6:98:01:2b:3a:b5:49:d4: 8f:69:d0:1b:63:65:6d:37:7d:c8:72:b1:4f:ba:c6: c8:d5:71:d7:46:13:b4:3f:fa:cd:9a:38:d3:10:9b: 23:ac:65:d0:9b:f7:28:80:7b:e4:3e:8b:fc:c9:c5: b6:9a:87:43:2b:64:e4:08:e2:f6:b9:56:1f:33:07: 23:b5:75:e6:4d:89:c2:6f:dc:e0:5d:7d:49:dd:0c: 8f:20:1a:69:bc:86:42:8f:4b:62:07:50:40:7b:76: 53:09:49:7b:f7:07:50:ba:8d:1a:4c:dd:f2:4c:45: ea:49:39:21:a7:48:06:63:bb:7b:5e:0b:e0:6d:3b: 9f:34:88:89:aa:6c:46:6b:16:68:c6:0d:e8:5a:b6: 74:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:80:23:A3:2C:66:63:B1:F0:DD:12:53:CB:64:28:55:45:E5:9A:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be34bac0-9fa1-3d66-adc1-b7d6984a4370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:c3:f5:46:ec:58:74:8b:e8:73:0f:14:6c:19:53:d4:dd:f9: 94:ec:73:b5:fd:02:b2:c1:82:cd:6b:d5:51:8d:1a:2d:8c:65: 53:61:82:4d:28:0c:dd:10:62:46:84:1b:7c:ac:9c:67:13:ef: bb:51:06:2f:68:8c:7b:69:5d:bc:d0:49:82:37:4e:e0:95:cb: b4:c7:bf:d2:33:13:a3:63:97:13:fd:29:8f:49:b6:33:a8:e5: fd:69:24:08:f6:3d:bc:4c:b2:ab:fc:e7:fe:01:de:6f:ea:a6: e8:d9:f2:e6:b7:06:0c:9c:dd:cb:79:8d:d8:33:b3:5b:f7:2e: d9:fc:91:8d:7a:fa:fe:03:9c:b2:6e:a5:1c:d4:f6:92:d4:4e: d1:37:cf:02:09:42:2f:a2:f9:ac:5b:05:c9:00:13:70:cc:ed: 30:3f:80:a7:ec:ae:bd:a1:d1:82:3d:74:4c:30:3a:0f:d8:3c: 55:1f:ab:ad:b3:24:6d:5a:17:97:16:ef:16:fe:63:1a:e4:da: 24:bd:74:cd:b1:2d:02:12:13:58:04:a3:2a:c8:d2:61:87:2f: d8:b4:c8:47:a0:21:ca:00:b5:3f:74:b6:45:f6:53:96:15:d5: 82:3d:5f:aa:58:9e:df:c4:c9:67:97:23:1b:f9:2a:e4:1f:78: 2b:8b:e3:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhD1jskgeX6K42AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmYzOTFkZGQtMjUwYy00NTJhLTgyMzAtNzZiNTMzMGI0YTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3dcs+odt8S+bDCO84/WqmD7O5ntmVPSE5wW oz1kTPBuzRFu4gQfqYxUPrwuC3TZ4N/tJogoWubRqNks1ooatRJSSqntNuP5M8Lb 6R7SxiiNmeEwKktlJe/Jchr+ljMSjcY7+A40CdcAyFkYPEQAtpgBKzq1SdSPadAb Y2VtN33IcrFPusbI1XHXRhO0P/rNmjjTEJsjrGXQm/cogHvkPov8ycW2modDK2Tk COL2uVYfMwcjtXXmTYnCb9zgXX1J3QyPIBppvIZCj0tiB1BAe3ZTCUl79wdQuo0a TN3yTEXqSTkhp0gGY7t7XgvgbTufNIiJqmxGaxZoxg3oWrZ0uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiAI6MsZmOx8N0SU8tkKFVF5Zo9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmUzNGJhYzAtOWZhMS0z ZDY2LWFkYzEtYjdkNjk4NGE0MzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbD9UbsWHSL6HMPFGwZU9Td+ZTsc7X9ArLBgs1r1VGNGi2MZVNhgk0o DN0QYkaEG3ysnGcT77tRBi9ojHtpXbzQSYI3TuCVy7THv9IzE6NjlxP9KY9JtjOo 5f1pJAj2PbxMsqv85/4B3m/qpujZ8ua3Bgyc3ct5jdgzs1v3Ltn8kY16+v4DnLJu pRzU9pLUTtE3zwIJQi+i+axbBckAE3DM7TA/gKfsrr2h0YI9dEwwOg/YPFUfq62z JG1aF5cW7xb+Yxrk2iS9dM2xLQISE1gEoyrI0mGHL9i0yEegIcoAtT90tkX2U5YV 1YI9X6pYnt/EyWeXIxv5KuQfeCuL41E= -----END CERTIFICATE-----Generated at Sun Sep 27 06:52:26 2026 by rpki-client