$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c65a1971-3cf4-3034-a4a3-4973e93d544d.roa File: c65a1971-3cf4-3034-a4a3-4973e93d544d.roa (raw, json) Hash identifier: AK0kAXmYxn4uezr/q8mhWYTUBD+SZubfRO03XQrJ9FI= Subject key identifier: 28:23:48:BC:48:4E:B7:99:61:09:28:FE:90:B9:7A:04:56:C9:FE:42 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983E5DCFD641BA18D92B380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c65a1971-3cf4-3034-a4a3-4973e93d544d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:e5:dc:fd:64:1b:a1:8d:92:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b64fad8c-5e8f-4c5e-9ceb-723d92f2879e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0e:54:4d:50:5d:70:36:75:ba:c6:57:f5:d5: d0:36:d8:f8:0a:77:83:b4:2e:75:d6:9a:9d:65:10: 38:2c:d5:8e:2f:d7:7d:6c:3b:9b:2b:31:5e:84:14: 99:13:d8:7c:c5:dd:13:73:6c:ff:fc:aa:2e:d9:9a: 72:73:2b:03:e8:d3:46:6f:eb:a3:37:30:03:ec:3a: 47:d5:6f:5c:44:a4:7e:fb:8d:57:d0:5b:9a:11:76: 0d:67:af:10:88:17:7b:ad:72:2d:d5:e3:e9:e6:90: 57:ec:36:37:d3:ad:3a:20:bf:65:7c:40:f2:a6:5e: 70:5b:da:b4:7d:9e:78:1a:eb:12:19:ec:27:f1:f5: ba:6c:59:2f:a3:38:7c:9c:b5:a3:ed:12:5d:44:d2: 1f:da:4b:15:e6:fa:b0:63:c7:28:b2:ae:71:98:86: 66:a2:58:82:84:e4:8d:40:a1:ed:a0:b7:68:4c:b4: f4:5b:38:93:f4:42:85:3b:e0:4a:9f:64:21:9b:53: 99:91:32:94:0d:db:60:7a:64:79:fb:63:e5:7e:08: e7:10:29:fc:43:63:80:10:93:1d:3a:a5:65:5d:53: 05:9a:0c:fe:1b:0f:31:44:3e:3a:24:eb:f7:40:53: f1:3d:12:55:9f:4d:93:ee:46:37:eb:d5:86:9a:cb: f1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:23:48:BC:48:4E:B7:99:61:09:28:FE:90:B9:7A:04:56:C9:FE:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c65a1971-3cf4-3034-a4a3-4973e93d544d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e2:06:0f:05:d3:da:f6:b5:e7:17:55:88:fd:7f:bc:46:63: 79:81:e3:6c:c7:f9:a7:35:53:68:f6:fc:a3:58:4a:d4:ca:fe: ae:bd:64:dc:b0:43:d9:c3:5e:15:63:88:77:76:38:86:14:19: 48:61:0c:a8:7c:f9:3c:98:99:42:dc:93:20:fa:ee:e7:23:97: 24:ba:b8:75:21:a4:50:46:c5:99:1f:4a:db:4b:fa:15:2c:96: dd:4f:85:5f:72:85:39:81:75:77:4e:be:55:e9:58:25:d7:a8: 39:5c:80:1e:c3:60:21:aa:e6:81:14:cc:91:07:aa:15:7e:0c: 05:f7:d7:5d:ee:71:cd:02:5d:3c:79:b7:6d:02:0b:0f:63:c0: b8:09:24:ec:11:4f:84:12:7e:13:8b:55:d3:50:40:3b:92:84: 92:18:2e:81:04:04:a2:d2:99:c6:d8:1e:cd:91:c7:bd:75:f4: 81:27:03:a2:de:37:fa:44:98:b9:dc:fe:2f:4e:5c:f8:ff:7a: 74:f0:e9:5d:c2:d2:57:32:0e:6f:c4:56:0a:c3:dc:de:89:c4: d4:ad:49:14:31:33:fe:bb:21:37:b4:b5:ac:fa:ae:1e:4c:eb: 39:20:e0:a8:e6:c8:2b:ef:26:ad:d9:00:5e:11:71:b0:7c:7c: 94:f4:3f:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg+Xc/WQboY2Ss4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjY0ZmFkOGMtNWU4Zi00YzVlLTljZWItNzIzZDkyZjI4NzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w5UTVBdcDZ1usZX9dXQNtj4CneDtC511pqd ZRA4LNWOL9d9bDubKzFehBSZE9h8xd0Tc2z//Kou2ZpycysD6NNGb+ujNzAD7DpH 1W9cRKR++41X0FuaEXYNZ68QiBd7rXIt1ePp5pBX7DY30606IL9lfEDypl5wW9q0 fZ54GusSGewn8fW6bFkvozh8nLWj7RJdRNIf2ksV5vqwY8cosq5xmIZmoliChOSN QKHtoLdoTLT0WziT9EKFO+BKn2Qhm1OZkTKUDdtgemR5+2PlfgjnECn8Q2OAEJMd OqVlXVMFmgz+Gw8xRD46JOv3QFPxPRJVn02T7kY369WGmsvxaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgjSLxITreZYQko/pC5egRWyf5CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzY1YTE5NzEtM2NmNC0z MDM0LWE0YTMtNDk3M2U5M2Q1NDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTiBg8F09r2tecXVYj9f7xGY3mB42zH+ac1U2j2/KNYStTK/q69ZNyw Q9nDXhVjiHd2OIYUGUhhDKh8+TyYmULckyD67ucjlyS6uHUhpFBGxZkfSttL+hUs lt1PhV9yhTmBdXdOvlXpWCXXqDlcgB7DYCGq5oEUzJEHqhV+DAX3113ucc0CXTx5 t20CCw9jwLgJJOwRT4QSfhOLVdNQQDuShJIYLoEEBKLSmcbYHs2Rx7119IEnA6Le N/pEmLnc/i9OXPj/enTw6V3C0lcyDm/EVgrD3N6JxNStSRQxM/67ITe0taz6rh5M 6zkg4KjmyCvvJq3ZAF4RcbB8fJT0P6k= -----END CERTIFICATE-----Generated at Wed Sep 30 20:11:32 2026 by rpki-client