$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce5e8c71-13be-370d-8f6c-11fcb70fbd4e.roa File: ce5e8c71-13be-370d-8f6c-11fcb70fbd4e.roa (raw, json) Hash identifier: 1tgzX6EM1RNsWtKaOKrSElFyacM1Di5jJamOCnKezD8= Subject key identifier: 7B:33:54:0D:77:F8:25:59:97:94:8D:33:14:96:9B:E5:4A:F5:F2:06 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49843A5BF419481E27525D00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce5e8c71-13be-370d-8f6c-11fcb70fbd4e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 198.45.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:3a:5b:f4:19:48:1e:27:52:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c2d620b7-6ac7-453e-9fee-8e719a9e2d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:2c:a2:a8:54:af:92:97:22:84:54:6e:13: c1:7a:d4:12:00:d5:dc:dc:1c:2f:45:89:f4:36:a9: ac:f8:16:d5:f4:37:61:c4:41:fb:3f:f2:68:4b:c4: 84:f1:89:99:a6:40:8c:cb:44:5a:6d:0e:bf:55:8a: ab:20:93:99:4d:62:fa:ed:15:46:ec:26:ad:29:54: 65:45:28:60:06:8f:5f:c0:e3:e1:76:c2:9f:77:3a: c1:c1:f9:ee:d3:b8:90:f1:ef:ed:a8:bb:9e:1f:0d: ae:d2:5a:b6:05:99:46:28:7d:a7:0b:4d:b8:d7:a3: 73:a0:a1:a4:0f:25:fc:b8:35:46:74:a8:ec:b2:86: 73:e6:bc:a9:1f:44:15:9a:01:06:2a:fa:e5:75:16: ed:83:d8:0e:22:4b:a4:8c:7f:8d:a6:a5:b0:7f:19: 82:63:2a:4a:b4:de:be:5d:fc:d0:15:f9:4a:8d:64: 57:26:4f:d7:1f:15:bf:9d:25:ce:c3:40:ba:18:ff: fd:4e:6d:f7:37:7d:d1:bd:5d:52:2c:51:b8:10:08: 92:6e:9d:b0:ab:ed:02:e9:db:81:66:eb:72:ca:7b: 16:05:9e:69:d4:37:a4:0a:6e:f2:a0:52:58:47:33: b5:70:4a:27:88:8c:0b:74:1a:9d:83:e6:c2:10:92: c9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:33:54:0D:77:F8:25:59:97:94:8D:33:14:96:9B:E5:4A:F5:F2:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce5e8c71-13be-370d-8f6c-11fcb70fbd4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:2b:72:7e:57:c7:67:24:d4:36:df:07:98:37:45:8c:df:3c: 7d:3d:48:61:32:ae:19:61:c2:10:b6:cc:ba:44:4e:ec:ff:c5: 05:64:f0:82:89:e3:bb:7f:7d:a1:13:36:11:e8:b1:c6:2b:be: 1e:b8:87:f7:94:6b:ed:f1:83:38:74:a8:ab:9e:9f:2d:0f:af: 93:a8:b9:32:9a:7d:77:bf:1c:64:11:3c:bf:6d:ce:c4:34:a4: 11:16:92:10:24:8e:d6:cf:c2:2e:23:84:33:10:00:f3:f8:e7: 80:37:38:9a:bb:25:99:85:5b:35:f8:de:e3:7b:6e:57:4f:51: b2:dc:71:08:76:eb:9c:f6:5c:f5:d0:07:ab:be:65:0a:85:b2: 9f:d5:4e:e4:df:b3:42:22:e4:f9:52:32:47:3f:f5:6a:18:68: a7:c1:7d:9b:a7:cd:8b:fd:3f:0f:32:de:d8:af:18:df:2c:0c: 91:ed:ab:08:82:fb:9a:9f:b2:ee:a4:82:4d:f3:2b:46:03:61: 5e:1b:a0:78:b7:07:93:e5:c5:dc:3b:a0:53:a6:16:f5:96:20: c1:93:86:07:2c:50:5a:4c:fb:44:42:ca:25:f3:6a:13:9b:c2: 70:9e:c5:9c:19:36:65:95:2a:0b:2a:0f:04:7e:5b:ed:11:9d: 48:07:d2:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhDpb9BlIHidSXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzJkNjIwYjctNmFjNy00NTNlLTlmZWUtOGU3MTlhOWUyZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLwsoqhUr5KXIoRUbhPBetQSANXc3BwvRYn0 Nqms+BbV9DdhxEH7P/JoS8SE8YmZpkCMy0RabQ6/VYqrIJOZTWL67RVG7CatKVRl RShgBo9fwOPhdsKfdzrBwfnu07iQ8e/tqLueHw2u0lq2BZlGKH2nC02416NzoKGk DyX8uDVGdKjssoZz5rypH0QVmgEGKvrldRbtg9gOIkukjH+NpqWwfxmCYypKtN6+ XfzQFflKjWRXJk/XHxW/nSXOw0C6GP/9Tm33N33RvV1SLFG4EAiSbp2wq+0C6duB ZutyynsWBZ5p1DekCm7yoFJYRzO1cEoniIwLdBqdg+bCEJLJFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHszVA13+CVZl5SNMxSWm+VK9fIGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2U1ZThjNzEtMTNiZS0z NzBkLThmNmMtMTFmY2I3MGZiZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcrcn5Xx2ck1DbfB5g3RYzfPH09SGEyrhlhwhC2zLpETuz/xQVk8IKJ 47t/faETNhHoscYrvh64h/eUa+3xgzh0qKueny0Pr5OouTKafXe/HGQRPL9tzsQ0 pBEWkhAkjtbPwi4jhDMQAPP454A3OJq7JZmFWzX43uN7bldPUbLccQh265z2XPXQ B6u+ZQqFsp/VTuTfs0Ii5PlSMkc/9WoYaKfBfZunzYv9Pw8y3tivGN8sDJHtqwiC +5qfsu6kgk3zK0YDYV4boHi3B5Plxdw7oFOmFvWWIMGThgcsUFpM+0RCyiXzahOb wnCexZwZNmWVKgsqDwR+W+0RnUgH0pM= -----END CERTIFICATE-----Generated at Wed Sep 30 03:45:58 2026 by rpki-client