$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa File: cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa (raw, json) Hash identifier: AQ0ICeMiSQulpC3wmROEpXlP2j2DzPvouEe386ejIQo= Subject key identifier: 71:4E:2C:B6:B9:39:F1:ED:25:F3:5D:45:C0:C8:9D:05:2E:9E:8E:5F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B9603CF92665BF77C2980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:96:03:cf:92:66:5b:f7:7c:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=93bdebca-9160-4108-9c25-9d7137e15736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d4:54:0f:8d:e0:0c:3d:71:a0:19:a8:e4:ec: 12:fb:f3:f7:60:d8:f6:99:56:38:fa:bb:7a:70:b4: ec:de:8a:e8:7f:7f:b5:fe:d1:46:b6:a7:18:c6:31: a8:48:1b:33:fa:34:c1:00:ca:9e:a0:3b:ef:60:74: 62:9f:72:27:11:72:2c:00:23:a3:86:00:f2:0e:94: aa:6a:d7:5a:55:69:b3:77:05:97:c1:e7:0f:7c:ef: 4c:f5:e4:6b:3c:33:da:11:96:df:24:77:37:ec:74: 64:7b:8e:bc:da:d3:fa:f1:51:cb:fd:fd:05:fc:14: 65:24:05:1e:05:df:51:a7:86:e9:0f:92:f4:d3:26: 50:13:f2:1d:7c:47:46:30:3d:16:65:27:bb:80:c9: 53:e8:72:11:a4:c1:38:0f:b8:cb:98:70:d3:67:bf: 89:f3:52:c4:8e:a3:b7:8d:4c:8f:b2:96:3d:de:4c: 08:3d:45:0b:bd:e2:e2:c7:77:87:04:9f:63:10:c9: e3:08:b9:02:9a:7e:7c:21:91:78:c2:51:d5:40:df: 65:af:35:84:34:d5:3c:54:68:9d:01:6b:2f:74:bf: 1c:2b:4d:0e:b7:6b:fc:2e:88:bb:ab:04:57:bc:3f: 1e:23:10:8e:18:f8:ee:45:23:59:4a:cf:96:23:a0: ed:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4E:2C:B6:B9:39:F1:ED:25:F3:5D:45:C0:C8:9D:05:2E:9E:8E:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:5a:23:fe:99:4c:74:60:8a:9a:be:26:ba:0f:cd:d0:f9:de: 74:12:de:c1:95:25:a0:b0:dc:4e:75:78:cb:a0:4c:11:4d:c5: 66:9c:81:41:0b:a1:af:0d:3d:c4:44:93:39:8a:1d:b4:0d:ed: 6a:77:0f:af:8d:0f:22:4c:37:10:9d:76:f6:67:79:d9:4f:64: 4c:da:19:26:6d:c6:e5:ba:e1:bc:33:5a:23:af:21:80:0b:55: 3b:59:33:5a:76:67:ab:8e:8a:54:93:8c:d2:8e:ec:30:d6:0f: d2:10:3d:8e:5b:23:e4:59:4b:fe:60:2f:db:63:6d:5d:60:86: 37:8c:0e:64:6e:5c:da:ab:01:24:4f:c6:5a:bf:4c:61:de:68: ec:d5:21:9b:08:f0:0d:27:44:6d:60:95:d0:c3:3c:12:01:e1: ed:c8:55:b8:d6:a3:f2:02:89:00:09:63:48:dd:42:ba:c7:85: c3:f6:c2:93:bc:17:0f:2b:6f:f1:3b:19:60:52:22:d2:68:b1: d0:0e:4f:4a:cf:5e:c2:6d:9c:97:dc:29:de:4f:b5:ce:97:80: 59:5c:ae:92:83:54:c5:91:46:b8:59:23:e7:05:03:b1:7a:23: 2a:93:6d:2f:cc:44:0f:2f:80:e2:06:17:f1:62:d6:45:ba:37: d3:34:de:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je5YDz5JmW/d8KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTNiZGViY2EtOTE2MC00MTA4LTljMjUtOWQ3MTM3ZTE1NzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntRUD43gDD1xoBmo5OwS+/P3YNj2mVY4+rt6 cLTs3orof3+1/tFGtqcYxjGoSBsz+jTBAMqeoDvvYHRin3InEXIsACOjhgDyDpSq atdaVWmzdwWXwecPfO9M9eRrPDPaEZbfJHc37HRke4682tP68VHL/f0F/BRlJAUe Bd9Rp4bpD5L00yZQE/IdfEdGMD0WZSe7gMlT6HIRpME4D7jLmHDTZ7+J81LEjqO3 jUyPspY93kwIPUULveLix3eHBJ9jEMnjCLkCmn58IZF4wlHVQN9lrzWENNU8VGid AWsvdL8cK00Ot2v8Loi7qwRXvD8eIxCOGPjuRSNZSs+WI6DtJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFOLLa5OfHtJfNdRcDInQUuno5fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2ZlYzU4YjQtODE2Ny0z N2UyLWJlZjEtYzdiNDBhZTFlOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdaI/6ZTHRgipq+JroPzdD53nQS3sGVJaCw3E51eMugTBFNxWacgUEL oa8NPcREkzmKHbQN7Wp3D6+NDyJMNxCddvZnedlPZEzaGSZtxuW64bwzWiOvIYAL VTtZM1p2Z6uOilSTjNKO7DDWD9IQPY5bI+RZS/5gL9tjbV1ghjeMDmRuXNqrASRP xlq/TGHeaOzVIZsI8A0nRG1gldDDPBIB4e3IVbjWo/ICiQAJY0jdQrrHhcP2wpO8 Fw8rb/E7GWBSItJosdAOT0rPXsJtnJfcKd5Ptc6XgFlcrpKDVMWRRrhZI+cFA7F6 IyqTbS/MRA8vgOIGF/Fi1kW6N9M03hI= -----END CERTIFICATE-----Generated at Fri Sep 25 22:36:50 2026 by rpki-client