$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d353c8ed-6445-34cf-b9a6-07c2df0625df.roa File: d353c8ed-6445-34cf-b9a6-07c2df0625df.roa (raw, json) Hash identifier: Ec+5VRBYhZOAest0JnLsTohA1fLvvwbhhxfgyGk1/Pk= Subject key identifier: DA:5A:9A:AC:81:00:44:57:05:46:01:B7:CE:45:6D:CE:1E:9C:B9:90 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983E1DAD13085989C8F6F40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d353c8ed-6445-34cf-b9a6-07c2df0625df.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:e1:da:d1:30:85:98:9c:8f:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2cc10728-57c9-4bb6-9c67-2e7bba951931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:58:e1:e0:ee:23:91:aa:0b:2f:f1:ef:5b:42: f6:ef:a4:04:4b:3c:d8:7f:ab:39:d2:d5:90:fd:25: f8:4e:95:05:f4:ac:90:38:c4:f6:c4:63:b7:87:14: 7e:05:bf:cb:26:f1:1a:3a:9e:e4:48:b6:78:63:7a: f6:07:40:59:69:2d:3f:d8:18:04:27:a4:78:e2:c0: fa:46:a2:58:66:d7:d4:9f:1b:03:38:82:35:d7:07: c2:70:ba:51:9f:e5:0b:47:b4:78:a6:f0:14:b3:6c: e5:42:b4:e2:d7:b3:aa:da:27:fb:ac:09:8d:68:0c: d1:11:71:eb:69:05:fe:dd:40:5c:6c:c7:de:12:e7: 64:fc:6b:6e:88:d5:a2:13:ec:fb:9c:f6:3c:fc:9d: 19:60:fa:c4:ef:53:46:be:e8:43:45:b5:8e:92:86: 4e:69:70:ba:a7:59:b1:5a:74:fa:95:e5:0e:19:7d: 37:10:49:fb:d8:c4:00:c5:fc:52:d1:1b:89:8d:b1: e6:4a:5b:20:8f:e5:75:18:d0:4c:64:f4:f2:63:fe: 32:9a:d4:15:bb:94:4a:48:fd:26:45:58:d1:45:75: 9c:ef:2d:a7:b0:d6:9d:12:28:76:55:17:c0:a2:af: ef:b8:b3:34:39:0c:d9:b1:e8:9f:40:ed:82:14:10: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5A:9A:AC:81:00:44:57:05:46:01:B7:CE:45:6D:CE:1E:9C:B9:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d353c8ed-6445-34cf-b9a6-07c2df0625df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e6:94:28:c4:de:69:a5:51:1a:fa:f5:47:76:20:5d:52:4b: 9c:ef:e5:fa:c3:85:ca:18:e8:24:29:89:de:a4:8b:e5:4d:41: 27:7a:3f:8f:e3:37:8b:a9:8b:ee:d3:c1:3f:64:c8:6c:a2:51: d7:1d:60:27:77:42:1e:58:fd:4c:f3:99:0a:1f:19:e6:d9:1c: 25:73:8d:3f:29:9f:6b:c3:89:54:ba:9c:ca:e4:a0:24:25:ab: 9c:88:af:97:ee:71:d6:73:a7:26:63:51:0b:52:ec:1e:7e:ce: ea:79:52:5b:d1:d7:68:61:7a:7b:fc:fc:bb:74:ec:d8:a2:6b: 54:0c:4d:68:b3:23:7d:00:67:54:15:29:a7:9c:4c:59:79:9c: 55:c6:6e:b4:6b:63:fb:83:cb:47:fd:f6:68:bc:46:7b:c8:8c: 12:bd:28:d0:d9:13:08:17:10:49:77:d5:ae:89:92:36:bd:18: 42:ce:9e:a5:97:a4:97:fd:2c:39:8a:33:41:89:c0:59:c7:2f: 92:10:66:af:ed:4e:e2:23:5c:3f:86:27:53:c1:5e:85:26:d1: 28:b5:50:9f:94:f4:b9:01:ea:cf:4f:3b:94:57:4a:2a:35:64: 71:17:5d:e8:56:bb:d0:75:64:88:0d:8c:21:bc:76:a5:92:cf: cc:88:35:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg+Ha0TCFmJyPb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmNjMTA3MjgtNTdjOS00YmI2LTljNjctMmU3YmJhOTUxOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVjh4O4jkaoLL/HvW0L276QESzzYf6s50tWQ /SX4TpUF9KyQOMT2xGO3hxR+Bb/LJvEaOp7kSLZ4Y3r2B0BZaS0/2BgEJ6R44sD6 RqJYZtfUnxsDOII11wfCcLpRn+ULR7R4pvAUs2zlQrTi17Oq2if7rAmNaAzREXHr aQX+3UBcbMfeEudk/GtuiNWiE+z7nPY8/J0ZYPrE71NGvuhDRbWOkoZOaXC6p1mx WnT6leUOGX03EEn72MQAxfxS0RuJjbHmSlsgj+V1GNBMZPTyY/4ymtQVu5RKSP0m RVjRRXWc7y2nsNadEih2VRfAoq/vuLM0OQzZseifQO2CFBB/+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpamqyBAERXBUYBt85Fbc4enLmQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDM1M2M4ZWQtNjQ0NS0z NGNmLWI5YTYtMDdjMmRmMDYyNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7mlCjE3mmlURr69Ud2IF1SS5zv5frDhcoY6CQpid6ki+VNQSd6P4/j N4upi+7TwT9kyGyiUdcdYCd3Qh5Y/UzzmQofGebZHCVzjT8pn2vDiVS6nMrkoCQl q5yIr5fucdZzpyZjUQtS7B5+zup5UlvR12hhenv8/Lt07Niia1QMTWizI30AZ1QV KaecTFl5nFXGbrRrY/uDy0f99mi8RnvIjBK9KNDZEwgXEEl31a6Jkja9GELOnqWX pJf9LDmKM0GJwFnHL5IQZq/tTuIjXD+GJ1PBXoUm0Si1UJ+U9LkB6s9PO5RXSio1 ZHEXXehWu9B1ZIgNjCG8dqWSz8yINaE= -----END CERTIFICATE-----Generated at Sat Sep 26 14:48:56 2026 by rpki-client