$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d43e28de-6034-346b-a18a-a19332bd56e3.roa File: d43e28de-6034-346b-a18a-a19332bd56e3.roa (raw, json) Hash identifier: 3cRP23pJuNhLQXUgG8sDw9CM/Vh3IOYXYmXOQZsafZY= Subject key identifier: 73:36:5B:0B:66:18:B7:32:B2:74:F7:67:48:86:B6:67:F4:93:96:CB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983CFF4F7540BADA9E16E00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d43e28de-6034-346b-a18a-a19332bd56e3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:cf:f4:f7:54:0b:ad:a9:e1:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e08865b5-1440-408e-b09b-9d44752f96e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f7:be:c5:e5:68:c7:7b:a0:8a:3c:a6:5e:3c: 81:6e:91:2b:a4:ac:dd:aa:5a:64:44:36:6e:50:c6: 93:3f:1d:0c:c1:53:3f:29:ea:e6:4c:9d:51:1e:81: 70:33:7c:a9:28:57:ab:a9:bc:59:53:75:65:e0:5a: 8c:1d:d7:2e:27:04:58:18:e3:ac:54:5e:2b:ad:f2: ce:51:82:7b:46:d9:12:0e:36:c1:13:5b:f0:42:f4: 1c:cd:0d:85:bd:a6:76:58:77:2b:e0:5d:fc:be:8f: b6:c8:e0:90:91:45:27:64:c9:ba:8e:e9:45:2c:8b: 04:99:e7:e6:a7:2f:f3:34:ba:c0:e1:49:40:4d:74: 2d:1c:99:90:46:60:56:43:e0:e3:75:cb:e1:45:07: 2f:de:f3:64:be:a9:90:28:6b:b9:5b:fd:52:d2:0c: e4:a8:d3:84:8f:4c:40:7c:73:35:5d:b1:2a:26:55: 25:48:48:e9:00:ac:d3:a5:0b:10:51:32:2b:a0:89: 32:d0:6d:95:26:22:b3:8a:5e:cb:84:b9:07:15:6b: 10:37:5e:dc:d4:c3:d9:8f:16:42:8b:5a:1b:9a:81: 44:6e:bf:df:ef:de:f9:de:dd:8b:eb:f9:38:ee:d6: 1e:ad:46:54:cd:e8:f4:5d:5f:13:82:5e:ff:01:49: aa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:36:5B:0B:66:18:B7:32:B2:74:F7:67:48:86:B6:67:F4:93:96:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d43e28de-6034-346b-a18a-a19332bd56e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:6a:51:c5:ee:fa:61:c2:bc:de:2c:cb:29:b2:2f:c6:9c:24: 5f:2e:df:ad:f3:46:d8:85:e1:59:f6:f1:64:10:a4:39:66:d1: 6d:59:5c:d3:61:c2:50:6d:92:f4:55:22:fa:e9:89:34:4f:94: e4:9c:eb:5e:ea:82:79:c3:ae:c2:69:fd:b5:9b:9f:d1:d6:99: 2f:89:1d:c6:03:d9:85:72:9a:99:19:e6:3c:2f:a9:15:64:ad: a8:e3:7b:3e:7e:32:a9:24:c1:55:72:e6:2d:0d:9e:97:ee:ae: 51:0e:68:a0:d1:26:49:c7:dd:a9:5f:6a:cd:a5:34:1a:4e:b1: 0b:66:3d:ff:03:e9:e1:e3:87:c2:99:b8:29:a7:fa:d0:5a:bb: b3:c1:3b:28:17:09:71:2c:a2:48:f3:31:db:49:30:55:19:17: 16:f2:d6:66:7b:ca:68:0a:d9:50:4a:f6:da:cb:da:61:bc:31: f2:9a:5e:6e:ff:2a:57:21:e7:1d:e1:5b:7c:02:c2:9f:7e:e3: 9d:0d:35:8e:e2:a8:9d:15:1d:97:35:bd:30:bf:9c:f6:da:1f: c6:c5:e8:47:24:45:31:d1:15:9c:62:d0:6e:27:fa:79:6f:d5: e1:ec:75:90:6a:c1:74:04:54:3c:3a:45:88:5f:3f:08:66:7a: da:8f:c0:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg8/091QLranhbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTA4ODY1YjUtMTQ0MC00MDhlLWIwOWItOWQ0NDc1MmY5NmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufe+xeVox3ugijymXjyBbpErpKzdqlpkRDZu UMaTPx0MwVM/KermTJ1RHoFwM3ypKFerqbxZU3Vl4FqMHdcuJwRYGOOsVF4rrfLO UYJ7RtkSDjbBE1vwQvQczQ2FvaZ2WHcr4F38vo+2yOCQkUUnZMm6julFLIsEmefm py/zNLrA4UlATXQtHJmQRmBWQ+DjdcvhRQcv3vNkvqmQKGu5W/1S0gzkqNOEj0xA fHM1XbEqJlUlSEjpAKzTpQsQUTIroIky0G2VJiKzil7LhLkHFWsQN17c1MPZjxZC i1obmoFEbr/f79753t2L6/k47tYerUZUzej0XV8Tgl7/AUmqrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHM2WwtmGLcysnT3Z0iGtmf0k5bLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDQzZTI4ZGUtNjAzNC0z NDZiLWExOGEtYTE5MzMyYmQ1NmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJqUcXu+mHCvN4syymyL8acJF8u363zRtiF4Vn28WQQpDlm0W1ZXNNh wlBtkvRVIvrpiTRPlOSc617qgnnDrsJp/bWbn9HWmS+JHcYD2YVympkZ5jwvqRVk rajjez5+MqkkwVVy5i0NnpfurlEOaKDRJknH3alfas2lNBpOsQtmPf8D6eHjh8KZ uCmn+tBau7PBOygXCXEsokjzMdtJMFUZFxby1mZ7ymgK2VBK9trL2mG8MfKaXm7/ Klch5x3hW3wCwp9+450NNY7iqJ0VHZc1vTC/nPbaH8bF6EckRTHRFZxi0G4n+nlv 1eHsdZBqwXQEVDw6RYhfPwhmetqPwPM= -----END CERTIFICATE-----Generated at Mon Sep 28 10:50:06 2026 by rpki-client