$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6827c06-437e-3bae-8402-31dd89a05e30.roa File: d6827c06-437e-3bae-8402-31dd89a05e30.roa (raw, json) Hash identifier: y9mlQ92UG3PQ9QZxoGKWzBrfSp+N8bJkaeZ6QHAG8jY= Subject key identifier: 9F:D2:24:2E:17:A4:89:36:63:F8:B3:DF:D7:F1:C6:B5:38:84:2D:F6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B9262A8049458D7E61900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6827c06-437e-3bae-8402-31dd89a05e30.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:92:62:a8:04:94:58:d7:e6:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=eaaf187b-f73b-41f2-9e9b-68bb914ae07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:03:24:ff:4c:25:34:e8:35:53:8c:d4:fc:4b: 79:e6:78:e4:dd:9a:b0:17:2c:0d:f6:9d:d5:6e:ad: 00:f0:00:31:75:68:42:17:9c:94:9e:11:e0:17:88: 45:61:dc:c7:64:51:7f:2b:83:40:9c:3a:61:a9:20: c6:49:3a:f3:fa:b1:dc:84:d6:b4:23:cb:eb:b2:e2: f5:8d:93:f4:67:fa:07:71:87:c6:92:74:3f:b6:65: 6a:e6:46:d3:a8:5f:49:6c:c0:36:d6:bb:ea:07:66: fe:b8:61:5c:10:ef:9f:34:4c:54:0b:39:0c:ac:05: cf:ce:04:0c:1e:98:9c:b1:04:f4:48:53:11:0e:a0: 43:7f:da:33:61:f2:bf:c8:46:80:44:a1:6e:01:99: 43:e7:f8:23:a3:19:77:e4:58:21:88:27:95:19:0f: e4:27:31:bb:da:8f:8a:fb:8b:08:37:e5:85:2d:56: 3e:34:8d:75:6a:ae:70:38:de:cf:bd:c9:9c:68:b3: 0e:a1:94:50:cf:76:0f:f9:7c:8c:6b:eb:99:46:e5: da:0c:0a:97:5e:92:4b:7a:27:bb:a6:69:fc:93:a6: bb:14:cc:1b:cc:f9:7c:79:29:79:3d:e8:fd:ea:91: 4b:76:e7:cd:a2:ae:40:1d:da:1e:68:4d:f7:83:78: bb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D2:24:2E:17:A4:89:36:63:F8:B3:DF:D7:F1:C6:B5:38:84:2D:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6827c06-437e-3bae-8402-31dd89a05e30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:fa:6b:56:d9:10:89:51:2d:44:4d:11:f2:52:9d:35:94:fa: b8:87:29:fd:9e:64:25:7a:82:e2:72:04:41:34:e8:f6:83:01: 89:c4:49:13:fb:ca:81:dd:f4:20:9a:21:97:72:11:fe:a0:7d: 30:e2:e1:b5:4f:b0:d6:0f:be:fe:6b:f9:57:98:a8:5f:67:71: 14:d2:12:18:2a:e0:24:6e:46:63:6e:4a:b8:d8:b9:c5:c9:82: ca:cc:7b:be:9f:e0:4d:8c:bf:c4:dd:2e:54:29:bb:f9:c1:a9: bb:76:46:87:72:68:88:00:51:87:84:62:d1:9c:39:4a:11:27: 30:50:98:3b:d7:c6:ba:9f:03:19:13:77:c8:1e:40:20:de:3b: 0d:94:28:87:7f:98:b6:ee:7a:f0:ed:46:e7:36:8e:83:f0:e2: f9:52:ae:45:a0:4b:5d:d6:cc:5d:fb:1d:6f:f1:73:6e:85:db: 91:1a:82:53:10:61:e1:2c:f8:14:20:1b:58:20:3a:3b:ba:7e: 59:e5:c4:ef:e2:89:1f:32:fa:5c:03:3e:a4:f8:90:0e:41:48: e9:9c:09:a6:11:95:40:20:32:56:00:8b:f5:68:6e:1f:5f:70: 9e:6a:e4:95:d8:86:77:73:23:f7:83:cd:16:99:82:37:a9:f3: 1e:8a:26:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je5JiqASUWNfmGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWFhZjE4N2ItZjczYi00MWYyLTllOWItNjhiYjkxNGFlMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQMk/0wlNOg1U4zU/Et55njk3ZqwFywN9p3V bq0A8AAxdWhCF5yUnhHgF4hFYdzHZFF/K4NAnDphqSDGSTrz+rHchNa0I8vrsuL1 jZP0Z/oHcYfGknQ/tmVq5kbTqF9JbMA21rvqB2b+uGFcEO+fNExUCzkMrAXPzgQM HpicsQT0SFMRDqBDf9ozYfK/yEaARKFuAZlD5/gjoxl35FghiCeVGQ/kJzG72o+K +4sIN+WFLVY+NI11aq5wON7PvcmcaLMOoZRQz3YP+XyMa+uZRuXaDAqXXpJLeie7 pmn8k6a7FMwbzPl8eSl5Pej96pFLdufNoq5AHdoeaE33g3i7/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/SJC4XpIk2Y/iz39fxxrU4hC32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDY4MjdjMDYtNDM3ZS0z YmFlLTg0MDItMzFkZDg5YTA1ZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALb6a1bZEIlRLURNEfJSnTWU+riHKf2eZCV6guJyBEE06PaDAYnESRP7 yoHd9CCaIZdyEf6gfTDi4bVPsNYPvv5r+VeYqF9ncRTSEhgq4CRuRmNuSrjYucXJ gsrMe76f4E2Mv8TdLlQpu/nBqbt2RodyaIgAUYeEYtGcOUoRJzBQmDvXxrqfAxkT d8geQCDeOw2UKId/mLbuevDtRuc2joPw4vlSrkWgS13WzF37HW/xc26F25EaglMQ YeEs+BQgG1ggOju6flnlxO/iiR8y+lwDPqT4kA5BSOmcCaYRlUAgMlYAi/Vobh9f cJ5q5JXYhndzI/eDzRaZgjep8x6KJl8= -----END CERTIFICATE-----Generated at Tue Sep 29 13:51:27 2026 by rpki-client