$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7e5cf07-48ae-33b1-b40b-858d96c269ef.roa File: d7e5cf07-48ae-33b1-b40b-858d96c269ef.roa (raw, json) Hash identifier: DVbLfyGbgxm6DpkTpbzOaGA/KRPgbEroXuxoR7EtXUM= Subject key identifier: E9:8D:8D:A5:75:66:71:F5:A9:B2:7F:72:B9:09:7B:43:A7:E4:53:D6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B991CE9EA780111A6DF40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7e5cf07-48ae-33b1-b40b-858d96c269ef.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:99:1c:e9:ea:78:01:11:a6:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d33e4d2d-6750-4401-9f15-98574079464d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1a:48:58:2b:29:5a:a5:14:2d:5b:ea:2d:5d: 36:37:0c:d4:03:30:da:cf:ea:f4:b4:9b:60:ab:50: 57:f8:e8:a8:b8:1a:4e:49:f2:c4:0e:c5:78:bf:26: d4:4a:74:84:b0:e1:1d:3e:42:ac:37:f6:95:56:c9: df:5c:a5:e1:e7:77:7b:45:3e:7c:59:a4:7f:19:7a: 44:b4:8e:2c:61:ff:0d:1d:ee:2a:79:1a:b6:03:09: 7a:68:2c:0e:23:ad:41:fd:1a:19:47:bf:80:8a:3e: 7d:01:81:00:9f:34:ad:a4:d8:42:d1:d2:55:1c:49: f4:ea:fc:d3:89:68:62:6a:0f:f3:c1:2a:96:9e:d9: bc:fa:2d:07:3a:77:af:82:07:92:24:2c:a8:01:44: 63:c8:92:6c:79:09:3f:a5:d6:55:9a:15:d8:c1:7b: e7:31:a1:4e:00:a9:26:83:0c:cf:c2:3c:1f:c6:af: e7:e9:81:33:f1:06:df:18:d6:7d:f3:f8:be:0b:46: 00:fd:12:c3:e2:80:53:b3:c5:68:76:ce:a1:3c:b6: 5f:b1:48:0d:29:23:57:19:e6:9d:8a:0d:fa:2f:48: e8:90:8d:84:04:a0:60:17:7b:97:ca:86:5c:0f:24: 53:24:ae:29:df:0c:df:fe:1d:a0:69:31:ce:46:4f: 85:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8D:8D:A5:75:66:71:F5:A9:B2:7F:72:B9:09:7B:43:A7:E4:53:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7e5cf07-48ae-33b1-b40b-858d96c269ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:37:27:5c:6c:06:ad:de:fe:12:aa:d7:49:37:9e:8d:a4:db: ba:82:79:15:5f:4b:1a:f9:15:80:17:73:3d:2e:0c:42:e8:b7: 12:c5:18:c5:07:47:a6:18:4d:64:20:72:56:75:1c:0c:3e:3d: 28:ca:6b:13:35:ef:6e:9e:4c:2f:9c:55:da:c5:b5:6d:0f:5e: d1:63:be:b6:94:f0:c3:77:3d:82:a8:b0:26:19:f4:7b:cc:d6: ec:4a:3e:29:99:61:2c:48:1d:ba:a9:1d:3d:40:c5:e1:6d:50: 37:4c:a0:5c:9f:24:99:b8:cb:ea:cc:e8:92:f5:5f:71:ff:15: dd:0e:75:04:04:ff:21:b1:f9:f7:f3:17:f3:92:3e:4a:10:30: 7d:4d:f2:2c:56:d9:7d:32:14:b0:96:74:5b:ee:51:7f:f8:c6: 5c:6a:78:9d:10:40:86:c5:ab:e8:78:13:ae:91:89:91:06:d5: 2e:78:86:fb:55:de:d5:16:3b:e1:2b:eb:27:82:21:bd:5a:32: 91:5a:f2:9f:b0:0b:df:37:fa:d4:0e:fb:3c:36:5b:9b:1a:f6: 67:7a:03:ec:a5:af:69:e1:f0:bb:53:b3:6c:ff:af:82:00:1f: 03:51:83:1b:d8:76:30:4f:e7:4a:66:8d:89:59:b7:f6:e7:10: f2:05:9b:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je5kc6ep4ARGm30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDMzZTRkMmQtNjc1MC00NDAxLTlmMTUtOTg1NzQwNzk0NjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBpIWCspWqUULVvqLV02NwzUAzDaz+r0tJtg q1BX+OiouBpOSfLEDsV4vybUSnSEsOEdPkKsN/aVVsnfXKXh53d7RT58WaR/GXpE tI4sYf8NHe4qeRq2Awl6aCwOI61B/RoZR7+Aij59AYEAnzStpNhC0dJVHEn06vzT iWhiag/zwSqWntm8+i0HOnevggeSJCyoAURjyJJseQk/pdZVmhXYwXvnMaFOAKkm gwzPwjwfxq/n6YEz8QbfGNZ98/i+C0YA/RLD4oBTs8Vods6hPLZfsUgNKSNXGead ig36L0jokI2EBKBgF3uXyoZcDyRTJK4p3wzf/h2gaTHORk+FQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmNjaV1ZnH1qbJ/crkJe0On5FPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDdlNWNmMDctNDhhZS0z M2IxLWI0MGItODU4ZDk2YzI2OWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE3J1xsBq3e/hKq10k3no2k27qCeRVfSxr5FYAXcz0uDELotxLFGMUH R6YYTWQgclZ1HAw+PSjKaxM1726eTC+cVdrFtW0PXtFjvraU8MN3PYKosCYZ9HvM 1uxKPimZYSxIHbqpHT1AxeFtUDdMoFyfJJm4y+rM6JL1X3H/Fd0OdQQE/yGx+ffz F/OSPkoQMH1N8ixW2X0yFLCWdFvuUX/4xlxqeJ0QQIbFq+h4E66RiZEG1S54hvtV 3tUWO+Er6yeCIb1aMpFa8p+wC983+tQO+zw2W5sa9md6A+ylr2nh8LtTs2z/r4IA HwNRgxvYdjBP50pmjYlZt/bnEPIFm6c= -----END CERTIFICATE-----Generated at Fri Sep 25 20:42:01 2026 by rpki-client