$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8e8fa5e-c66c-395e-b819-56d247bfd1c5.roa File: d8e8fa5e-c66c-395e-b819-56d247bfd1c5.roa (raw, json) Hash identifier: bRXZhtdDO431JjMSt+yd0ArIAqIy1vFeQVEZA0Om62M= Subject key identifier: 20:40:5E:E2:48:C3:7A:E0:AA:43:45:F3:F5:A6:71:54:DA:B3:75:80 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983D34CF30143E97E701100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8e8fa5e-c66c-395e-b819-56d247bfd1c5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:d3:4c:f3:01:43:e9:7e:70:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=231db19c-c3d0-4435-a92c-87299f893d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:85:bc:55:52:99:aa:45:c9:3d:61:8d:a1:84: cb:d6:25:f1:05:c7:0e:4f:dc:ca:f5:ff:ec:11:cc: ec:79:57:22:53:8b:05:00:7e:41:c6:e0:fd:68:77: 7b:54:91:e4:d5:43:88:8e:5c:3d:b0:6a:94:85:80: 95:a5:c3:10:6f:82:29:10:5e:ff:bf:58:a0:41:6e: d9:c6:62:11:5d:bb:5c:b8:47:a5:7e:7e:cd:04:b4: aa:65:b9:ac:b9:8d:21:66:c2:91:7d:ed:a0:18:ab: eb:02:9e:8f:1c:3c:19:c0:f8:bf:99:64:20:85:eb: 72:87:20:66:dc:32:b5:1d:3c:30:2a:3e:da:5f:fe: d4:a3:1a:57:3f:78:45:ea:68:41:f8:50:1c:3d:aa: 5d:67:ce:fc:5b:f7:d3:1d:97:1f:53:24:ed:e2:bc: 55:07:6d:17:c2:4b:11:93:f6:47:c0:6d:d8:c6:4c: ea:a8:75:e5:0f:ee:87:5d:95:0e:25:ca:16:f9:01: f1:af:0c:d4:3f:de:2f:9e:16:3a:33:99:7f:ad:74: 8d:ef:b9:e8:aa:0c:74:4f:d7:60:e8:c1:21:71:a0: a2:17:6b:fa:45:0f:de:b0:7f:1d:45:f7:86:aa:a1: 67:98:af:cd:ca:d6:e0:ba:da:f8:35:81:85:9e:d7: aa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:40:5E:E2:48:C3:7A:E0:AA:43:45:F3:F5:A6:71:54:DA:B3:75:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8e8fa5e-c66c-395e-b819-56d247bfd1c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:7e:22:1f:eb:6c:b3:38:99:6e:c3:74:1c:0d:f7:ae:43:84: 98:33:8a:48:66:ca:96:1f:32:82:1f:3d:4e:4b:dc:6f:62:a6: 03:65:9e:d5:4a:64:0e:0b:57:80:f6:23:a4:01:15:4e:ff:54: 6f:fb:88:c6:ef:e2:b0:cf:a7:05:5d:00:dc:0b:79:27:4a:74: ce:6f:8a:b8:03:1b:da:ac:88:ce:08:a2:29:f9:ac:d1:a9:18: b3:1c:fb:b3:32:6f:f1:0b:5f:9d:77:e8:c0:c1:07:1e:8c:70: 9f:52:93:77:66:76:b2:0f:71:f4:14:b1:41:16:4f:56:51:51: 08:79:c7:b2:0e:76:c1:e4:e8:54:98:64:13:bc:cc:dd:83:97: 52:9e:da:64:40:bb:cd:8d:40:45:f9:e3:53:14:54:99:da:9f: a6:b6:a3:0c:94:c0:ec:39:e0:f5:12:70:97:95:39:1e:ad:23: ea:5f:e4:58:67:53:f7:10:55:83:12:80:76:ed:83:a2:9f:f1: 7b:01:17:b9:ab:f6:07:f3:a9:7c:17:f0:72:26:d4:86:87:6c: f6:49:72:6c:00:79:0b:fa:9c:71:d5:6a:b7:06:e0:3d:29:85: e8:80:2c:ac:8a:ae:fa:9e:6b:9a:fc:bf:7a:b9:7e:2a:3c:ab: f7:02:44:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg9NM8wFD6X5wEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjMxZGIxOWMtYzNkMC00NDM1LWE5MmMtODcyOTlmODkzZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4W8VVKZqkXJPWGNoYTL1iXxBccOT9zK9f/s EczseVciU4sFAH5BxuD9aHd7VJHk1UOIjlw9sGqUhYCVpcMQb4IpEF7/v1igQW7Z xmIRXbtcuEelfn7NBLSqZbmsuY0hZsKRfe2gGKvrAp6PHDwZwPi/mWQghetyhyBm 3DK1HTwwKj7aX/7UoxpXP3hF6mhB+FAcPapdZ878W/fTHZcfUyTt4rxVB20XwksR k/ZHwG3YxkzqqHXlD+6HXZUOJcoW+QHxrwzUP94vnhY6M5l/rXSN77noqgx0T9dg 6MEhcaCiF2v6RQ/esH8dRfeGqqFnmK/Nytbgutr4NYGFnteqIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBAXuJIw3rgqkNF8/WmcVTas3WAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDhlOGZhNWUtYzY2Yy0z OTVlLWI4MTktNTZkMjQ3YmZkMWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKt+Ih/rbLM4mW7DdBwN965DhJgzikhmypYfMoIfPU5L3G9ipgNlntVK ZA4LV4D2I6QBFU7/VG/7iMbv4rDPpwVdANwLeSdKdM5virgDG9qsiM4Ioin5rNGp GLMc+7Myb/ELX5136MDBBx6McJ9Sk3dmdrIPcfQUsUEWT1ZRUQh5x7IOdsHk6FSY ZBO8zN2Dl1Ke2mRAu82NQEX541MUVJnan6a2owyUwOw54PUScJeVOR6tI+pf5Fhn U/cQVYMSgHbtg6Kf8XsBF7mr9gfzqXwX8HIm1IaHbPZJcmwAeQv6nHHVarcG4D0p heiALKyKrvqea5r8v3q5fio8q/cCREk= -----END CERTIFICATE-----Generated at Tue Sep 29 06:57:01 2026 by rpki-client