$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc1b7e51-0159-3a94-8a61-6b050585ca9c.roa File: dc1b7e51-0159-3a94-8a61-6b050585ca9c.roa (raw, json) Hash identifier: rzvQqn3xcEsVFAHtVitCU0DWmAj6wprEvTfUkd+ekuo= Subject key identifier: 2D:B8:3C:9E:5E:AB:71:A4:A2:A9:7E:CE:FB:3B:B4:8A:14:23:2F:4A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F498441467327F516D2C41680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc1b7e51-0159-3a94-8a61-6b050585ca9c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 198.45.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:41:46:73:27:f5:16:d2:c4:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d861ef71-cb6a-478f-8b3c-e6a0abcd84df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:79:99:b9:4f:ec:89:fe:57:19:ba:88:24:26: 36:91:b3:65:06:fe:c7:a9:00:49:a9:23:04:ca:66: c6:a6:40:cb:58:e5:4f:28:f3:f5:62:93:0e:96:8d: c5:28:2d:16:eb:81:1e:a3:11:74:8d:9d:10:9d:d1: 37:a4:b7:74:a2:43:3f:69:be:e8:d5:67:f4:80:71: 28:68:dc:41:2d:6c:a3:1b:05:29:4d:a1:4b:89:5a: 49:76:4a:5a:a4:8d:91:d1:a0:cc:f5:ac:53:e9:03: a2:ab:91:20:c5:03:0e:7e:0b:eb:d9:84:ae:6a:de: 15:fc:0a:8d:8d:a6:75:02:fc:a0:6b:a6:b6:ef:7f: c0:50:8f:48:0f:6e:2c:e7:62:1d:76:1a:d4:97:cf: 01:f1:c5:dd:be:0d:75:45:f4:28:36:81:62:bf:71: 02:11:b7:55:8b:7c:8f:4e:8d:2f:c9:95:26:6d:a8: 1e:59:b3:82:4f:30:03:18:bd:8f:7c:a1:10:f6:a0: 79:12:4c:0f:92:8e:d1:db:35:4f:d8:e0:9d:4d:49: 19:fe:2a:89:db:9f:a6:d4:b4:1e:42:8d:81:9f:72: 36:44:45:35:a5:88:79:a5:17:0a:08:a1:6a:92:b6: c7:6d:26:ff:bb:01:4d:96:b1:46:b3:6f:41:8f:59: 6d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B8:3C:9E:5E:AB:71:A4:A2:A9:7E:CE:FB:3B:B4:8A:14:23:2F:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc1b7e51-0159-3a94-8a61-6b050585ca9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:94:c0:ac:aa:a4:cc:78:9e:7c:cf:aa:22:33:54:90:39:06: 38:aa:eb:8c:a5:d5:cf:b0:a7:ed:c9:c0:78:47:c4:2a:06:7f: 29:d6:13:b5:1e:3e:eb:00:bf:0b:8e:d2:97:6f:08:29:cc:62: 58:b6:43:9b:62:87:7d:a6:6a:34:27:5e:02:d2:a9:16:e7:72: d0:cf:cf:59:7f:5d:fc:d9:fa:16:c9:e8:92:c6:e8:75:4d:1c: e5:b2:e1:4b:9e:8c:7e:ba:9c:e3:22:4f:e3:cd:5f:aa:d0:f5: 64:c0:3c:37:d2:16:1d:b3:e2:ca:b4:e8:db:c0:9d:99:de:bb: 80:0a:94:86:c3:4c:79:29:82:d7:82:38:46:77:f1:3d:d7:69: 05:32:7f:98:23:2f:14:fd:c1:a0:27:f2:cd:ba:6a:8c:a4:74: 5b:52:87:20:f4:33:f5:7e:da:ed:c3:ac:d2:c8:42:0d:65:57: 95:43:55:1c:13:d6:06:47:ce:68:49:0f:92:59:b6:05:80:ad: 0f:36:95:28:dd:0c:38:aa:7e:a6:ba:b5:3a:53:a6:38:fe:31: 40:eb:ba:22:08:b6:a5:c8:e4:25:1d:56:fc:bb:40:34:ca:4c: 02:bd:02:4c:d3:07:f4:58:3c:57:5d:2a:d9:46:4a:be:f1:8a: 56:1c:31:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhEFGcyf1FtLEFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDg2MWVmNzEtY2I2YS00NzhmLThiM2MtZTZhMGFiY2Q4NGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnmZuU/sif5XGbqIJCY2kbNlBv7HqQBJqSME ymbGpkDLWOVPKPP1YpMOlo3FKC0W64EeoxF0jZ0QndE3pLd0okM/ab7o1Wf0gHEo aNxBLWyjGwUpTaFLiVpJdkpapI2R0aDM9axT6QOiq5EgxQMOfgvr2YSuat4V/AqN jaZ1Avyga6a273/AUI9ID24s52IddhrUl88B8cXdvg11RfQoNoFiv3ECEbdVi3yP To0vyZUmbageWbOCTzADGL2PfKEQ9qB5EkwPko7R2zVP2OCdTUkZ/iqJ25+m1LQe Qo2Bn3I2REU1pYh5pRcKCKFqkrbHbSb/uwFNlrFGs29Bj1ltSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC24PJ5eq3Gkoql+zvs7tIoUIy9KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGMxYjdlNTEtMDE1OS0z YTk0LThhNjEtNmIwNTA1ODVjYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMqUwKyqpMx4nnzPqiIzVJA5Bjiq64yl1c+wp+3JwHhHxCoGfynWE7Ue PusAvwuO0pdvCCnMYli2Q5tih32majQnXgLSqRbnctDPz1l/XfzZ+hbJ6JLG6HVN HOWy4UuejH66nOMiT+PNX6rQ9WTAPDfSFh2z4sq06NvAnZneu4AKlIbDTHkpgteC OEZ38T3XaQUyf5gjLxT9waAn8s26aoykdFtShyD0M/V+2u3DrNLIQg1lV5VDVRwT 1gZHzmhJD5JZtgWArQ82lSjdDDiqfqa6tTpTpjj+MUDruiIItqXI5CUdVvy7QDTK TAK9AkzTB/RYPFddKtlGSr7xilYcMcw= -----END CERTIFICATE-----Generated at Sat Sep 26 13:35:39 2026 by rpki-client