$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd7528fc-7f52-323b-aae3-9aa1ca12354e.roa File: dd7528fc-7f52-323b-aae3-9aa1ca12354e.roa (raw, json) Hash identifier: HKiSvG+jckA7z5lwd1EwGHrD0ju+X54uiUAgz1nMpVU= Subject key identifier: 90:5C:0A:C6:FC:58:7F:34:E2:C5:D0:73:77:26:8E:45:E2:07:75:96 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983DC73EA345059A46FCDC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd7528fc-7f52-323b-aae3-9aa1ca12354e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:dc:73:ea:34:50:59:a4:6f:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a12df538-f825-4dcf-b8d1-f0d0b72e1d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:57:3b:40:a0:c5:ee:62:1e:5d:a9:a4:15:f1: 59:74:1d:4c:5a:41:f7:88:47:25:6e:e2:02:37:95: 0f:64:a2:bd:be:ab:57:d6:d8:bb:91:f7:f2:c9:e0: 61:57:4b:67:d8:31:b8:a1:22:94:f7:13:d4:28:f0: fc:c4:01:0a:e2:1c:4d:0b:c6:ec:3b:40:22:7a:55: 40:1c:46:cf:c6:42:60:8b:2f:61:f2:37:8a:89:6e: cf:8d:a9:ed:c1:bb:8e:9f:d3:b0:df:45:a1:dd:27: 33:2f:4e:c5:56:63:42:bc:5b:d0:f6:0c:39:2a:d8: 8a:75:bf:ce:6a:60:6a:65:3b:7d:6f:14:40:35:01: 82:cc:19:ca:09:fc:7d:be:4e:93:12:33:d9:eb:68: b2:c6:d1:f1:8b:11:5f:a2:a5:58:8d:94:e7:ad:2e: f2:ea:b4:52:85:1b:7c:1f:ff:4d:00:49:d7:b9:a8: 7b:0a:b4:6c:99:80:54:ba:7d:22:c6:96:d8:0c:34: e8:2a:f2:3f:89:08:e3:ef:ae:6d:c5:cf:79:56:71: e4:b1:d3:c0:f7:0e:b4:a5:70:43:e0:31:57:26:14: 4b:92:14:7d:75:cc:a4:d6:fe:40:96:cd:f1:2b:f6: e5:67:ca:c4:73:fa:dd:69:13:9a:5f:58:1f:eb:75: d4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5C:0A:C6:FC:58:7F:34:E2:C5:D0:73:77:26:8E:45:E2:07:75:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd7528fc-7f52-323b-aae3-9aa1ca12354e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:79:ab:b6:5e:fb:48:fb:19:13:f3:18:c0:28:5e:1c:53:2b: 5a:0a:a6:e4:a2:fa:c5:0d:90:83:ed:2d:c2:64:98:97:24:d6: 5d:ea:2d:f2:83:a5:42:95:7d:c0:1f:9f:ac:00:a8:72:f2:07: 25:8e:66:8f:16:79:c9:08:cb:2a:f2:36:f9:d6:04:8a:62:1f: fb:ff:9e:71:48:2f:da:f9:37:8b:ca:66:b0:07:9d:52:64:b3: c9:32:31:38:49:69:3c:b8:9d:d4:01:c8:3e:9a:59:5a:8e:a7: a6:b1:5d:93:71:ba:21:3d:4a:5a:97:0b:89:c8:5c:a5:73:44: 2f:3f:f7:08:10:cf:aa:99:74:a1:b8:36:b6:ab:ea:b3:52:0d: 48:13:25:a1:16:3c:57:e7:de:54:ed:24:5b:fd:79:04:aa:db: de:a8:26:65:58:a3:b1:27:6f:86:e2:f4:d2:2a:d0:43:f0:42: 45:c4:f1:d6:12:2c:ab:f1:d9:17:af:3b:b9:e7:22:a2:7e:96: b4:b7:23:86:17:2e:17:20:e2:f8:1c:4e:c7:e5:21:7f:a4:5f: 72:d6:9c:1b:d1:43:18:5e:de:74:03:81:dc:07:46:8e:cd:92: 10:17:e6:84:d6:a4:fb:e3:73:a9:c6:4d:a0:33:72:d0:59:37: ea:97:2d:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg9xz6jRQWaRvzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTEyZGY1MzgtZjgyNS00ZGNmLWI4ZDEtZjBkMGI3MmUxZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21c7QKDF7mIeXamkFfFZdB1MWkH3iEclbuIC N5UPZKK9vqtX1ti7kffyyeBhV0tn2DG4oSKU9xPUKPD8xAEK4hxNC8bsO0AielVA HEbPxkJgiy9h8jeKiW7PjantwbuOn9Ow30Wh3SczL07FVmNCvFvQ9gw5KtiKdb/O amBqZTt9bxRANQGCzBnKCfx9vk6TEjPZ62iyxtHxixFfoqVYjZTnrS7y6rRShRt8 H/9NAEnXuah7CrRsmYBUun0ixpbYDDToKvI/iQjj765txc95VnHksdPA9w60pXBD 4DFXJhRLkhR9dcyk1v5Als3xK/blZ8rEc/rdaROaX1gf63XUdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBcCsb8WH804sXQc3cmjkXiB3WWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGQ3NTI4ZmMtN2Y1Mi0z MjNiLWFhZTMtOWFhMWNhMTIzNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZ5q7Ze+0j7GRPzGMAoXhxTK1oKpuSi+sUNkIPtLcJkmJck1l3qLfKD pUKVfcAfn6wAqHLyByWOZo8WeckIyyryNvnWBIpiH/v/nnFIL9r5N4vKZrAHnVJk s8kyMThJaTy4ndQByD6aWVqOp6axXZNxuiE9SlqXC4nIXKVzRC8/9wgQz6qZdKG4 Nrar6rNSDUgTJaEWPFfn3lTtJFv9eQSq296oJmVYo7Enb4bi9NIq0EPwQkXE8dYS LKvx2RevO7nnIqJ+lrS3I4YXLhcg4vgcTsflIX+kX3LWnBvRQxhe3nQDgdwHRo7N khAX5oTWpPvjc6nGTaAzctBZN+qXLUQ= -----END CERTIFICATE-----Generated at Sat Sep 26 14:06:40 2026 by rpki-client