$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df9b0389-0511-3f33-9eab-3d06768fd88e.roa File: df9b0389-0511-3f33-9eab-3d06768fd88e.roa (raw, json) Hash identifier: hwsETMctYeG1Mt7lBs/s9pBETwTPIZqzfweHjtZjKRk= Subject key identifier: 96:A8:8D:67:84:40:0B:78:9C:46:67:A2:68:08:90:FA:73:CF:7F:30 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B9B83A7C9EAC3A33584C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df9b0389-0511-3f33-9eab-3d06768fd88e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:9b:83:a7:c9:ea:c3:a3:35:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0c24fa96-a21c-40b0-938f-b35b9beb0572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:27:0b:0e:10:5b:c5:b3:38:f1:a5:eb:25:70: 0c:ba:d6:29:cd:08:5e:2e:e2:c3:e8:1a:5f:6a:85: 34:19:4a:df:10:ff:f6:a8:6c:31:3a:61:66:24:d6: b3:04:2f:c0:5e:23:4a:45:d4:fd:00:06:17:83:ff: bd:cc:03:57:1a:5a:fe:5d:b3:db:83:ae:f6:29:5f: 34:57:b1:62:7f:0d:31:8d:18:e4:33:1d:b0:6a:a2: 69:b6:b3:cd:e9:6e:06:e3:66:ce:8c:2b:d4:bc:14: d9:c6:a8:24:60:d9:3a:f5:e0:36:96:ea:13:c0:d5: 83:b0:58:d7:0e:56:9b:03:b9:4f:ea:3e:55:9e:f3: ae:02:36:3d:1c:55:ed:18:0d:3c:e8:1e:68:d0:9e: 37:57:21:95:e1:5b:b4:e1:7c:af:f2:ae:e9:31:9b: c3:0a:e5:18:1c:c8:f2:27:a1:14:63:c6:30:85:dd: 86:fe:6f:01:ea:e7:08:2b:d9:14:1c:04:69:99:a8: f9:92:d3:93:53:30:27:62:50:fd:bb:4e:21:c6:55: a1:0c:b0:2f:92:d7:7a:90:3d:65:00:e7:54:f5:d6: 4a:14:54:89:83:79:46:42:93:af:ed:d4:5e:11:57: ce:ff:be:92:5f:7a:ae:ba:af:ef:4c:cd:34:52:ab: 7f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A8:8D:67:84:40:0B:78:9C:46:67:A2:68:08:90:FA:73:CF:7F:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df9b0389-0511-3f33-9eab-3d06768fd88e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:7f:e8:cd:b2:c8:50:80:5e:96:0e:fe:a9:60:01:f9:8b:a4: 39:28:73:3f:44:35:ea:50:8b:7b:57:94:e3:8e:6f:c2:12:68: 4b:10:34:f4:88:57:61:50:c1:82:5b:3c:13:a1:cf:a1:a8:f7: 70:cb:0c:66:64:f6:8a:7e:78:d5:2a:b9:23:9a:c3:7c:6a:7a: 11:d7:e2:46:9f:58:35:31:62:5f:09:d7:a6:1c:51:cb:cf:f2: 0e:ed:bf:61:73:35:a9:99:7d:d6:be:a4:a1:e0:c7:cf:0e:98: 73:37:3c:76:56:6a:8f:a0:96:f1:8e:60:7d:1c:d7:d2:d0:75: 90:5b:d8:6a:3d:d4:51:3c:4f:ce:c5:54:3c:b8:b4:fa:20:c5: 82:1c:b4:25:37:72:a2:89:bd:d1:84:06:f8:6c:58:62:3b:05: ee:10:d1:3b:cc:2b:88:69:54:e0:30:17:fa:81:47:83:bb:08: 97:f0:84:59:90:6b:20:8b:60:6e:aa:1f:77:2b:81:fb:34:e3: 7d:cf:42:dd:f9:e0:e6:3e:df:f9:e8:07:37:85:53:55:c5:b6: 2a:b9:46:09:36:17:34:cc:39:0c:36:4d:5d:da:db:28:63:f4: b7:74:50:7b:4c:ee:b7:c1:08:b4:f5:43:84:cd:8d:8e:15:89: 16:01:c7:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je5uDp8nqw6M1hMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGMyNGZhOTYtYTIxYy00MGIwLTkzOGYtYjM1YjliZWIwNTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6icLDhBbxbM48aXrJXAMutYpzQheLuLD6Bpf aoU0GUrfEP/2qGwxOmFmJNazBC/AXiNKRdT9AAYXg/+9zANXGlr+XbPbg672KV80 V7Fifw0xjRjkMx2waqJptrPN6W4G42bOjCvUvBTZxqgkYNk69eA2luoTwNWDsFjX DlabA7lP6j5VnvOuAjY9HFXtGA086B5o0J43VyGV4Vu04Xyv8q7pMZvDCuUYHMjy J6EUY8Ywhd2G/m8B6ucIK9kUHARpmaj5ktOTUzAnYlD9u04hxlWhDLAvktd6kD1l AOdU9dZKFFSJg3lGQpOv7dReEVfO/76SX3quuq/vTM00Uqt/IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaojWeEQAt4nEZnomgIkPpzz38wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGY5YjAzODktMDUxMS0z ZjMzLTllYWItM2QwNjc2OGZkODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABx/6M2yyFCAXpYO/qlgAfmLpDkocz9ENepQi3tXlOOOb8ISaEsQNPSI V2FQwYJbPBOhz6Go93DLDGZk9op+eNUquSOaw3xqehHX4kafWDUxYl8J16YcUcvP 8g7tv2FzNamZfda+pKHgx88OmHM3PHZWao+glvGOYH0c19LQdZBb2Go91FE8T87F VDy4tPogxYIctCU3cqKJvdGEBvhsWGI7Be4Q0TvMK4hpVOAwF/qBR4O7CJfwhFmQ ayCLYG6qH3crgfs0433PQt354OY+3/noBzeFU1XFtiq5Rgk2FzTMOQw2TV3a2yhj 9Ld0UHtM7rfBCLT1Q4TNjY4ViRYBxzM= -----END CERTIFICATE-----Generated at Mon Sep 28 19:43:10 2026 by rpki-client