$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e155ec42-d837-3995-866a-d373aee2e510.roa File: e155ec42-d837-3995-866a-d373aee2e510.roa (raw, json) Hash identifier: FGzvbCIkDMiu77i3H0GmKv4VaVarv1nbbJiitDePhJY= Subject key identifier: F5:1C:C8:4B:13:2A:03:41:C7:7E:39:7E:32:6C:1F:39:E0:87:A7:09 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B9911028FD6A9AF6F3200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e155ec42-d837-3995-866a-d373aee2e510.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:99:11:02:8f:d6:a9:af:6f:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b6341c14-c60c-4b0a-9430-94bb98872e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:73:dc:e4:09:a2:81:8e:87:72:f7:b2:e2:64: 49:0b:cf:0e:a2:a2:31:e2:a9:b2:0a:c3:12:2a:9b: 46:48:9c:69:6e:ba:ca:a3:44:40:93:af:b7:d0:e2: de:32:ed:68:e1:55:40:52:0a:2d:0b:bb:6d:b9:10: c8:28:45:59:7e:57:aa:a0:8d:46:26:be:20:06:db: 64:f5:c5:37:b0:f5:b3:52:04:31:79:78:8c:24:c2: 7a:ed:e1:8a:70:86:1a:f8:1a:77:b7:2c:91:2e:5a: 07:34:5f:63:d5:6f:22:5b:5d:3a:70:60:9c:32:d6: 80:34:c5:94:8d:ed:3e:69:91:b3:cc:e9:d5:89:00: e8:f2:30:74:70:7c:b7:2d:af:a6:ef:48:ff:4b:ce: 8e:bf:c6:fe:94:65:d7:67:36:26:46:b1:99:8f:7b: d7:10:83:64:d3:d8:d7:f9:f4:9f:0f:5d:15:bb:39: 38:17:0c:c1:28:65:9d:c1:4f:95:c5:3e:f7:2f:ef: 1c:85:91:23:1b:4b:f6:67:21:79:a6:95:34:4c:a8: b6:18:33:a6:8f:30:25:ae:6d:cd:74:46:cb:39:04: 78:d7:6d:75:c4:0a:14:02:be:f2:3b:77:29:d0:ac: 6a:fa:bd:12:3e:ac:04:14:a6:7c:ff:00:87:d2:37: 03:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1C:C8:4B:13:2A:03:41:C7:7E:39:7E:32:6C:1F:39:E0:87:A7:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e155ec42-d837-3995-866a-d373aee2e510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e9:f9:4a:51:ed:f2:bf:9d:f2:f7:f6:3a:3c:4d:09:bd:b4: b2:85:5b:b4:e2:4b:af:eb:44:82:5b:29:11:f2:f7:21:e1:82: 86:ec:3c:f0:1a:aa:9c:70:bb:62:aa:23:95:df:6b:2f:7c:8f: 91:c3:2e:1c:40:26:b3:3c:89:56:ba:74:38:08:26:72:d7:fd: d2:d1:51:98:4c:07:c8:bf:63:79:ef:18:c9:fd:ea:c3:21:ad: 88:cc:26:b2:87:c1:d0:84:65:ab:42:5d:44:d6:69:d0:85:3f: 5a:4f:0b:91:ac:05:6b:65:7e:d6:54:0e:07:76:3d:ec:c0:35: d0:7b:15:7c:24:e4:ae:87:3d:1c:c8:be:e6:e3:84:d8:8d:a3: ff:df:e0:aa:4f:b3:39:f8:1f:86:ce:53:be:53:92:9f:de:9c: 65:a4:f1:21:b4:7c:0d:14:5e:04:56:36:ef:05:25:c9:b4:2c: 70:c1:2b:4f:d6:2e:9d:70:e7:bd:62:02:20:ce:f7:1e:1b:3f: 6b:b7:b8:14:28:a5:e1:88:4e:31:69:9c:e4:05:aa:b3:6b:65: d9:eb:ba:b8:45:55:21:03:a5:82:55:d9:45:2e:4a:49:ac:c1: bc:4b:55:9b:72:e0:3b:62:a0:80:22:42:6b:ed:0f:07:9a:35: e6:3f:b9:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je5kRAo/Wqa9vMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjYzNDFjMTQtYzYwYy00YjBhLTk0MzAtOTRiYjk4ODcyZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXPc5AmigY6Hcvey4mRJC88OoqIx4qmyCsMS KptGSJxpbrrKo0RAk6+30OLeMu1o4VVAUgotC7ttuRDIKEVZfleqoI1GJr4gBttk 9cU3sPWzUgQxeXiMJMJ67eGKcIYa+Bp3tyyRLloHNF9j1W8iW106cGCcMtaANMWU je0+aZGzzOnViQDo8jB0cHy3La+m70j/S86Ov8b+lGXXZzYmRrGZj3vXEINk09jX +fSfD10Vuzk4FwzBKGWdwU+VxT73L+8chZEjG0v2ZyF5ppU0TKi2GDOmjzAlrm3N dEbLOQR41211xAoUAr7yO3cp0Kxq+r0SPqwEFKZ8/wCH0jcD+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUcyEsTKgNBx345fjJsHzngh6cJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTE1NWVjNDItZDgzNy0z OTk1LTg2NmEtZDM3M2FlZTJlNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHp+UpR7fK/nfL39jo8TQm9tLKFW7TiS6/rRIJbKRHy9yHhgobsPPAa qpxwu2KqI5Xfay98j5HDLhxAJrM8iVa6dDgIJnLX/dLRUZhMB8i/Y3nvGMn96sMh rYjMJrKHwdCEZatCXUTWadCFP1pPC5GsBWtlftZUDgd2PezANdB7FXwk5K6HPRzI vubjhNiNo//f4KpPszn4H4bOU75Tkp/enGWk8SG0fA0UXgRWNu8FJcm0LHDBK0/W Lp1w571iAiDO9x4bP2u3uBQopeGITjFpnOQFqrNrZdnrurhFVSEDpYJV2UUuSkms wbxLVZty4DtioIAiQmvtDweaNeY/uSw= -----END CERTIFICATE-----Generated at Tue Sep 29 13:32:00 2026 by rpki-client