$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4af146f-4186-31c6-aa18-e49d99a4017d.roa File: e4af146f-4186-31c6-aa18-e49d99a4017d.roa (raw, json) Hash identifier: ZifQpDho8ZeQngeSDTqW1KCuTSj+EYnoWnNqN8yo6I8= Subject key identifier: DF:52:75:E5:C8:0F:23:07:70:2A:3F:17:3D:92:07:60:66:77:08:87 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983CE22C3865C5FB30A6E80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4af146f-4186-31c6-aa18-e49d99a4017d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:ce:22:c3:86:5c:5f:b3:0a:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f54f3ba5-a430-468c-a24a-035a86934c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2d:1f:d5:1f:38:0c:25:74:d2:22:f0:fa:cb: f6:05:d0:28:c2:3e:df:12:7b:71:7a:cf:a2:92:d7: 47:0f:d4:1f:b7:20:28:49:da:88:cf:a8:33:af:c1: c6:f2:5e:e0:a2:e5:10:83:d0:e8:29:f4:46:cb:d1: 20:47:ac:fd:02:7c:41:fb:1d:2c:e6:e4:8c:1d:15: b4:fa:30:0e:1a:73:71:34:09:1e:3f:42:1d:5a:94: 26:b5:15:b3:0d:83:35:71:5c:c1:72:cb:d4:0f:83: b7:dd:84:52:c8:47:6d:55:ac:90:33:d3:14:91:4c: 95:76:e5:2a:ba:86:7f:e7:7c:7e:28:74:fb:ac:2e: df:67:bc:02:bc:b5:8f:51:72:d1:17:b5:a1:7e:d0: 0f:8f:13:d3:36:01:53:ec:39:12:e4:50:f2:cb:c1: b4:22:b8:de:3a:65:02:66:b9:2e:e5:3d:dc:d3:e0: 80:36:35:e9:21:33:ea:7f:8f:a0:3d:91:d5:15:36: 8d:a2:90:11:07:3f:1e:ae:d8:e8:22:74:63:94:d8: 34:ae:19:0b:37:97:ef:90:03:39:5b:09:da:6e:49: 72:36:0c:b1:1b:c5:7f:01:ea:c5:41:9d:38:b7:b2: 69:38:19:70:06:19:0d:6f:f9:a3:aa:4e:96:3a:cc: 3e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:52:75:E5:C8:0F:23:07:70:2A:3F:17:3D:92:07:60:66:77:08:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4af146f-4186-31c6-aa18-e49d99a4017d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:70:b4:9b:33:dc:b1:9f:86:11:c8:67:3e:fb:0b:90:2e:1f: d9:35:ce:3f:7e:0f:55:3a:5a:09:f6:03:aa:43:b5:82:b7:24: 79:b2:76:8d:3b:d5:06:d6:f5:88:5e:e5:89:3e:bc:01:c3:db: 22:1d:40:65:1e:65:03:10:c1:69:6f:aa:7f:40:f9:0e:28:c5: d0:eb:6c:30:37:70:bb:4a:c7:13:15:fb:88:88:32:6d:62:fc: 46:da:69:36:3e:3c:5f:62:64:76:2b:18:fd:51:35:51:3a:1e: 24:03:73:47:73:ef:e4:66:34:bc:fd:23:5b:53:b7:76:62:33: ca:32:f9:c6:82:4b:7c:7b:19:1e:bc:2a:d9:71:9a:8a:c2:a8: 49:e6:b4:6b:fb:37:14:07:03:9a:fb:9a:ca:ff:40:a2:08:c5: 8b:f7:09:dc:bf:40:b1:d9:10:9b:d8:05:c8:89:44:ff:bb:5a: 43:4f:3d:4f:67:93:fb:b9:d2:4d:a3:13:47:12:64:47:ab:e1: f8:ed:ef:0a:8a:e9:6e:7c:45:06:d2:cc:37:17:1d:a7:ac:2e: 22:80:55:e0:2e:6a:16:9a:9e:21:63:3e:b3:3c:8e:f7:85:48: c6:23:7d:fc:d1:4c:1f:42:36:f0:96:3d:b4:2d:33:c0:6d:11: 92:01:36:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg84iw4ZcX7MKboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjU0ZjNiYTUtYTQzMC00NjhjLWEyNGEtMDM1YTg2OTM0Yzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3C0f1R84DCV00iLw+sv2BdAowj7fEntxes+i ktdHD9QftyAoSdqIz6gzr8HG8l7gouUQg9DoKfRGy9EgR6z9AnxB+x0s5uSMHRW0 +jAOGnNxNAkeP0IdWpQmtRWzDYM1cVzBcsvUD4O33YRSyEdtVayQM9MUkUyVduUq uoZ/53x+KHT7rC7fZ7wCvLWPUXLRF7WhftAPjxPTNgFT7DkS5FDyy8G0IrjeOmUC Zrku5T3c0+CANjXpITPqf4+gPZHVFTaNopARBz8ertjoInRjlNg0rhkLN5fvkAM5 WwnabklyNgyxG8V/AerFQZ04t7JpOBlwBhkNb/mjqk6WOsw+aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9SdeXIDyMHcCo/Fz2SB2BmdwiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTRhZjE0NmYtNDE4Ni0z MWM2LWFhMTgtZTQ5ZDk5YTQwMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhwtJsz3LGfhhHIZz77C5AuH9k1zj9+D1U6Wgn2A6pDtYK3JHmydo07 1QbW9Yhe5Yk+vAHD2yIdQGUeZQMQwWlvqn9A+Q4oxdDrbDA3cLtKxxMV+4iIMm1i /EbaaTY+PF9iZHYrGP1RNVE6HiQDc0dz7+RmNLz9I1tTt3ZiM8oy+caCS3x7GR68 KtlxmorCqEnmtGv7NxQHA5r7msr/QKIIxYv3Cdy/QLHZEJvYBciJRP+7WkNPPU9n k/u50k2jE0cSZEer4fjt7wqK6W58RQbSzDcXHaesLiKAVeAuahaaniFjPrM8jveF SMYjffzRTB9CNvCWPbQtM8BtEZIBNhE= -----END CERTIFICATE-----Generated at Fri Sep 25 18:47:26 2026 by rpki-client