$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e68fab52-4b7b-3186-a6db-24c47ebb3712.roa File: e68fab52-4b7b-3186-a6db-24c47ebb3712.roa (raw, json) Hash identifier: d14zfdy7+UovLd4YIFSHMIENEMkNtiJutCaSrcyelIw= Subject key identifier: 62:E3:D3:C5:6F:6E:CF:19:BE:21:5D:0D:EA:CB:28:5F:C1:5A:A5:BE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BA2DEEB108F904A01A6C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e68fab52-4b7b-3186-a6db-24c47ebb3712.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:a2:de:eb:10:8f:90:4a:01:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=da60c452-b13f-4770-ae83-5004c63e11ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:b4:35:cb:d9:58:b8:57:ed:be:92:51:d8: 58:69:44:31:d6:72:81:77:b9:53:df:27:95:31:f1: b2:15:d6:f0:a2:97:76:f5:27:f2:9a:c3:ae:c8:92: c2:6a:41:49:18:60:cb:4a:81:14:5c:f4:a7:cc:95: 3d:a7:d2:ec:d9:5a:9f:da:61:e7:3a:69:81:41:b5: 71:af:c2:ef:67:5e:63:8c:fb:b8:99:77:03:1e:67: 73:f8:a5:02:84:56:15:ca:18:59:ae:25:b3:e4:aa: a3:ef:46:04:3a:df:ec:37:e3:f3:17:82:25:38:81: f9:aa:92:91:3a:15:cc:a9:47:74:b3:75:a2:de:19: e7:98:60:22:c9:a1:ab:94:a5:19:eb:f5:d7:10:f1: 19:4b:22:af:57:ab:eb:09:dc:51:cb:50:f6:4e:b2: fb:4c:0f:34:6a:9c:a6:31:1b:53:52:dc:31:16:a6: 7b:a9:e6:3f:3f:4b:5d:30:93:59:0a:a0:b3:46:55: 3f:7b:9c:3c:8e:d0:02:f8:8e:2b:6e:29:0c:f7:d1: 5d:51:b1:cb:5e:3c:41:06:c8:fa:f0:ae:d6:80:96: ff:2b:1c:6c:c0:14:63:89:4b:5d:2b:a6:fd:f5:1b: 82:43:3a:59:e5:77:65:0a:ee:27:a3:04:1f:9e:fa: 70:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E3:D3:C5:6F:6E:CF:19:BE:21:5D:0D:EA:CB:28:5F:C1:5A:A5:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e68fab52-4b7b-3186-a6db-24c47ebb3712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:6d:4d:58:dc:19:57:5f:16:e6:c1:ae:0c:c7:15:ed:d9:de: b6:3a:8a:33:85:01:9d:f0:ed:1b:22:10:51:db:e1:87:9e:d2: d7:16:c4:8b:94:1e:15:9b:83:90:0a:0e:e3:1c:2f:fa:75:8f: 52:d3:76:9d:2d:e5:e0:af:6d:29:3c:12:00:ff:dd:52:e8:1c: 18:a0:2f:86:fd:95:ef:37:9d:14:ac:be:11:a3:bb:82:34:fb: 9b:14:b2:0b:bf:01:14:18:ef:bc:55:5c:c9:ae:40:b8:34:62: 37:fc:9f:f5:43:c7:a6:13:4f:b9:04:77:7a:ef:33:38:0f:23: 78:23:58:20:05:e2:c8:68:4a:0b:e6:39:ee:a9:5c:71:54:44: 88:9d:51:c0:96:b9:8b:56:37:5d:4e:76:f9:e9:44:f8:d4:fd: f1:92:6c:2e:87:ea:1d:50:85:2d:0e:10:1f:57:76:4d:82:bc: ed:58:8f:e6:45:19:6f:de:1b:d3:dc:5c:da:9d:c3:48:39:d4: 44:12:7f:29:38:a1:1f:58:e1:cb:aa:79:57:75:f3:a5:2c:31: d2:26:b2:50:e9:c1:a3:cf:f7:6a:d5:57:04:8f:49:da:e6:37: 9b:89:7e:66:10:7b:d7:1e:52:1c:ff:70:6c:af:be:d9:2e:e3: c8:ff:08:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je6Le6xCPkEoBpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGE2MGM0NTItYjEzZi00NzcwLWFlODMtNTAwNGM2M2UxMWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLm0NcvZWLhX7b6SUdhYaUQx1nKBd7lT3yeV MfGyFdbwopd29SfymsOuyJLCakFJGGDLSoEUXPSnzJU9p9Ls2Vqf2mHnOmmBQbVx r8LvZ15jjPu4mXcDHmdz+KUChFYVyhhZriWz5Kqj70YEOt/sN+PzF4IlOIH5qpKR OhXMqUd0s3Wi3hnnmGAiyaGrlKUZ6/XXEPEZSyKvV6vrCdxRy1D2TrL7TA80apym MRtTUtwxFqZ7qeY/P0tdMJNZCqCzRlU/e5w8jtAC+I4rbikM99FdUbHLXjxBBsj6 8K7WgJb/KxxswBRjiUtdK6b99RuCQzpZ5XdlCu4nowQfnvpw0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLj08Vvbs8ZviFdDerLKF/BWqW+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTY4ZmFiNTItNGI3Yi0z MTg2LWE2ZGItMjRjNDdlYmIzNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxtTVjcGVdfFubBrgzHFe3Z3rY6ijOFAZ3w7RsiEFHb4Yee0tcWxIuU HhWbg5AKDuMcL/p1j1LTdp0t5eCvbSk8EgD/3VLoHBigL4b9le83nRSsvhGju4I0 +5sUsgu/ARQY77xVXMmuQLg0Yjf8n/VDx6YTT7kEd3rvMzgPI3gjWCAF4shoSgvm Oe6pXHFURIidUcCWuYtWN11OdvnpRPjU/fGSbC6H6h1QhS0OEB9Xdk2CvO1Yj+ZF GW/eG9PcXNqdw0g51EQSfyk4oR9Y4cuqeVd186UsMdImslDpwaPP92rVVwSPSdrm N5uJfmYQe9ceUhz/cGyvvtku48j/CLk= -----END CERTIFICATE-----Generated at Sat Sep 26 14:35:52 2026 by rpki-client