$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e784b86d-e40a-3437-ad30-959c6010eb16.roa File: e784b86d-e40a-3437-ad30-959c6010eb16.roa (raw, json) Hash identifier: fsKfhIB3PJA3SATkXMwbpV+DfwVLEo9hZskd7vN7VYo= Subject key identifier: 53:1B:E7:98:8C:8B:33:B7:E6:15:C6:C7:CB:AF:62:41:0D:DC:20:C2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B986D47AE1C47C4016580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e784b86d-e40a-3437-ad30-959c6010eb16.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:98:6d:47:ae:1c:47:c4:01:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=33bd824a-63e4-4d9b-8277-21525965ed08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:db:0b:aa:56:55:58:6d:dc:da:28:b2:2c:4a: f8:a2:f5:29:1a:84:b4:8e:bb:a8:51:34:a5:de:b8: fc:68:25:7f:1e:45:d7:bc:41:96:51:76:1c:92:df: b0:40:cf:4f:c4:f2:7b:58:3b:31:0b:e2:a1:11:0a: 92:b5:93:64:98:d4:ed:d9:71:db:71:b1:1a:ec:ac: 5f:13:fc:96:a1:10:49:be:3f:c5:8a:b2:71:02:67: a1:1b:49:c0:80:46:e5:f8:1c:75:08:8a:ea:bb:e4: 57:81:1a:f6:93:e9:cb:8d:45:c1:42:b4:f2:aa:03: 8e:20:06:2e:e0:28:e2:78:d0:bb:64:2b:a7:b2:de: 69:1e:3c:8d:91:7e:da:fa:d9:a3:2b:5f:db:e5:50: 74:e9:4b:fa:e2:56:dc:6b:2c:0f:bc:36:45:92:31: 21:d1:95:b9:3f:d6:b5:bc:72:8b:d1:89:56:f6:f5: 01:0c:d6:b5:b0:87:e2:e1:d9:58:a3:ce:40:26:93: 7d:37:5e:27:a1:9e:5f:a3:9e:05:09:92:3a:1a:05: 01:66:5e:1d:07:b0:7e:ff:fa:29:70:61:9e:db:02: 9a:e9:67:6d:8a:25:ee:af:82:21:98:80:4d:90:29: 09:49:37:31:56:ed:34:d6:cf:49:d5:5e:5c:c8:e2: 52:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1B:E7:98:8C:8B:33:B7:E6:15:C6:C7:CB:AF:62:41:0D:DC:20:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e784b86d-e40a-3437-ad30-959c6010eb16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:4f:0c:35:da:76:c1:f1:03:0f:60:3a:a2:db:63:de:37:01: f7:22:79:1e:ef:99:3d:30:7f:3a:40:41:71:08:26:d2:9e:4a: ef:a2:2a:5d:52:85:65:bc:74:b7:a0:1d:d8:b3:37:d0:50:ca: b4:05:d4:ab:7e:4b:cb:e6:81:ad:40:7f:47:16:1f:2f:05:ff: 1e:f0:ad:bd:00:bb:73:a3:53:9b:83:05:05:99:b4:d0:c0:80: af:ed:c9:ae:d2:83:cb:ff:21:00:a7:ea:6f:55:b6:6b:9e:37: 4d:2b:94:f4:25:e5:92:1e:00:e4:f4:fa:4c:c0:96:3e:5c:9a: 80:01:83:25:51:b7:85:de:24:7b:a9:75:f0:4e:ec:65:6e:ef: a6:70:d7:2e:57:bd:6e:82:37:43:6d:e1:1e:5b:de:e7:14:be: c7:07:ba:1d:a6:a4:57:f0:d1:c6:c7:f5:34:34:06:36:43:e0: ba:d3:d8:4e:cd:ba:3e:96:ad:08:44:bb:f3:9d:d7:86:f7:e3: 77:8f:11:09:5a:7a:35:6c:ec:25:6a:14:f7:54:13:e0:ac:0b: 3d:89:98:45:80:d4:52:73:8c:d7:d0:b6:cb:c3:ef:52:e7:e6: 69:68:36:7a:ef:39:96:5e:47:07:34:52:54:ff:97:60:6b:3f: fe:a0:69:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je5htR64cR8QBZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzNiZDgyNGEtNjNlNC00ZDliLTgyNzctMjE1MjU5NjVlZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtsLqlZVWG3c2iiyLEr4ovUpGoS0jruoUTSl 3rj8aCV/HkXXvEGWUXYckt+wQM9PxPJ7WDsxC+KhEQqStZNkmNTt2XHbcbEa7Kxf E/yWoRBJvj/FirJxAmehG0nAgEbl+Bx1CIrqu+RXgRr2k+nLjUXBQrTyqgOOIAYu 4CjieNC7ZCunst5pHjyNkX7a+tmjK1/b5VB06Uv64lbcaywPvDZFkjEh0ZW5P9a1 vHKL0YlW9vUBDNa1sIfi4dlYo85AJpN9N14noZ5fo54FCZI6GgUBZl4dB7B+//op cGGe2wKa6WdtiiXur4IhmIBNkCkJSTcxVu001s9J1V5cyOJSswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMb55iMizO35hXGx8uvYkEN3CDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTc4NGI4NmQtZTQwYS0z NDM3LWFkMzAtOTU5YzYwMTBlYjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdPDDXadsHxAw9gOqLbY943AfcieR7vmT0wfzpAQXEIJtKeSu+iKl1S hWW8dLegHdizN9BQyrQF1Kt+S8vmga1Af0cWHy8F/x7wrb0Au3OjU5uDBQWZtNDA gK/tya7Sg8v/IQCn6m9VtmueN00rlPQl5ZIeAOT0+kzAlj5cmoABgyVRt4XeJHup dfBO7GVu76Zw1y5XvW6CN0Nt4R5b3ucUvscHuh2mpFfw0cbH9TQ0BjZD4LrT2E7N uj6WrQhEu/Od14b343ePEQlaejVs7CVqFPdUE+CsCz2JmEWA1FJzjNfQtsvD71Ln 5mloNnrvOZZeRwc0UlT/l2BrP/6gafY= -----END CERTIFICATE-----Generated at Tue Sep 29 15:46:54 2026 by rpki-client