$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f99da527-b425-3438-91d1-aa255a3de285.roa File: f99da527-b425-3438-91d1-aa255a3de285.roa (raw, json) Hash identifier: qxy49fM3IracgxfIb/GF5FHoavS8a2ryLEwZ7+254B4= Subject key identifier: 82:5C:5E:23:B3:ED:39:1E:C6:90:2F:5A:8D:3F:52:0F:01:65:C9:9F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BA8BAEADCFB3722B26300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f99da527-b425-3438-91d1-aa255a3de285.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:a8:ba:ea:dc:fb:37:22:b2:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0549472b-be53-4a2a-b2ac-e54d08cc574a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dc:21:11:2a:c4:df:c7:41:97:f0:89:8c:6c: e5:85:c2:20:6d:ab:79:f3:0a:c1:1b:a2:94:7b:6b: 61:e1:d4:42:88:c0:b6:8b:5b:37:43:ec:14:66:c5: ff:52:ad:e8:89:1b:d8:1d:f6:4a:d5:fc:28:72:01: d4:28:5c:ce:bb:13:2d:25:39:0e:7c:2f:8e:44:9f: 9b:16:cf:e4:ce:3b:2e:59:00:2b:cf:ef:3d:2f:73: cc:01:66:3f:48:ea:ed:f3:8c:79:db:5d:c5:c3:b6: 42:c7:95:74:80:ee:28:5e:e1:33:06:df:f1:69:19: 26:43:92:de:35:ac:eb:97:21:32:30:12:de:7f:19: 47:4f:f5:29:81:46:31:00:b5:a0:57:26:ec:08:15: 42:85:fc:43:f3:e0:3e:3f:da:af:98:1f:df:22:44: 6e:71:40:8c:8b:a2:f0:f6:47:f8:07:21:7f:14:58: 8e:bd:c0:de:df:9d:86:93:fb:34:e1:9a:4f:e3:39: 1c:21:b7:1f:1f:51:42:9d:28:a1:1f:0a:ac:3e:51: 49:bc:f6:3f:94:e9:83:79:27:32:14:db:71:b1:6c: 81:2c:f9:93:58:bd:50:da:ad:b0:0e:c2:11:15:b1: 67:4e:28:33:bd:72:d1:62:35:d8:9b:a0:8a:b9:99: 67:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5C:5E:23:B3:ED:39:1E:C6:90:2F:5A:8D:3F:52:0F:01:65:C9:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f99da527-b425-3438-91d1-aa255a3de285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:02:e4:46:a0:70:3d:ca:cd:e0:43:2f:70:6e:2a:72:ed:f9: 52:75:00:e9:d0:60:9f:f0:bf:c9:aa:5a:eb:e8:99:ee:46:23: 92:c1:13:18:b8:40:14:9c:7b:d1:c1:db:14:87:b2:28:b7:de: 76:bb:ea:e0:df:af:0c:d6:b1:8c:4c:a7:8f:3b:3e:b0:25:1c: 62:17:9d:2f:5e:a3:a2:ca:46:b3:aa:b1:e9:3e:8b:fa:6d:49: 9a:64:79:7f:de:32:b5:95:c4:b8:24:e7:24:e1:3a:fa:95:ee: 59:93:07:ff:c3:3e:c4:ef:de:13:84:74:1e:74:2c:41:c8:95: 5c:76:24:97:27:10:a2:2e:e7:0f:3e:bf:08:60:70:a5:b5:06: 9e:ff:36:68:e2:c2:91:57:49:ef:be:51:b7:6f:b7:eb:2d:a7: 1c:44:f3:43:d5:22:aa:29:a9:bb:5c:23:04:54:af:2d:e4:c2: 45:b8:09:1b:61:19:ed:02:1e:86:0d:f1:2c:db:78:90:7c:74: 05:53:35:f6:c7:e8:74:fc:f5:02:85:c0:da:30:c0:4d:a5:3f: c3:49:dd:fe:68:5f:2d:52:7a:63:d9:03:0e:f2:fc:eb:53:77: 93:cf:41:59:27:50:c6:b2:a2:f4:4f:9f:af:b6:d2:bf:56:5c: e0:39:5c:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je6i66tz7NyKyYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDU0OTQ3MmItYmU1My00YTJhLWIyYWMtZTU0ZDA4Y2M1NzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtwhESrE38dBl/CJjGzlhcIgbat58wrBG6KU e2th4dRCiMC2i1s3Q+wUZsX/Uq3oiRvYHfZK1fwocgHUKFzOuxMtJTkOfC+ORJ+b Fs/kzjsuWQArz+89L3PMAWY/SOrt84x5213Fw7ZCx5V0gO4oXuEzBt/xaRkmQ5Le NazrlyEyMBLefxlHT/UpgUYxALWgVybsCBVChfxD8+A+P9qvmB/fIkRucUCMi6Lw 9kf4ByF/FFiOvcDe352Gk/s04ZpP4zkcIbcfH1FCnSihHwqsPlFJvPY/lOmDeScy FNtxsWyBLPmTWL1Q2q2wDsIRFbFnTigzvXLRYjXYm6CKuZlndQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJcXiOz7TkexpAvWo0/Ug8BZcmfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjk5ZGE1MjctYjQyNS0z NDM4LTkxZDEtYWEyNTVhM2RlMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8C5EagcD3KzeBDL3BuKnLt+VJ1AOnQYJ/wv8mqWuvome5GI5LBExi4 QBSce9HB2xSHsii33na76uDfrwzWsYxMp487PrAlHGIXnS9eo6LKRrOqsek+i/pt SZpkeX/eMrWVxLgk5yThOvqV7lmTB//DPsTv3hOEdB50LEHIlVx2JJcnEKIu5w8+ vwhgcKW1Bp7/NmjiwpFXSe++Ubdvt+stpxxE80PVIqopqbtcIwRUry3kwkW4CRth Ge0CHoYN8SzbeJB8dAVTNfbH6HT89QKFwNowwE2lP8NJ3f5oXy1SemPZAw7y/OtT d5PPQVknUMayovRPn6+20r9WXOA5XP8= -----END CERTIFICATE-----Generated at Mon Sep 28 10:04:37 2026 by rpki-client