$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa1e98b5-a785-39db-8caa-1cc6249bbb54.roa File: fa1e98b5-a785-39db-8caa-1cc6249bbb54.roa (raw, json) Hash identifier: m9H2jwh/dWvEnULXqwm4p7gSq7tEHuZpVPWKQ5Ot3/M= Subject key identifier: 69:16:38:48:FD:1A:89:4B:74:DD:15:2A:C1:1D:20:C6:65:72:B6:26 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F498370625874399364AEFD80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa1e98b5-a785-39db-8caa-1cc6249bbb54.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 75.107.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:70:62:58:74:39:93:64:ae:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dcd29e5e-5e2d-4ae5-bd9f-00e7437349e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b9:0e:f3:d2:8e:c1:0d:cc:50:74:24:1b:83: a0:35:be:2e:ac:41:f4:bb:7c:f6:d7:81:b2:8b:b2: 75:81:48:9e:7b:0c:c1:1b:20:9d:20:f3:76:8c:70: 18:b7:cb:1a:fa:4b:34:ee:07:6a:c5:37:c4:e6:5f: 81:4d:ec:4d:af:c7:cc:55:60:43:04:fe:28:4d:34: ad:a3:59:a7:f3:89:1a:52:3c:d5:09:f4:fc:5e:8d: 3f:7f:56:b0:81:58:9b:79:61:c1:bb:4c:ba:d8:ec: 53:76:41:99:80:10:cb:51:3b:d5:2b:82:aa:55:7a: 53:bd:6d:bc:c6:1a:d4:16:ef:e1:c4:a0:af:c4:62: 08:10:2c:4d:36:c6:47:74:bb:b2:0b:96:c4:d7:f6: f5:e9:f7:5e:65:85:b9:d0:4c:f0:7e:40:13:b5:30: e6:15:b7:22:c8:0a:4e:53:22:c4:1f:e1:85:76:10: 7a:b0:9b:59:1b:93:1a:7a:f5:15:94:08:9d:6f:7f: eb:b9:78:99:42:eb:10:db:20:a1:89:8b:cb:46:31: 2a:62:0b:b0:e1:fb:2d:88:a8:c5:08:a8:48:5e:e5: ff:d5:1b:4a:2e:25:99:95:4c:43:22:8a:e3:ce:f5: ec:fb:a8:b9:ad:8f:9f:d6:6b:77:54:c3:38:57:f0: 6e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:16:38:48:FD:1A:89:4B:74:DD:15:2A:C1:1D:20:C6:65:72:B6:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa1e98b5-a785-39db-8caa-1cc6249bbb54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.107.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:2f:6a:4a:ca:c4:9c:b7:cc:a3:c7:9b:e9:e9:bd:6d:53:b1: 42:57:c5:fa:61:f1:b3:48:0e:75:bc:07:73:ab:6b:df:c5:da: dd:4f:85:a9:16:7a:4a:19:5d:e8:a9:01:f9:0b:1d:93:17:4c: f4:62:6d:bb:44:fb:fc:d6:4c:c8:a9:9c:3a:5e:8e:a8:4d:cd: f6:d5:18:5e:29:11:77:b1:19:4a:c9:b2:8a:ee:60:e4:73:2b: f1:c7:37:fa:ef:df:c7:09:95:c7:e0:94:af:5c:82:21:39:71: 0c:8b:c1:dc:97:42:67:30:e1:8e:f7:e2:15:1e:e1:7f:26:54: 57:1d:7e:7e:e6:51:3a:d8:bc:37:20:0f:e7:c0:c1:ff:fc:21: ab:76:0f:59:ce:2f:9b:d8:8f:18:af:08:ba:33:9f:57:19:46: b9:b3:07:52:b3:d4:f4:84:76:c4:cd:e9:9b:84:8c:f0:21:00: 03:30:3c:45:67:d3:ab:fc:64:bd:f1:f8:20:27:21:37:b0:9f: 56:ac:c9:6b:7c:3c:f1:31:21:70:99:09:a8:19:e1:81:f8:61: aa:32:74:4c:cd:31:96:f7:67:c1:7a:e1:13:52:d2:31:5c:60: 35:e4:e4:d4:6e:36:07:62:d8:44:e3:42:2e:16:d1:d0:81:e4: 16:1e:fe:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg3BiWHQ5k2Su/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGNkMjllNWUtNWUyZC00YWU1LWJkOWYtMDBlNzQzNzM0OWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrkO89KOwQ3MUHQkG4OgNb4urEH0u3z214Gy i7J1gUieewzBGyCdIPN2jHAYt8sa+ks07gdqxTfE5l+BTexNr8fMVWBDBP4oTTSt o1mn84kaUjzVCfT8Xo0/f1awgVibeWHBu0y62OxTdkGZgBDLUTvVK4KqVXpTvW28 xhrUFu/hxKCvxGIIECxNNsZHdLuyC5bE1/b16fdeZYW50EzwfkATtTDmFbciyApO UyLEH+GFdhB6sJtZG5MaevUVlAidb3/ruXiZQusQ2yChiYvLRjEqYguw4fstiKjF CKhIXuX/1RtKLiWZlUxDIorjzvXs+6i5rY+f1mt3VMM4V/BuqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkWOEj9GolLdN0VKsEdIMZlcrYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmExZTk4YjUtYTc4NS0z OWRiLThjYWEtMWNjNjI0OWJiYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2tsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEvakrKxJy3zKPHm+npvW1TsUJXxfph8bNIDnW8B3Ora9/F2t1PhakW ekoZXeipAfkLHZMXTPRibbtE+/zWTMipnDpejqhNzfbVGF4pEXexGUrJsoruYORz K/HHN/rv38cJlcfglK9cgiE5cQyLwdyXQmcw4Y734hUe4X8mVFcdfn7mUTrYvDcg D+fAwf/8Iat2D1nOL5vYjxivCLozn1cZRrmzB1Kz1PSEdsTN6ZuEjPAhAAMwPEVn 06v8ZL3x+CAnITewn1asyWt8PPExIXCZCagZ4YH4YaoydEzNMZb3Z8F64RNS0jFc YDXk5NRuNgdi2ETjQi4W0dCB5BYe/gw= -----END CERTIFICATE-----Generated at Sun Sep 27 11:59:23 2026 by rpki-client