$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/121cc18c-0912-3d8b-a52d-deed28211e88.roa File: 121cc18c-0912-3d8b-a52d-deed28211e88.roa (raw, json) Hash identifier: 8B/3b58YW+w/O7WZ60FMO5GIx78jAGGzsc+celVubv4= Subject key identifier: 09:2D:15:CF:C7:DA:25:7C:89:7A:76:49:CD:F9:AE:40:97:92:DE:E9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E0E7A79844141A4FA7618 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/121cc18c-0912-3d8b-a52d-deed28211e88.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.242.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:0e:7a:79:84:41:41:a4:fa:76:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4ac9c0fb-d3fc-47ed-815b-8a88b4c99a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:22:c9:7b:7f:2f:02:93:1b:90:92:d8:4e:03: b3:5c:f5:2f:11:bf:c2:fe:ae:00:9a:36:bc:cd:14: 13:45:a6:92:42:06:cd:29:c2:e1:d4:d8:77:c2:76: 5a:dd:d2:6b:e8:33:b2:70:63:6e:05:27:27:6b:a4: c9:22:f4:ba:83:ed:5e:24:e1:19:4a:ed:6c:7d:ac: 01:d4:8f:e9:e5:c9:ac:fc:68:49:b2:97:62:ab:b9: 0b:97:c3:36:09:e6:25:25:9c:98:82:ac:ff:fb:f1: ae:18:42:8e:87:3d:65:38:fe:29:d7:3f:19:5a:ef: c0:64:62:80:b6:7d:bd:48:b6:ce:ac:92:a5:89:10: 51:f1:ad:9a:2f:d5:f8:37:d0:e4:7b:cb:3e:01:e5: 3d:7a:f9:c2:14:6c:29:92:ad:be:1e:6b:44:71:ff: 56:fa:26:ea:25:81:45:97:be:a9:28:c2:cd:42:d3: ca:41:2f:1c:b6:55:5c:5f:6a:85:8d:04:a4:7c:4e: 26:61:d5:bd:18:3c:b1:37:e2:f0:8f:5c:fb:d7:d4: 23:80:6a:1e:06:ff:44:2f:08:f2:0c:f8:0c:d7:89: 7a:cf:b7:d6:e4:a6:aa:e4:66:7b:30:ff:1a:97:d9: b6:a7:f2:20:97:95:03:2d:35:e1:ac:6b:f0:04:62: 39:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2D:15:CF:C7:DA:25:7C:89:7A:76:49:CD:F9:AE:40:97:92:DE:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/121cc18c-0912-3d8b-a52d-deed28211e88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:f6:ec:64:ca:8a:4d:09:66:c5:44:72:bd:0e:4c:04:19:00: db:25:ae:c2:0e:85:c6:77:32:b7:e2:6f:eb:df:01:a8:34:d8: 3f:0b:ea:1a:f2:84:83:32:08:21:e7:6b:e5:5b:ee:4a:bf:eb: 25:57:29:2b:bf:5e:b6:37:dd:43:25:b0:81:43:65:aa:60:12: 51:d9:ee:00:26:fb:bb:4b:bd:ca:3c:0e:d2:b2:23:c3:87:26: c0:53:c6:0c:45:4c:c4:fe:11:ec:99:48:61:aa:40:75:94:ae: 31:9d:d3:e9:f9:b3:77:5f:08:28:44:87:42:c0:6c:bd:48:30: 73:f1:0d:41:41:d8:28:08:2b:b9:77:7c:8b:cd:a1:e9:3d:9e: cc:0e:59:68:08:27:9a:50:73:26:70:e8:58:d6:46:a8:a1:60: ff:9e:bb:80:c8:c7:e1:68:7f:18:7b:22:9b:ed:93:e4:c2:2c: 46:c4:89:25:4a:4e:51:2e:ff:24:4a:c2:a6:4c:81:0c:ab:8f: a6:fd:7d:08:eb:8c:a0:1b:29:a7:73:c1:a8:fb:1b:d8:4c:45: 29:8d:e8:b4:10:c6:7e:e9:12:56:f9:43:a2:06:ae:35:aa:c6: 7f:90:bb:4d:2f:94:d3:1d:23:4a:91:45:55:e5:b5:de:af:4e: 39:df:5b:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nng56eYRBQaT6dhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGFjOWMwZmItZDNmYy00N2VkLTgxNWItOGE4OGI0Yzk5YTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCLJe38vApMbkJLYTgOzXPUvEb/C/q4Amja8 zRQTRaaSQgbNKcLh1Nh3wnZa3dJr6DOycGNuBScna6TJIvS6g+1eJOEZSu1sfawB 1I/p5cms/GhJspdiq7kLl8M2CeYlJZyYgqz/+/GuGEKOhz1lOP4p1z8ZWu/AZGKA tn29SLbOrJKliRBR8a2aL9X4N9Dke8s+AeU9evnCFGwpkq2+HmtEcf9W+ibqJYFF l76pKMLNQtPKQS8ctlVcX2qFjQSkfE4mYdW9GDyxN+Lwj1z719QjgGoeBv9ELwjy DPgM14l6z7fW5Kaq5GZ7MP8al9m2p/Igl5UDLTXhrGvwBGI5DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAktFc/H2iV8iXp2Sc35rkCXkt7pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTIxY2MxOGMtMDkxMi0z ZDhiLWE1MmQtZGVlZDI4MjExZTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHP27GTKik0JZsVEcr0OTAQZANslrsIOhcZ3Mrfib+vfAag02D8L6hry hIMyCCHna+Vb7kq/6yVXKSu/XrY33UMlsIFDZapgElHZ7gAm+7tLvco8DtKyI8OH JsBTxgxFTMT+EeyZSGGqQHWUrjGd0+n5s3dfCChEh0LAbL1IMHPxDUFB2CgIK7l3 fIvNoek9nswOWWgIJ5pQcyZw6FjWRqihYP+eu4DIx+Fofxh7Ipvtk+TCLEbEiSVK TlEu/yRKwqZMgQyrj6b9fQjrjKAbKadzwaj7G9hMRSmN6LQQxn7pElb5Q6IGrjWq xn+Qu00vlNMdI0qRRVXltd6vTjnfWxI= -----END CERTIFICATE-----Generated at Thu Sep 10 17:44:49 2026 by rpki-client