$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/121de063-468f-3632-b19a-85b8f8acde80.roa File: 121de063-468f-3632-b19a-85b8f8acde80.roa (raw, json) Hash identifier: yF0mZXjeYdSLqDVYbLh6Ml5ordIiOrqA4fjKcM1GC34= Subject key identifier: 12:E0:26:6B:2C:89:7B:2C:38:26:DB:1F:B8:B6:D3:03:83:46:1B:4B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E0B2D639F1775912C5680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/121de063-468f-3632-b19a-85b8f8acde80.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.242.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:0b:2d:63:9f:17:75:91:2c:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d3dc15ee-e5c3-4679-b889-e9c67a5f77ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9f:69:52:7a:4a:23:99:54:d0:6b:0d:ac:02: 28:15:d2:53:a1:f6:86:1c:24:2e:72:8b:0c:2c:31: 31:49:e6:b4:8d:90:2f:32:d8:7c:8c:ea:63:70:39: 7a:31:8d:2b:54:c1:41:8c:ad:ce:8a:b9:c4:4d:21: 63:27:c9:0f:71:3a:4f:e5:c4:56:1b:81:40:d1:c8: a1:c6:b3:55:c9:05:a7:40:d9:8d:af:33:c9:31:da: 4a:92:77:fc:25:a7:ce:38:01:1d:af:76:a1:6d:e0: 8c:a3:b5:d2:c1:6c:f4:91:41:26:f4:b0:67:b4:ab: c5:c9:fd:10:c9:69:9a:67:3a:b8:35:24:7b:67:05: e8:e6:48:89:3f:cb:59:d4:d1:26:ff:81:e4:42:a7: 03:27:d0:b7:bf:03:8f:9e:c9:1e:44:f4:75:4f:c3: 68:3c:2d:30:93:36:63:e4:ad:ad:38:a8:22:f8:34: 7e:87:14:2f:a9:f2:d7:68:17:02:86:3a:1f:3b:8f: 40:9a:80:be:6a:7a:b2:7c:c4:60:69:b5:56:39:66: 7a:61:30:a9:23:94:83:4a:0b:c6:11:f0:f1:8c:1f: 01:44:ca:2d:d0:49:91:e1:04:52:9a:31:d2:e9:69: ea:42:05:de:30:ec:63:60:8a:c2:55:cb:b2:6b:da: e3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E0:26:6B:2C:89:7B:2C:38:26:DB:1F:B8:B6:D3:03:83:46:1B:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/121de063-468f-3632-b19a-85b8f8acde80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:3d:57:c2:ea:d1:09:9a:97:2b:e5:a9:15:9a:9b:3f:cb:43: 55:b8:1f:0b:df:f8:27:cd:5a:77:aa:59:f2:19:f3:2b:f9:61: a1:84:96:09:04:56:45:df:09:b7:e9:2f:20:33:74:26:ca:3b: 85:d2:55:25:8b:76:1c:0c:82:b6:1b:74:e3:67:49:0c:72:32: bc:d6:a6:a9:5a:f9:d9:b6:cb:0c:dc:cc:4d:42:ab:56:a9:d3: f3:64:f3:d8:99:49:2a:03:41:56:e2:f7:09:ad:99:01:0f:26: 4a:a3:69:01:0b:6e:aa:0a:28:ac:b3:08:e9:50:d5:bb:c4:6f: 3e:95:5a:9d:5b:3d:a5:80:e3:4f:b7:fd:fb:4d:1e:7b:29:d1: f1:68:ac:72:e6:2e:d2:01:8b:ee:c3:98:21:10:55:5c:61:3a: c8:cb:87:07:96:a7:69:78:4d:7a:5b:6e:97:0d:a0:33:ac:35: 52:93:26:fb:74:d4:15:62:21:62:4c:e2:7c:27:a9:8e:c6:e1: 02:6a:fc:91:46:1e:8d:da:fa:b5:de:58:08:97:8e:fe:d7:54: 82:16:92:f1:c5:c0:61:8d:eb:57:de:7d:d8:7e:d4:e5:01:da: f3:54:07:6c:cb:0d:e7:36:84:46:ad:74:55:bb:e0:f6:39:eb: 66:1a:f7:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nngstY58XdZEsVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDNkYzE1ZWUtZTVjMy00Njc5LWI4ODktZTljNjdhNWY3N2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj59pUnpKI5lU0GsNrAIoFdJTofaGHCQucosM LDExSea0jZAvMth8jOpjcDl6MY0rVMFBjK3OirnETSFjJ8kPcTpP5cRWG4FA0cih xrNVyQWnQNmNrzPJMdpKknf8JafOOAEdr3ahbeCMo7XSwWz0kUEm9LBntKvFyf0Q yWmaZzq4NSR7ZwXo5kiJP8tZ1NEm/4HkQqcDJ9C3vwOPnskeRPR1T8NoPC0wkzZj 5K2tOKgi+DR+hxQvqfLXaBcChjofO49AmoC+anqyfMRgabVWOWZ6YTCpI5SDSgvG EfDxjB8BRMot0EmR4QRSmjHS6WnqQgXeMOxjYIrCVcuya9rjawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLgJmssiXssOCbbH7i20wODRhtLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTIxZGUwNjMtNDY4Zi0z NjMyLWIxOWEtODViOGY4YWNkZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPINMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKA9V8Lq0QmalyvlqRWamz/LQ1W4Hwvf+CfNWneqWfIZ8yv5YaGElgkE VkXfCbfpLyAzdCbKO4XSVSWLdhwMgrYbdONnSQxyMrzWpqla+dm2ywzczE1Cq1ap 0/Nk89iZSSoDQVbi9wmtmQEPJkqjaQELbqoKKKyzCOlQ1bvEbz6VWp1bPaWA40+3 /ftNHnsp0fForHLmLtIBi+7DmCEQVVxhOsjLhweWp2l4TXpbbpcNoDOsNVKTJvt0 1BViIWJM4nwnqY7G4QJq/JFGHo3a+rXeWAiXjv7XVIIWkvHFwGGN61fefdh+1OUB 2vNUB2zLDec2hEatdFW74PY562Ya980= -----END CERTIFICATE-----Generated at Thu Sep 10 17:06:41 2026 by rpki-client