$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20462c47-8bd2-3e07-ad43-017e73297e3e.roa File: 20462c47-8bd2-3e07-ad43-017e73297e3e.roa (raw, json) Hash identifier: xG90sP5tcRoUWTNc1V5zpxt+y43+uxYa55ZSz5Px+2c= Subject key identifier: 27:02:5B:23:50:D5:8F:17:F0:EB:B2:6B:80:64:7C:CE:74:78:E9:75 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79FCA8E805DEE2F8635D2A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20462c47-8bd2-3e07-ad43-017e73297e3e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.243.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:ca:8e:80:5d:ee:2f:86:35:d2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b46dea5e-446f-4264-9c98-d070e4b9fde8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:73:d2:69:0b:de:14:86:bb:36:4b:61:34:27: d2:4d:b1:08:5f:7f:5b:95:e4:98:ce:5c:f8:6c:0f: 73:c1:5e:90:3f:9f:e0:9a:87:4d:62:4c:4c:a9:47: 39:6b:10:d9:7a:36:0b:34:57:ed:da:1b:f9:1e:85: d0:a1:37:39:5d:37:08:b7:28:45:26:4a:d1:fc:fe: f1:16:71:75:b0:b5:db:0c:1d:8b:4a:d8:41:cf:59: d5:53:ed:af:52:55:de:1f:37:f1:06:01:b1:3d:1b: 0b:2e:bd:39:66:a6:e5:8e:b1:4d:e8:41:58:14:c5: 66:f7:8b:5b:6b:1d:8e:72:26:1a:73:42:c5:45:51: eb:3a:94:ef:18:b7:72:46:94:1a:c7:a5:4e:80:cf: 09:52:61:54:cb:5a:82:4a:6f:c6:a4:f6:30:b8:e7: 00:da:c3:e4:16:9f:61:95:52:1d:13:1c:21:8d:07: 10:e8:17:b7:99:13:b4:b3:2a:a4:10:c5:1f:8d:c6: 8d:42:b1:ff:a5:94:31:95:43:07:c3:01:a5:a8:ab: 25:b3:3e:2b:1d:e1:7b:d6:7b:33:45:48:4b:5e:9f: 03:cf:69:3b:c7:fe:45:d0:94:a3:e0:90:ec:71:35: 28:57:cf:20:fe:52:74:c8:38:bc:a0:3b:0b:4f:15: 59:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:02:5B:23:50:D5:8F:17:F0:EB:B2:6B:80:64:7C:CE:74:78:E9:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20462c47-8bd2-3e07-ad43-017e73297e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:12:83:5e:6d:5b:f6:2c:9c:ff:ab:c6:b1:98:2d:d4:f0:f8: ac:3f:57:41:fd:e2:96:a3:94:f0:e7:f4:b9:e7:ea:13:d2:30: 0e:ca:e6:e8:26:ef:53:8d:d2:97:2d:b9:42:82:44:6e:e6:ac: 6f:f4:89:d4:f8:bc:b3:cc:af:1f:bb:b7:b5:14:1c:c1:8c:39: 33:0e:e2:92:ff:a1:7d:f9:90:56:e5:a1:a1:fc:cd:03:03:ec: cd:bc:c8:1e:26:4b:86:c4:0f:3c:22:eb:c7:59:f2:a9:04:2b: 59:d1:41:17:77:e3:06:66:71:52:6b:4e:94:55:a8:fa:c3:08: d3:85:e1:13:46:21:f9:de:b8:72:24:5e:da:1a:20:a8:72:96: 06:23:29:d0:a4:d5:91:3d:48:cc:f1:20:37:48:ee:d0:bd:e7: 04:a9:f6:39:67:f7:a4:5c:d9:55:5f:29:36:fc:ea:ee:6f:09: ca:e7:38:19:34:d1:ae:dc:1a:d7:9a:4a:a0:16:8c:9c:2d:86: 90:ee:cb:7d:85:ff:bd:03:21:79:7d:1a:b0:00:5c:cd:2b:12: 96:c9:10:0f:a1:35:10:b0:e9:c1:91:89:aa:d7:d9:63:f7:64: a7:fc:2a:6a:0d:d6:72:ad:b0:75:04:c5:0a:01:2a:58:e4:5e: 91:76:cd:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn8qOgF3uL4Y10qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjQ2ZGVhNWUtNDQ2Zi00MjY0LTljOTgtZDA3MGU0YjlmZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinPSaQveFIa7NkthNCfSTbEIX39bleSYzlz4 bA9zwV6QP5/gmodNYkxMqUc5axDZejYLNFft2hv5HoXQoTc5XTcItyhFJkrR/P7x FnF1sLXbDB2LSthBz1nVU+2vUlXeHzfxBgGxPRsLLr05ZqbljrFN6EFYFMVm94tb ax2OciYac0LFRVHrOpTvGLdyRpQax6VOgM8JUmFUy1qCSm/GpPYwuOcA2sPkFp9h lVIdExwhjQcQ6Be3mRO0syqkEMUfjcaNQrH/pZQxlUMHwwGlqKslsz4rHeF71nsz RUhLXp8Dz2k7x/5F0JSj4JDscTUoV88g/lJ0yDi8oDsLTxVZ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcCWyNQ1Y8X8Ouya4BkfM50eOl1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjA0NjJjNDctOGJkMi0z ZTA3LWFkNDMtMDE3ZTczMjk3ZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUSg15tW/YsnP+rxrGYLdTw+Kw/V0H94pajlPDn9Lnn6hPSMA7K5ugm 71ON0pctuUKCRG7mrG/0idT4vLPMrx+7t7UUHMGMOTMO4pL/oX35kFbloaH8zQMD 7M28yB4mS4bEDzwi68dZ8qkEK1nRQRd34wZmcVJrTpRVqPrDCNOF4RNGIfneuHIk XtoaIKhylgYjKdCk1ZE9SMzxIDdI7tC95wSp9jln96Rc2VVfKTb86u5vCcrnOBk0 0a7cGteaSqAWjJwthpDuy32F/70DIXl9GrAAXM0rEpbJEA+hNRCw6cGRiarX2WP3 ZKf8KmoN1nKtsHUExQoBKljkXpF2zWY= -----END CERTIFICATE-----Generated at Thu Sep 10 11:05:02 2026 by rpki-client