$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ddfcf44-1a87-3f4f-ae6e-bddb87477583.roa File: 2ddfcf44-1a87-3f4f-ae6e-bddb87477583.roa (raw, json) Hash identifier: 4MXKr2jsUw16BMDKenp9V6u2/sQHzqE8k7oeCWbv02g= Subject key identifier: B3:88:1D:21:5C:91:71:15:FD:17:93:1B:4E:78:DE:D6:6D:FC:1C:18 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BAEA9DB5A40D5F1E2D220 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ddfcf44-1a87-3f4f-ae6e-bddb87477583.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:ae:a9:db:5a:40:d5:f1:e2:d2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1b0a521d-977d-4713-9f9d-5d96220c7655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:62:e8:39:ab:55:50:bb:35:cb:3b:55:0f:03: c1:3c:3f:5c:59:aa:fd:1f:dd:5a:21:3f:3b:fa:52: d3:42:db:8b:6d:fb:e3:9d:84:0a:24:66:26:10:ec: 06:d9:6b:07:fc:15:74:79:2b:a2:72:af:94:79:e7: 96:72:85:02:fa:55:70:39:2b:48:ea:90:93:68:82: 65:0d:f3:7f:51:6d:23:6d:0f:8c:83:02:3e:5e:89: 53:72:b9:bb:b0:6c:e8:76:ad:93:c1:64:18:92:fd: d6:41:af:84:70:5d:7e:18:73:32:9b:1e:35:0d:c2: 4c:6c:35:7c:ed:17:35:77:1e:5a:f1:e9:d9:b4:6a: df:59:84:db:df:b9:92:67:7d:df:18:09:f3:92:b8: a3:0a:e0:8a:61:3b:37:54:b9:89:97:cb:df:66:ae: 0b:c4:18:dd:ea:af:9e:38:99:87:ac:c7:25:b2:e7: 8f:64:16:fb:00:05:6f:3c:7f:ff:80:b2:d4:76:25: 22:78:33:2b:4a:c5:25:73:e1:de:cc:a0:34:83:6a: e2:11:08:2b:42:37:88:d6:db:78:cc:e7:6b:02:d0: 46:a5:9e:38:bf:20:30:c0:82:71:fe:77:a9:e3:80: 78:59:12:28:bb:a4:d2:04:24:d6:57:3b:c3:60:d9: b1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:88:1D:21:5C:91:71:15:FD:17:93:1B:4E:78:DE:D6:6D:FC:1C:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ddfcf44-1a87-3f4f-ae6e-bddb87477583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:36:44:51:fe:c1:3d:2e:55:65:63:b8:c3:f0:da:e2:50:29: d4:13:03:17:14:9b:69:f9:87:6e:23:f4:35:b1:3d:d1:3a:b1: 4a:6d:2e:fa:c5:b2:ba:99:33:de:ea:f3:5a:e1:f4:6b:8c:4b: 9f:c8:a7:fe:0a:72:5c:07:06:51:b8:84:1a:6e:a7:d9:7d:22: d0:a0:bd:30:6c:01:bf:9f:60:6a:9c:04:d6:da:1f:ff:e5:32: 94:b5:5c:82:bb:26:a0:48:f3:31:6a:f6:8a:dc:f4:7e:1b:43: 31:a8:4e:fe:6c:44:4c:52:4a:84:be:96:a0:4a:48:8b:6a:88: 6d:ae:02:bf:7a:38:39:92:d3:41:c2:b3:03:a4:fe:ab:86:17: 1f:64:19:b1:43:a2:da:a6:4f:5a:94:98:88:81:3e:ed:91:da: 78:87:83:7a:65:02:5c:4f:c6:2a:f7:0d:b2:a8:99:b9:7e:32: a4:88:79:e0:7e:eb:cf:9e:d2:e8:27:20:49:42:3f:c1:e7:53: 4a:ea:0d:33:ca:64:71:25:11:f9:91:2a:bd:61:f6:c8:20:a8: f6:ea:c7:83:c1:b5:fd:97:82:fc:db:27:01:4f:1e:3d:5e:bc: 27:d5:24:60:0c:9a:10:60:24:3f:c9:c5:6f:02:1d:1f:07:f8: 1d:5b:7a:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je66p21pA1fHi0iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWIwYTUyMWQtOTc3ZC00NzEzLTlmOWQtNWQ5NjIyMGM3NjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGLoOatVULs1yztVDwPBPD9cWar9H91aIT87 +lLTQtuLbfvjnYQKJGYmEOwG2WsH/BV0eSuicq+UeeeWcoUC+lVwOStI6pCTaIJl DfN/UW0jbQ+MgwI+XolTcrm7sGzodq2TwWQYkv3WQa+EcF1+GHMymx41DcJMbDV8 7Rc1dx5a8enZtGrfWYTb37mSZ33fGAnzkrijCuCKYTs3VLmJl8vfZq4LxBjd6q+e OJmHrMclsuePZBb7AAVvPH//gLLUdiUieDMrSsUlc+HezKA0g2riEQgrQjeI1tt4 zOdrAtBGpZ44vyAwwIJx/nep44B4WRIou6TSBCTWVzvDYNmxowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOIHSFckXEV/ReTG0543tZt/BwYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmRkZmNmNDQtMWE4Ny0z ZjRmLWFlNmUtYmRkYjg3NDc3NTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA02RFH+wT0uVWVjuMPw2uJQKdQTAxcUm2n5h24j9DWxPdE6sUptLvrF srqZM97q81rh9GuMS5/Ip/4KclwHBlG4hBpup9l9ItCgvTBsAb+fYGqcBNbaH//l MpS1XIK7JqBI8zFq9orc9H4bQzGoTv5sRExSSoS+lqBKSItqiG2uAr96ODmS00HC swOk/quGFx9kGbFDotqmT1qUmIiBPu2R2niHg3plAlxPxir3DbKombl+MqSIeeB+ 68+e0ugnIElCP8HnU0rqDTPKZHElEfmRKr1h9sggqPbqx4PBtf2XgvzbJwFPHj1e vCfVJGAMmhBgJD/JxW8CHR8H+B1bemM= -----END CERTIFICATE-----Generated at Tue Oct 27 20:44:29 2026 by rpki-client