$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33271add-0348-3765-b5da-157fa92afbdc.roa File: 33271add-0348-3765-b5da-157fa92afbdc.roa (raw, json) Hash identifier: eYJgnnrhoQOkYzC+GCHOIwcODW4NY0A3Y22VGbeOzVg= Subject key identifier: 57:89:15:3F:A7:43:E2:7C:DB:B8:AB:C2:BC:3F:CF:70:B8:0A:B3:26 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E21A4866F15F81C9D8200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33271add-0348-3765-b5da-157fa92afbdc.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.243.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:21:a4:86:6f:15:f8:1c:9d:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=785a91d7-90e8-4b40-bc9b-33838bfd80ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:16:77:7d:33:ea:0e:4b:4b:43:ea:95:6f:59: 41:11:5b:41:37:b2:93:6c:28:7d:15:fd:54:5d:d1: 9d:5d:14:17:fe:82:1d:9e:5b:a6:a4:dc:30:f2:ee: 40:5c:fb:ee:ab:46:b6:c8:9b:1b:18:54:97:88:80: fe:00:40:ec:48:7d:6e:45:9a:7d:89:ba:f2:83:2c: 01:5e:a7:63:a1:f7:32:2b:05:ba:b1:64:dc:09:81: 54:44:68:42:a1:9b:62:8e:bc:33:03:a7:94:43:20: c2:4e:26:a3:74:b1:a3:67:80:51:85:74:85:2f:bc: cc:b2:fc:e7:f2:92:85:be:35:16:ca:41:3e:cd:19: 27:5b:87:d3:10:32:d5:a0:5b:3a:9d:c2:f0:e3:a9: 2c:1e:b9:a3:f2:0f:e4:11:21:a1:12:26:cc:5f:b8: 89:93:e5:ce:e9:07:99:97:06:bc:7f:69:ca:b6:50: b1:be:7e:79:c8:48:af:b1:24:b1:f7:e1:97:7a:64: ee:d5:ca:1f:79:39:dc:64:3b:d6:45:bc:50:ef:3d: 27:39:d8:7f:d8:56:9b:ed:53:fd:1f:fb:ed:15:2a: fd:6c:ab:9c:9b:06:fb:f0:a6:42:b0:97:05:05:99: 70:3b:39:86:be:64:5c:99:a2:01:c8:cf:94:b5:de: bd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:89:15:3F:A7:43:E2:7C:DB:B8:AB:C2:BC:3F:CF:70:B8:0A:B3:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33271add-0348-3765-b5da-157fa92afbdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:27:f0:f6:8a:15:4e:47:9a:79:b1:88:02:42:87:1c:fe:bb: ed:dc:80:3a:34:c5:b0:9c:dc:76:1d:27:0d:78:ac:90:0c:e2: a6:ce:f7:1e:93:f7:32:ee:2f:5f:00:e1:1d:a8:ca:87:e5:20: 29:39:1e:93:f3:54:e7:ed:28:a4:b4:7f:ec:62:83:50:24:a8: ae:2c:82:14:01:f8:af:dd:27:5b:89:69:1f:c5:1b:04:cf:29: 56:69:78:de:81:2b:db:e2:7d:d4:1f:e1:85:52:2f:0e:d2:0f: be:40:5d:d1:89:d9:c2:ca:63:6c:f0:f6:f2:9b:92:86:4e:ff: b2:6a:67:60:0d:28:2c:03:74:1a:78:03:47:2b:08:e3:10:c1: 20:4c:5e:2d:ad:ac:cc:f8:ce:30:8d:b1:ea:1d:7f:75:b7:86: e4:43:88:3c:91:7e:41:c7:9b:28:f4:ed:20:61:41:a6:3b:5e: 97:cf:70:6e:74:9c:22:d1:22:4c:9b:ba:c0:24:d4:8d:45:7b: 35:48:0b:d4:8d:37:cd:70:68:fc:14:2f:ee:a0:e3:4e:9e:a9: 5b:14:e8:f0:f0:a3:39:b6:c2:c3:f7:a3:52:88:d2:9f:3b:e6: 93:ec:ef:18:55:d5:f6:1d:a8:c3:eb:e5:0f:24:fe:45:85:c3: 30:2a:78:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nniGkhm8V+BydggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Nzg1YTkxZDctOTBlOC00YjQwLWJjOWItMzM4MzhiZmQ4MGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBZ3fTPqDktLQ+qVb1lBEVtBN7KTbCh9Ff1U XdGdXRQX/oIdnlumpNww8u5AXPvuq0a2yJsbGFSXiID+AEDsSH1uRZp9ibrygywB XqdjofcyKwW6sWTcCYFURGhCoZtijrwzA6eUQyDCTiajdLGjZ4BRhXSFL7zMsvzn 8pKFvjUWykE+zRknW4fTEDLVoFs6ncLw46ksHrmj8g/kESGhEibMX7iJk+XO6QeZ lwa8f2nKtlCxvn55yEivsSSx9+GXemTu1cofeTncZDvWRbxQ7z0nOdh/2Fab7VP9 H/vtFSr9bKucmwb78KZCsJcFBZlwOzmGvmRcmaIByM+Utd69wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeJFT+nQ+J827irwrw/z3C4CrMmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzMyNzFhZGQtMDM0OC0z NzY1LWI1ZGEtMTU3ZmE5MmFmYmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPM6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACon8PaKFU5HmnmxiAJChxz+u+3cgDo0xbCc3HYdJw14rJAM4qbO9x6T 9zLuL18A4R2oyoflICk5HpPzVOftKKS0f+xig1AkqK4sghQB+K/dJ1uJaR/FGwTP KVZpeN6BK9vifdQf4YVSLw7SD75AXdGJ2cLKY2zw9vKbkoZO/7JqZ2ANKCwDdBp4 A0crCOMQwSBMXi2trMz4zjCNseodf3W3huRDiDyRfkHHmyj07SBhQaY7XpfPcG50 nCLRIkybusAk1I1FezVIC9SNN81waPwUL+6g406eqVsU6PDwozm2wsP3o1KI0p87 5pPs7xhV1fYdqMPr5Q8k/kWFwzAqeLU= -----END CERTIFICATE-----Generated at Thu Sep 10 12:39:31 2026 by rpki-client