$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33d98de7-82e5-3294-87bd-da0c96c9fa35.roa File: 33d98de7-82e5-3294-87bd-da0c96c9fa35.roa (raw, json) Hash identifier: 6zQI2V5DKjdBCIfq13Dpbt6/MtZEshqL1Fi+biZ85G4= Subject key identifier: 93:D7:A7:DF:4C:31:30:0F:CC:67:E0:12:5C:26:EB:94:24:0B:2B:94 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E2758F3CE0EDC6FC48E80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33d98de7-82e5-3294-87bd-da0c96c9fa35.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.243.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:27:58:f3:ce:0e:dc:6f:c4:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a7a08f68-9df5-4153-a0c6-9a179380826f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fa:8e:b5:d9:c0:0d:81:a0:f7:b4:04:f0:85: 74:cb:bf:64:0d:22:50:67:51:01:f7:ab:6f:6b:63: dd:99:bb:cd:f1:6b:01:13:7d:cd:9e:13:31:14:22: e2:df:32:cc:17:35:fc:71:72:ef:d7:b1:08:5e:dc: c9:7b:f5:3d:0f:c1:f4:65:26:38:11:e1:d6:bf:4c: 2f:b4:d5:f7:80:f9:5b:14:12:96:f6:be:31:6b:21: 91:28:7d:d9:71:87:94:79:65:e6:a3:1c:15:af:7f: 5e:b6:eb:89:72:d4:54:24:f1:45:7b:47:5f:c4:15: ad:ae:bf:4f:e3:68:c1:d5:60:ab:18:57:9c:45:95: 82:d1:5f:5b:23:3d:f9:54:ba:cd:95:12:d1:31:6f: b5:b1:68:27:e6:df:28:0e:7c:62:60:1a:ec:39:d5: 30:11:c2:87:7e:61:3f:ae:a5:dc:b8:a3:ad:8a:03: b7:89:ce:eb:82:fa:c1:ed:c1:8f:fd:ef:d0:3f:6a: 6d:89:91:cd:a3:1f:36:dd:13:e7:95:39:2b:66:2f: 93:00:2d:ea:66:03:89:6c:06:b9:ee:8a:2e:55:8a: 60:da:18:8c:34:c3:f5:06:50:36:c4:8b:07:d3:b8: 14:04:18:9b:4f:1e:00:3b:4e:98:1f:c0:ac:06:f3: f9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D7:A7:DF:4C:31:30:0F:CC:67:E0:12:5C:26:EB:94:24:0B:2B:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33d98de7-82e5-3294-87bd-da0c96c9fa35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:4c:da:e9:31:af:f5:47:4f:ba:ec:f6:9b:1b:61:55:4b:a3: 2d:f6:35:a9:61:6f:49:4b:1b:20:7a:a3:6e:d8:10:70:08:f4: 7c:21:40:d7:4c:7c:73:fc:0a:83:0d:ea:66:97:89:2f:98:36: 0c:d4:e6:e8:3a:7f:ea:57:fa:cb:af:9d:37:f7:a1:57:2a:05: 82:a6:d6:21:58:98:b5:02:96:ec:97:a5:81:dc:5f:99:70:0f: 8b:2e:e0:a9:8c:06:2e:7d:9d:81:65:72:01:24:bb:8e:a5:79: 08:00:bc:90:f5:1e:81:d5:dd:bb:0d:97:b9:fd:51:2d:94:ae: 74:dd:ba:37:13:13:a2:ed:d5:44:ee:f5:4d:e6:62:07:09:8b: 96:b6:55:37:4b:6f:80:c4:e5:34:ba:3c:f6:f8:26:4b:7a:6f: 76:74:71:46:1b:68:b6:66:f0:00:20:23:5a:9f:ef:99:68:6f: 3b:55:b7:80:95:74:0f:ca:90:f2:29:8f:1d:ca:d2:a1:1c:9a: b0:a4:ee:52:41:6d:70:81:ce:87:c1:14:78:43:e0:b8:e3:f7: 4a:c8:23:eb:bc:e8:06:c5:33:11:8f:64:48:0a:86:20:be:04: 7c:8b:79:c7:32:f1:a9:d1:90:dd:c1:fb:0c:ec:ed:48:6d:7e: 4f:0a:04:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnidY884O3G/EjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTdhMDhmNjgtOWRmNS00MTUzLWEwYzYtOWExNzkzODA4MjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvqOtdnADYGg97QE8IV0y79kDSJQZ1EB96tv a2PdmbvN8WsBE33NnhMxFCLi3zLMFzX8cXLv17EIXtzJe/U9D8H0ZSY4EeHWv0wv tNX3gPlbFBKW9r4xayGRKH3ZcYeUeWXmoxwVr39etuuJctRUJPFFe0dfxBWtrr9P 42jB1WCrGFecRZWC0V9bIz35VLrNlRLRMW+1sWgn5t8oDnxiYBrsOdUwEcKHfmE/ rqXcuKOtigO3ic7rgvrB7cGP/e/QP2ptiZHNox823RPnlTkrZi+TAC3qZgOJbAa5 7oouVYpg2hiMNMP1BlA2xIsH07gUBBibTx4AO06YH8CsBvP5YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPXp99MMTAPzGfgElwm65QkCyuUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzNkOThkZTctODJlNS0z Mjk0LTg3YmQtZGEwYzk2YzlmYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPODMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5M2ukxr/VHT7rs9psbYVVLoy32Nalhb0lLGyB6o27YEHAI9HwhQNdM fHP8CoMN6maXiS+YNgzU5ug6f+pX+suvnTf3oVcqBYKm1iFYmLUCluyXpYHcX5lw D4su4KmMBi59nYFlcgEku46leQgAvJD1HoHV3bsNl7n9US2UrnTdujcTE6Lt1UTu 9U3mYgcJi5a2VTdLb4DE5TS6PPb4Jkt6b3Z0cUYbaLZm8AAgI1qf75lobztVt4CV dA/KkPIpjx3K0qEcmrCk7lJBbXCBzofBFHhD4Ljj90rII+u86AbFMxGPZEgKhiC+ BHyLeccy8anRkN3B+wzs7Uhtfk8KBMA= -----END CERTIFICATE-----Generated at Thu Sep 10 15:36:06 2026 by rpki-client