$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ead5d13-9231-3d1c-a6ef-7a104ea2d95f.roa File: 3ead5d13-9231-3d1c-a6ef-7a104ea2d95f.roa (raw, json) Hash identifier: QBJgT3JO0mqpKdUklMaeSH+utwATPdmI8tuCERmIav8= Subject key identifier: 65:6F:E4:79:EC:84:E1:4D:BA:11:AE:0C:0D:69:82:D9:C7:05:3B:88 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79D6F82F1A7759A46C07058 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ead5d13-9231-3d1c-a6ef-7a104ea2d95f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 67.54.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:6f:82:f1:a7:75:9a:46:c0:70:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d5f0887f-d009-43f2-b8b5-863d6ed90e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:fa:0b:56:02:03:33:0d:66:fe:d7:e3:9b: f4:d2:3d:f5:01:7b:c2:98:d1:0b:45:3f:20:12:12: 02:33:40:0b:3c:c8:70:e0:c0:57:0d:1b:75:ec:e0: 2b:60:32:f6:f2:c5:3a:e5:ed:41:04:2c:43:56:08: cf:3b:4d:b5:09:ab:f3:60:09:19:06:ec:ff:63:8d: 38:0f:de:53:6c:67:08:70:92:43:21:d5:e3:73:d8: 7d:e4:a6:76:ef:be:98:74:da:3f:00:ac:ce:7e:15: 6b:27:3d:00:8f:40:c4:56:a3:bb:18:72:e6:7c:bd: b2:fe:7a:53:f9:a9:36:7d:8f:db:14:57:26:51:e2: 9c:2f:7b:28:d6:be:b4:61:b2:3e:dc:d8:77:71:06: 00:c9:2f:0f:e3:32:db:fe:36:ef:70:f1:16:6d:74: 6a:41:3a:0b:b9:3e:26:af:74:a3:1b:bd:93:5a:9f: 36:0f:a7:c8:04:23:0b:fe:ab:fa:6a:a6:83:c5:d8: 87:13:78:ad:58:b1:5a:c4:15:c7:48:66:4d:f2:29: 25:da:22:14:cd:4d:18:1c:4d:d6:b0:97:74:fd:97: 4a:be:e3:dc:27:11:58:4e:ec:99:3e:a6:5a:ef:5c: 30:93:ff:f1:56:91:47:1f:d7:33:53:d4:24:27:7f: 3e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6F:E4:79:EC:84:E1:4D:BA:11:AE:0C:0D:69:82:D9:C7:05:3B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ead5d13-9231-3d1c-a6ef-7a104ea2d95f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:98:08:a8:14:71:b6:ac:26:10:4a:ec:ff:23:25:50:d1:9f: 75:31:6a:0a:e7:3c:2e:16:13:28:6a:2a:be:9d:3c:5d:09:0a: 45:ea:71:60:f1:a3:ee:e2:30:46:28:9d:a1:1a:e2:20:f7:f0: 14:3f:d4:e9:56:35:2d:45:ac:a1:79:cb:4d:e2:df:62:73:97: a3:6c:af:c7:f2:93:30:83:cc:4a:ea:34:53:b2:d2:af:07:2b: f0:00:45:e9:57:25:8a:58:22:2d:ba:04:9f:1d:eb:e0:d9:c9: 0f:4c:05:5a:cb:c1:00:09:4f:8d:81:e6:55:e0:5e:aa:9d:b0: c7:01:9d:ab:c8:15:30:15:30:fb:a2:99:cc:04:4e:78:21:5c: 1c:56:72:51:97:e2:14:05:62:fa:b6:13:d8:87:7f:af:df:33: 1c:4a:64:cf:49:aa:e8:b1:6e:f9:f7:64:c7:88:b5:a9:91:6c: b8:df:48:bb:d5:b7:86:08:2b:59:27:dd:1b:50:b6:e3:d6:78: 2b:d7:44:c9:8e:70:ae:b7:fe:17:10:03:04:77:f0:0f:eb:af: 8c:fb:38:7c:7c:79:c1:3a:75:ba:94:58:d8:63:d1:09:1d:5c: 08:34:5c:b2:d5:d2:eb:1a:74:74:d2:06:c2:d1:d4:65:70:6b: 9c:68:ea:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnW+C8ad1mkbAcFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDVmMDg4N2YtZDAwOS00M2YyLWI4YjUtODYzZDZlZDkwZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6D6C1YCAzMNZv7X45v00j31AXvCmNELRT8g EhICM0ALPMhw4MBXDRt17OArYDL28sU65e1BBCxDVgjPO021CavzYAkZBuz/Y404 D95TbGcIcJJDIdXjc9h95KZ2776YdNo/AKzOfhVrJz0Aj0DEVqO7GHLmfL2y/npT +ak2fY/bFFcmUeKcL3so1r60YbI+3Nh3cQYAyS8P4zLb/jbvcPEWbXRqQToLuT4m r3SjG72TWp82D6fIBCML/qv6aqaDxdiHE3itWLFaxBXHSGZN8ikl2iIUzU0YHE3W sJd0/ZdKvuPcJxFYTuyZPqZa71wwk//xVpFHH9czU9QkJ38+nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVv5HnshOFNuhGuDA1pgtnHBTuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2VhZDVkMTMtOTIzMS0z ZDFjLWE2ZWYtN2ExMDRlYTJkOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqYCKgUcbasJhBK7P8jJVDRn3UxagrnPC4WEyhqKr6dPF0JCkXqcWDx o+7iMEYonaEa4iD38BQ/1OlWNS1FrKF5y03i32Jzl6Nsr8fykzCDzErqNFOy0q8H K/AARelXJYpYIi26BJ8d6+DZyQ9MBVrLwQAJT42B5lXgXqqdsMcBnavIFTAVMPui mcwETnghXBxWclGX4hQFYvq2E9iHf6/fMxxKZM9Jquixbvn3ZMeItamRbLjfSLvV t4YIK1kn3RtQtuPWeCvXRMmOcK63/hcQAwR38A/rr4z7OHx8ecE6dbqUWNhj0Qkd XAg0XLLV0usadHTSBsLR1GVwa5xo6iM= -----END CERTIFICATE-----Generated at Thu Sep 10 18:13:40 2026 by rpki-client