$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa File: 3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa (raw, json) Hash identifier: UTz68eKo7ctU49xYhMY85Tdv4H8310BgTwrzJb3gOII= Subject key identifier: 62:C8:CE:10:19:1A:AF:4C:35:DE:8A:97:EA:0F:A1:11:85:97:79:77 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BA826E77ED412AE429BE0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:a8:26:e7:7e:d4:12:ae:42:9b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f5ac21d3-ad93-451a-b76e-8589bb3d942b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d2:c9:25:7a:14:dd:81:f9:49:b2:c7:37:3a: 8f:fb:66:26:9b:11:21:cc:c8:6b:68:e9:8e:73:68: a2:c0:1e:82:e1:9b:8f:41:2a:15:67:c3:1a:40:41: 18:1a:80:70:c5:0b:c2:6e:31:6b:44:e9:36:68:dd: f8:14:c5:a4:28:79:ee:52:df:d8:cf:13:e5:2b:99: f5:e7:19:be:b9:95:5b:8c:34:2d:bc:01:14:9d:49: ed:a8:9e:da:1d:7e:f7:15:05:42:f2:14:54:90:08: a6:ce:3b:42:f2:15:e1:f7:80:f1:ca:9f:ff:c5:e9: 61:fa:b7:69:3c:d5:e6:35:71:a2:dc:a9:7a:d4:50: 0a:7d:44:f4:32:f2:43:37:b3:54:e8:f4:b3:13:84: a0:fb:d6:d0:24:2c:26:81:7e:b0:41:02:3e:26:1e: 00:31:04:4e:41:ea:da:4d:8a:c6:2e:73:05:30:ce: 38:b5:18:3a:d0:81:bc:e7:93:56:7f:1d:6a:1c:ac: 78:84:25:7e:b3:c5:7e:b6:69:3b:5d:84:23:23:3c: 09:56:f2:f4:1f:48:23:c0:b8:6d:82:99:db:eb:81: 31:18:68:0f:d1:a7:6b:c3:f6:42:5e:ed:64:8d:8e: 60:de:2b:01:2b:4b:a0:1b:9e:cf:84:cf:8e:fe:03: 30:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C8:CE:10:19:1A:AF:4C:35:DE:8A:97:EA:0F:A1:11:85:97:79:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:a3:8c:db:d4:c1:58:60:ce:c5:9b:ce:1e:88:cb:41:43:b2: bc:3c:7e:2d:e7:93:00:52:d3:63:78:3e:cb:f4:5e:ff:33:94: ec:fb:93:58:3b:67:a1:49:d5:45:63:6d:64:9c:bf:a4:ee:dc: f1:33:bd:8f:e4:3d:1d:26:1f:3a:12:15:b5:25:7d:8c:b0:24: 44:d6:fb:4f:1e:46:07:aa:65:cd:c1:b6:49:96:86:ca:41:ca: 8a:34:94:01:79:2a:37:72:ef:9b:5e:24:b3:9d:e6:e5:94:94: 91:41:42:dd:92:28:88:c3:15:7d:99:af:a3:a8:b1:6a:a4:e2: 7b:e8:7f:5c:f8:e1:6a:6b:10:6e:f4:22:4f:98:e6:02:6f:ab: c6:79:a5:8f:69:a2:a2:3a:e5:8a:b8:a0:e3:8d:6d:d8:09:f3: 8f:f6:9d:8d:b4:d7:c7:b3:33:0e:72:64:dd:7b:2e:ff:54:08: 5a:1e:fa:ba:c6:fb:03:2a:12:7e:9e:36:4c:86:c0:c5:4a:4b: 24:0c:cf:0a:42:92:41:c6:cf:f4:49:e3:23:c8:d9:59:bb:ca: bb:10:e8:d4:01:8b:52:df:e1:d9:36:54:61:a8:93:e8:ea:72: 45:90:c1:b5:20:33:62:20:96:ee:6c:56:ad:f1:ad:79:36:c9: 71:2c:c8:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je6gm537UEq5Cm+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjVhYzIxZDMtYWQ5My00NTFhLWI3NmUtODU4OWJiM2Q5NDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNLJJXoU3YH5SbLHNzqP+2YmmxEhzMhraOmO c2iiwB6C4ZuPQSoVZ8MaQEEYGoBwxQvCbjFrROk2aN34FMWkKHnuUt/YzxPlK5n1 5xm+uZVbjDQtvAEUnUntqJ7aHX73FQVC8hRUkAimzjtC8hXh94Dxyp//xelh+rdp PNXmNXGi3Kl61FAKfUT0MvJDN7NU6PSzE4Sg+9bQJCwmgX6wQQI+Jh4AMQROQera TYrGLnMFMM44tRg60IG855NWfx1qHKx4hCV+s8V+tmk7XYQjIzwJVvL0H0gjwLht gpnb64ExGGgP0adrw/ZCXu1kjY5g3isBK0ugG57PhM+O/gMw0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLIzhAZGq9MNd6Kl+oPoRGFl3l3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2YzZTBiYmYtNjU4NC0z YTRiLTliNDctOWE0ZGRjMjNiNDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANOjjNvUwVhgzsWbzh6Iy0FDsrw8fi3nkwBS02N4Psv0Xv8zlOz7k1g7 Z6FJ1UVjbWScv6Tu3PEzvY/kPR0mHzoSFbUlfYywJETW+08eRgeqZc3BtkmWhspB yoo0lAF5Kjdy75teJLOd5uWUlJFBQt2SKIjDFX2Zr6OosWqk4nvof1z44WprEG70 Ik+Y5gJvq8Z5pY9poqI65Yq4oOONbdgJ84/2nY2018ezMw5yZN17Lv9UCFoe+rrG +wMqEn6eNkyGwMVKSyQMzwpCkkHGz/RJ4yPI2Vm7yrsQ6NQBi1Lf4dk2VGGok+jq ckWQwbUgM2Iglu5sVq3xrXk2yXEsyPQ= -----END CERTIFICATE-----Generated at Wed Oct 28 14:37:18 2026 by rpki-client