$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/442ff00f-ad65-3434-8575-a778d87e141b.roa File: 442ff00f-ad65-3434-8575-a778d87e141b.roa (raw, json) Hash identifier: r4NrzIOtwy+IOEn86vnz44mEDpAahiG44NYNb+cQ62U= Subject key identifier: FA:F6:C3:8E:AC:82:BB:14:FE:F6:E2:DE:DC:F7:4A:B0:1C:C2:9C:FA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79FCD9873B3942E24764700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/442ff00f-ad65-3434-8575-a778d87e141b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.243.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:cd:98:73:b3:94:2e:24:76:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=37e4c5e0-b31c-4b7e-b7fd-272bbf13f371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:73:52:b5:76:98:12:e1:18:15:25:e9:83:f9: fc:60:33:6a:f2:9d:98:70:42:6c:af:84:59:b5:40: 9d:e1:fa:63:5f:28:d2:5b:c5:02:1c:cd:43:c8:4f: dc:07:05:9b:3a:f3:cf:f9:a4:11:52:15:a2:41:1a: 05:1e:67:6b:23:7b:ea:66:b3:5a:a9:b7:6c:7a:7f: a9:7b:07:fc:a8:62:81:6f:25:61:4e:02:08:16:57: 3d:7b:04:f8:de:1a:5f:a4:0a:05:e7:32:7d:e1:b6: f9:9e:73:7d:df:82:25:49:ed:76:c6:55:4e:1c:67: 4b:3e:7e:0d:6c:f8:6a:61:09:38:09:b8:14:79:d3: a4:13:9d:80:ac:19:2d:5d:23:f6:02:36:a5:d0:65: 7a:02:3a:a1:c9:5a:79:5f:12:93:3c:13:0c:51:1c: 6a:95:55:90:ca:0f:c7:cb:a9:90:9c:41:6e:19:ce: 82:d8:ea:b5:15:e2:b4:62:3b:3b:4f:39:37:d0:5e: 52:31:e9:42:2b:34:0d:b5:58:a9:98:fe:3f:d1:be: a1:7f:3c:7c:70:f4:46:29:2f:ab:69:32:8d:5c:a2: e5:5f:43:0c:23:a1:29:b5:bb:6f:72:a2:44:ca:10: 1c:32:11:15:44:ab:0b:39:ec:2a:89:8a:56:f9:68: aa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F6:C3:8E:AC:82:BB:14:FE:F6:E2:DE:DC:F7:4A:B0:1C:C2:9C:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/442ff00f-ad65-3434-8575-a778d87e141b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:60:86:50:41:7b:8d:96:3e:3b:db:a6:18:b5:bf:a7:0e:cd: 6a:6f:b3:97:6e:c1:4a:ba:a4:e0:0b:29:70:98:35:4c:53:ea: e3:8b:8f:fd:12:f1:40:d8:68:88:f1:c1:f0:3c:0e:57:8f:46: e8:fe:54:99:f3:1c:3b:37:67:07:21:9e:a6:5e:90:da:5e:75: 9c:55:57:a7:28:59:90:22:4b:1e:79:fe:57:44:67:40:03:5e: ef:31:db:da:91:78:f0:d4:ca:22:c6:85:f5:0a:9d:f5:0d:63: 4e:80:36:73:6f:23:5e:5b:0e:61:d3:f7:2e:f4:4d:73:e5:d9: b8:40:01:77:5f:35:f3:ad:58:28:0c:a8:ff:e1:2a:c6:d7:1d: e7:2c:11:ef:d8:7e:cf:fc:8d:36:a8:d6:c9:c3:c8:18:d9:67: 70:f5:14:00:df:00:9a:08:fd:ef:75:d6:9c:90:45:2d:91:6a: ba:63:b7:a7:75:e2:5a:70:5f:0d:7d:c1:b5:ea:f2:9a:f9:0d: 00:ed:ad:84:01:b6:cd:1c:44:f9:22:0c:b1:e3:5c:60:e5:6c: d4:7b:54:c0:ca:56:92:e8:c2:c7:07:2b:70:0f:74:f4:52:8f: 6c:ed:18:d3:ad:86:6d:6c:78:ef:a8:a2:08:22:75:0b:86:c4: 2d:47:3e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn82Yc7OULiR2RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzdlNGM1ZTAtYjMxYy00YjdlLWI3ZmQtMjcyYmJmMTNmMzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnNStXaYEuEYFSXpg/n8YDNq8p2YcEJsr4RZ tUCd4fpjXyjSW8UCHM1DyE/cBwWbOvPP+aQRUhWiQRoFHmdrI3vqZrNaqbdsen+p ewf8qGKBbyVhTgIIFlc9ewT43hpfpAoF5zJ94bb5nnN934IlSe12xlVOHGdLPn4N bPhqYQk4CbgUedOkE52ArBktXSP2Ajal0GV6AjqhyVp5XxKTPBMMURxqlVWQyg/H y6mQnEFuGc6C2Oq1FeK0Yjs7Tzk30F5SMelCKzQNtVipmP4/0b6hfzx8cPRGKS+r aTKNXKLlX0MMI6EptbtvcqJEyhAcMhEVRKsLOewqiYpW+WiqDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPr2w46sgrsU/vbi3tz3SrAcwpz6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDQyZmYwMGYtYWQ2NS0z NDM0LTg1NzUtYTc3OGQ4N2UxNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpghlBBe42WPjvbphi1v6cOzWpvs5duwUq6pOALKXCYNUxT6uOLj/0S 8UDYaIjxwfA8DlePRuj+VJnzHDs3ZwchnqZekNpedZxVV6coWZAiSx55/ldEZ0AD Xu8x29qRePDUyiLGhfUKnfUNY06ANnNvI15bDmHT9y70TXPl2bhAAXdfNfOtWCgM qP/hKsbXHecsEe/Yfs/8jTao1snDyBjZZ3D1FADfAJoI/e911pyQRS2Rarpjt6d1 4lpwXw19wbXq8pr5DQDtrYQBts0cRPkiDLHjXGDlbNR7VMDKVpLowscHK3APdPRS j2ztGNOthm1seO+ooggidQuGxC1HPq8= -----END CERTIFICATE-----Generated at Thu Sep 10 12:45:32 2026 by rpki-client