$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53daf607-8fc8-3350-8063-ec3143c32ddd.roa File: 53daf607-8fc8-3350-8063-ec3143c32ddd.roa (raw, json) Hash identifier: E5Vo3o/BSnFDDyqO2sY7HRFi+FglvPa0M2oTJBoOmVs= Subject key identifier: 71:ED:6B:AA:0F:2C:A3:58:09:E2:07:AB:B8:07:BF:29:59:B8:78:16 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79FC4D87D8D7393F0E18000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53daf607-8fc8-3350-8063-ec3143c32ddd.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.242.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:c4:d8:7d:8d:73:93:f0:e1:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=23cc66cd-906a-49f4-b903-1000e80c5dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:60:48:8f:85:30:a9:91:9b:fb:8b:4d:95: ae:c6:2c:38:24:ff:f5:e3:51:f7:24:ea:ab:8c:82: 22:89:d0:ca:57:7a:a3:94:7f:1f:38:79:2f:e0:10: 9c:a2:32:59:5b:a8:9f:85:89:70:84:f7:c2:6c:e9: d2:43:26:13:82:11:aa:05:9e:af:23:c0:66:a7:2f: 4b:a1:3a:12:14:3e:b9:3d:a5:c3:b0:93:fd:f8:4c: 06:67:3e:f4:bc:89:ec:52:ee:e9:4f:0b:cd:56:ad: 2f:ea:3a:04:d2:78:80:8f:64:05:af:e7:3d:d6:cb: 61:01:c9:6d:97:f4:79:9d:3c:c8:59:7c:e6:87:4e: 1f:56:00:d5:ce:f2:9a:c3:87:f5:73:47:d6:e9:a5: 45:70:ba:4a:4a:ff:4c:eb:e8:9a:5a:96:f9:e9:f4: 3e:19:e8:fb:9e:0f:3f:92:23:2a:df:24:ad:f2:ad: ca:1f:4c:f2:9e:b6:4d:c6:4d:25:9a:04:c8:87:c6: 8e:51:13:50:df:c7:bd:10:ca:f0:e1:21:e6:51:19: 42:f3:79:59:82:a0:74:9a:41:4e:20:44:db:9c:e8: 3d:e0:76:a3:5d:05:59:4c:af:ae:5a:96:ae:7c:dd: d8:e8:8d:88:e0:ae:ed:fb:b3:8f:5e:7f:6f:22:89: 5a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:ED:6B:AA:0F:2C:A3:58:09:E2:07:AB:B8:07:BF:29:59:B8:78:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53daf607-8fc8-3350-8063-ec3143c32ddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a9:64:21:36:e2:2d:ae:83:05:41:d8:21:be:9f:3c:68:52: 5b:45:18:96:dd:5b:c9:2d:2d:78:73:75:5a:7f:c6:ff:fe:b7: 71:6c:c2:1e:10:58:62:f7:4b:7a:a5:b5:7d:66:80:70:5c:73: a1:d1:76:d2:24:92:b4:d3:7b:13:e2:de:22:06:56:18:57:55: 1c:20:87:01:af:67:e7:f5:02:d1:d1:c2:87:eb:8f:ee:f0:83: 26:94:47:4e:a1:c0:58:28:36:b4:90:0e:ec:8a:f5:2d:59:4c: 5a:64:d5:71:03:23:ba:b0:f8:7f:31:83:b2:b0:cb:49:23:0b: 06:69:02:f8:04:85:53:f4:29:9c:f9:e6:7b:d4:6a:4f:f0:20: 96:c4:1c:0a:af:09:67:0d:4a:f9:fc:ea:a5:27:07:d3:c0:28: 6d:50:dd:57:51:a4:44:a9:72:b3:c6:bb:46:1a:30:b6:bd:04: 0d:c4:6a:1f:05:37:ea:ae:5c:d4:d9:76:87:d4:74:6f:38:0f: d9:51:48:aa:f0:6b:be:cf:e5:0c:92:4b:70:da:d1:92:36:7b: 3c:d6:ef:f1:93:b5:81:b0:92:b8:ab:14:13:4d:a2:ce:de:1f: 81:d3:c4:b2:ce:6a:94:91:a9:ac:fe:d0:58:f9:80:df:49:2c: fd:6e:3b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn8TYfY1zk/DhgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjNjYzY2Y2QtOTA2YS00OWY0LWI5MDMtMTAwMGU4MGM1ZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnhgSI+FMKmRm/uLTZWuxiw4JP/141H3JOqr jIIiidDKV3qjlH8fOHkv4BCcojJZW6ifhYlwhPfCbOnSQyYTghGqBZ6vI8Bmpy9L oToSFD65PaXDsJP9+EwGZz70vInsUu7pTwvNVq0v6joE0niAj2QFr+c91sthAclt l/R5nTzIWXzmh04fVgDVzvKaw4f1c0fW6aVFcLpKSv9M6+iaWpb56fQ+Gej7ng8/ kiMq3ySt8q3KH0zynrZNxk0lmgTIh8aOURNQ38e9EMrw4SHmURlC83lZgqB0mkFO IETbnOg94HajXQVZTK+uWpaufN3Y6I2I4K7t+7OPXn9vIolaOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHta6oPLKNYCeIHq7gHvylZuHgWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTNkYWY2MDctOGZjOC0z MzUwLTgwNjMtZWMzMTQzYzMyZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPL5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICpZCE24i2ugwVB2CG+nzxoUltFGJbdW8ktLXhzdVp/xv/+t3Fswh4Q WGL3S3qltX1mgHBcc6HRdtIkkrTTexPi3iIGVhhXVRwghwGvZ+f1AtHRwofrj+7w gyaUR06hwFgoNrSQDuyK9S1ZTFpk1XEDI7qw+H8xg7Kwy0kjCwZpAvgEhVP0KZz5 5nvUak/wIJbEHAqvCWcNSvn86qUnB9PAKG1Q3VdRpESpcrPGu0YaMLa9BA3Eah8F N+quXNTZdofUdG84D9lRSKrwa77P5QySS3Da0ZI2ezzW7/GTtYGwkrirFBNNos7e H4HTxLLOapSRqaz+0Fj5gN9JLP1uO34= -----END CERTIFICATE-----Generated at Thu Sep 10 12:43:43 2026 by rpki-client