$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/669ba9e5-5cde-383b-bb6f-1c56fb5060b5.roa File: 669ba9e5-5cde-383b-bb6f-1c56fb5060b5.roa (raw, json) Hash identifier: qi7HLHXY1K2iubp1m+845PwqjJWS2cVwsqw5Q1kgUmE= Subject key identifier: 70:0B:86:2E:7D:6E:55:EB:42:68:E1:86:9D:C2:FA:69:A6:BF:5C:3A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79FC03CD9CB65084C0F06C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/669ba9e5-5cde-383b-bb6f-1c56fb5060b5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.242.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:c0:3c:d9:cb:65:08:4c:0f:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=172121cf-6ef0-4339-9d60-ebef5ef34a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:15:44:c2:20:28:7b:30:1e:6a:92:60:d7:b6: 23:54:e3:f7:b4:bc:a9:03:aa:2c:18:7f:cb:0c:d6: a2:98:cd:68:60:89:01:b4:eb:8c:bd:e6:9e:45:23: 43:6a:82:08:89:ff:24:a5:26:dc:fa:fd:00:9d:1c: 48:4a:74:ec:44:bd:4e:d8:ad:49:2b:91:a8:4e:cb: dd:38:26:07:56:69:06:19:70:5d:2f:d7:e6:bf:1b: 6b:32:cc:30:b6:67:3e:45:03:7e:13:34:3d:3e:87: 26:76:ee:2a:03:6b:5f:d7:a4:03:09:30:50:cb:4f: 43:71:8a:4a:5a:29:6d:d4:ba:88:58:90:5d:8f:f5: 08:f1:2f:c9:97:5e:be:5d:2e:de:3b:e5:b3:b4:60: 6f:7a:0a:41:02:8f:25:0a:1c:d4:f1:b5:d7:ef:88: 88:ad:73:ca:1e:51:52:b3:20:82:4e:8b:12:9b:35: e3:de:70:b6:11:11:d0:51:2b:46:cb:ea:4a:c0:49: e2:67:c0:c4:3e:f8:33:78:33:85:a9:75:a2:d4:8a: d3:8c:ba:3f:0d:68:35:72:d6:9d:57:c1:9e:8a:a4: 00:9c:dc:6a:42:87:0b:ad:49:f1:0f:78:33:12:4d: 83:01:41:4c:08:3a:67:a9:26:64:7f:93:d2:2b:17: e9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0B:86:2E:7D:6E:55:EB:42:68:E1:86:9D:C2:FA:69:A6:BF:5C:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/669ba9e5-5cde-383b-bb6f-1c56fb5060b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:b3:78:49:fa:4a:8f:65:75:b1:1a:9c:8a:a6:89:49:fa:4c: bb:67:36:b5:61:88:48:f0:13:49:ad:5c:9d:9d:15:ce:c9:13: 96:03:78:1a:68:ea:7a:4e:b8:48:e3:33:ba:90:ce:fa:58:2a: 67:0a:c1:8b:76:8d:28:54:21:c2:17:3e:a4:9f:23:e3:1f:43: da:c2:d9:cd:8f:6c:4f:30:66:d6:23:20:97:56:de:38:56:47: 32:42:f1:fd:a9:67:0e:ce:13:42:a6:e7:1c:4d:13:16:a7:81: 5f:ad:b1:27:af:f9:f7:be:3f:9a:8b:cc:92:ae:24:30:cc:ee: a4:59:35:59:bc:ad:32:7c:01:ce:a1:fb:d4:f8:0b:83:c6:12: ed:56:5a:e5:a6:de:0b:77:6d:3b:35:23:30:97:07:e2:1a:32: ae:b5:29:88:57:c8:d4:8d:07:9c:37:d9:de:58:81:2b:94:ff: a4:ef:2b:c7:7d:9a:e6:63:ab:7e:f8:a6:ef:56:fa:bc:36:35: 45:45:85:ce:a9:a9:2a:bf:d0:ee:95:ff:d7:70:57:60:85:a7: dc:cb:6b:dc:d1:08:30:b2:fa:83:ae:45:70:6f:a2:da:6d:af: 5e:4a:8d:7f:c4:a7:7d:92:34:db:39:d6:cf:92:91:24:ae:0f: ea:51:a1:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn8A82ctlCEwPBsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTcyMTIxY2YtNmVmMC00MzM5LTlkNjAtZWJlZjVlZjM0YTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBVEwiAoezAeapJg17YjVOP3tLypA6osGH/L DNaimM1oYIkBtOuMveaeRSNDaoIIif8kpSbc+v0AnRxISnTsRL1O2K1JK5GoTsvd OCYHVmkGGXBdL9fmvxtrMswwtmc+RQN+EzQ9Pocmdu4qA2tf16QDCTBQy09DcYpK Wilt1LqIWJBdj/UI8S/Jl16+XS7eO+WztGBvegpBAo8lChzU8bXX74iIrXPKHlFS syCCTosSmzXj3nC2ERHQUStGy+pKwEniZ8DEPvgzeDOFqXWi1IrTjLo/DWg1ctad V8GeiqQAnNxqQocLrUnxD3gzEk2DAUFMCDpnqSZkf5PSKxfpYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHALhi59blXrQmjhhp3C+mmmv1w6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjY5YmE5ZTUtNWNkZS0z ODNiLWJiNmYtMWM1NmZiNTA2MGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+zeEn6So9ldbEanIqmiUn6TLtnNrVhiEjwE0mtXJ2dFc7JE5YDeBpo 6npOuEjjM7qQzvpYKmcKwYt2jShUIcIXPqSfI+MfQ9rC2c2PbE8wZtYjIJdW3jhW RzJC8f2pZw7OE0Km5xxNExangV+tsSev+fe+P5qLzJKuJDDM7qRZNVm8rTJ8Ac6h +9T4C4PGEu1WWuWm3gt3bTs1IzCXB+IaMq61KYhXyNSNB5w32d5YgSuU/6TvK8d9 muZjq374pu9W+rw2NUVFhc6pqSq/0O6V/9dwV2CFp9zLa9zRCDCy+oOuRXBvotpt r15KjX/Ep32SNNs51s+SkSSuD+pRoRM= -----END CERTIFICATE-----Generated at Thu Sep 10 09:38:53 2026 by rpki-client