$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76b18b75-4c19-3ae8-a06c-cde19cfd6fa3.roa File: 76b18b75-4c19-3ae8-a06c-cde19cfd6fa3.roa (raw, json) Hash identifier: cL5InjQbchOra5Jwo/OpsyeInw7vz0lRRwQ4fkXtZVg= Subject key identifier: 0E:7A:C1:11:0F:74:34:A6:E0:FE:71:96:D9:C2:9C:E5:CE:12:EE:70 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B956E335CF4CE5597F640 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76b18b75-4c19-3ae8-a06c-cde19cfd6fa3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:95:6e:33:5c:f4:ce:55:97:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d403866d-eb35-4dab-b8ea-e3e8b11d4f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ae:72:a5:83:d5:5c:9f:97:b9:ab:0e:74:75: b8:fe:e8:50:03:95:17:fc:5d:15:63:96:21:cb:44: e6:ad:4c:59:bf:9c:bc:2d:a7:27:b6:9a:85:ff:2a: 1c:a0:fb:2c:bb:06:ac:53:8b:bd:ec:72:86:22:a2: c5:e7:f8:ba:d3:bc:39:85:ef:fa:e1:d7:3e:73:3c: cd:f3:a6:41:b3:ec:72:d5:c3:6b:8d:95:de:f6:80: 2b:e7:bd:74:1e:2e:5d:ed:d7:14:e2:dd:d7:27:32: 68:76:51:bb:33:20:29:46:14:ac:ae:25:05:b9:7f: ac:90:bd:fa:85:ae:05:14:cd:38:1c:ce:7a:31:6c: 20:7b:eb:95:b1:3c:a6:c2:b5:2d:81:ed:96:a5:92: 8d:c3:e0:04:d8:c7:6a:87:e7:3c:21:92:d4:ef:5f: 6a:68:57:b1:a6:13:03:d3:03:93:40:41:c6:1f:22: 43:0b:84:8a:f6:b6:80:22:31:bc:77:3a:31:86:4c: 2f:40:2b:de:e7:f7:4b:9f:83:ce:81:ad:76:4c:43: ab:ca:21:8c:39:90:fd:bb:6e:5c:cc:ff:5e:bb:cd: a5:7e:1e:81:14:77:b6:48:ee:c5:d4:20:40:44:8e: 7a:53:16:c5:37:57:fe:36:0d:44:40:2a:62:10:08: 3e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7A:C1:11:0F:74:34:A6:E0:FE:71:96:D9:C2:9C:E5:CE:12:EE:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76b18b75-4c19-3ae8-a06c-cde19cfd6fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:8c:ff:f1:f6:a5:79:72:25:38:78:6b:8a:e3:31:66:43:25: ef:78:97:3d:12:2f:61:84:93:7b:2f:4c:2b:ca:f6:63:54:f0: b8:a1:08:ac:f7:1b:48:41:4f:41:f8:5a:c8:a7:9f:09:6e:48: c1:20:f7:f5:2b:23:08:36:6d:36:30:36:bf:e8:a2:1a:5c:cf: f6:a6:33:86:8b:90:33:03:e3:a1:fd:4d:6d:1d:9f:c5:bf:16: 94:ec:69:f4:d1:bc:c6:28:f4:ac:0a:3b:ac:e1:2c:a5:30:2e: e0:79:53:18:8c:c3:d2:37:0d:53:7b:84:cd:b2:df:b8:a5:ab: 32:71:63:28:61:4c:a9:e6:c2:7e:ee:6a:50:19:64:de:48:e5: f7:2a:c2:c2:6d:f5:25:92:96:26:0f:f8:1a:21:7c:9d:0e:3e: 60:8d:cc:28:6e:35:a8:41:72:80:18:0b:38:50:c4:af:69:dd: 85:cb:2c:39:e2:2e:5a:c2:d4:20:87:3e:87:ab:7b:f8:23:d5: 2e:47:a9:38:e2:c2:01:d7:e1:ee:fa:18:a5:3e:dd:13:15:97: be:f8:7f:31:2d:36:5e:20:f7:31:75:0f:5f:bf:ec:9e:94:54: 84:57:fc:51:7e:42:dd:34:f0:2b:cf:ce:65:5b:a4:bd:f8:3b: 26:d1:2d:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je5VuM1z0zlWX9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDQwMzg2NmQtZWIzNS00ZGFiLWI4ZWEtZTNlOGIxMWQ0ZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6K5ypYPVXJ+XuasOdHW4/uhQA5UX/F0VY5Yh y0TmrUxZv5y8LacntpqF/yocoPssuwasU4u97HKGIqLF5/i607w5he/64dc+czzN 86ZBs+xy1cNrjZXe9oAr5710Hi5d7dcU4t3XJzJodlG7MyApRhSsriUFuX+skL36 ha4FFM04HM56MWwge+uVsTymwrUtge2WpZKNw+AE2Mdqh+c8IZLU719qaFexphMD 0wOTQEHGHyJDC4SK9raAIjG8dzoxhkwvQCve5/dLn4POga12TEOryiGMOZD9u25c zP9eu82lfh6BFHe2SO7F1CBARI56UxbFN1f+Ng1EQCpiEAg+9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA56wREPdDSm4P5xltnCnOXOEu5wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzZiMThiNzUtNGMxOS0z YWU4LWEwNmMtY2RlMTljZmQ2ZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmM//H2pXlyJTh4a4rjMWZDJe94lz0SL2GEk3svTCvK9mNU8LihCKz3 G0hBT0H4WsinnwluSMEg9/UrIwg2bTYwNr/oohpcz/amM4aLkDMD46H9TW0dn8W/ FpTsafTRvMYo9KwKO6zhLKUwLuB5UxiMw9I3DVN7hM2y37ilqzJxYyhhTKnmwn7u alAZZN5I5fcqwsJt9SWSliYP+BohfJ0OPmCNzChuNahBcoAYCzhQxK9p3YXLLDni LlrC1CCHPoere/gj1S5HqTjiwgHX4e76GKU+3RMVl774fzEtNl4g9zF1D1+/7J6U VIRX/FF+Qt008CvPzmVbpL34OybRLfM= -----END CERTIFICATE-----Generated at Wed Oct 28 07:23:48 2026 by rpki-client