$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89bb151f-5c2a-3e02-8e58-24e220a54b24.roa File: 89bb151f-5c2a-3e02-8e58-24e220a54b24.roa (raw, json) Hash identifier: 8RyxvJ95WrLsDMKvdGGifwI69jGor/YAQn8Lq31360k= Subject key identifier: E3:D1:32:8A:14:06:BA:52:79:4B:91:C6:4F:D3:B3:89:CC:FC:9A:EE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E1ADF671E9C48CCF27800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89bb151f-5c2a-3e02-8e58-24e220a54b24.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.242.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:1a:df:67:1e:9c:48:cc:f2:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=27c46d21-e4de-4b83-b97d-4a17ba5fc7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d4:00:3e:06:b6:2f:79:fb:72:af:a6:90:a2: 9e:43:52:3b:ab:1f:8b:d1:b4:15:ba:29:ce:62:a9: c6:e7:10:05:be:9e:eb:47:99:c2:93:7c:4e:eb:ba: 53:b8:13:b1:3b:39:cc:52:72:50:db:3f:65:75:8d: af:48:da:15:1c:09:26:d6:31:31:71:e9:42:7f:38: ec:f7:b4:2c:ed:7d:72:0e:33:8f:f9:4b:c4:e1:b4: f4:6c:49:2c:e1:06:75:af:1c:2b:f9:16:69:32:d8: 1f:68:6a:5f:a0:c5:bf:c0:fb:77:4f:c3:ce:f4:b9: 52:a7:14:05:f4:bd:07:a2:be:55:df:7c:7b:21:e4: 8b:16:56:dc:e6:94:43:86:b6:b6:25:1a:6e:6a:d2: 07:d4:38:ef:c7:24:8e:28:f5:04:0b:b2:01:f6:c1: a6:8f:b5:96:dc:0d:06:98:5e:2a:bd:19:eb:45:b4: 68:47:e6:14:ad:a3:1d:67:0c:fe:5e:9e:7c:c8:3b: cb:e6:f3:47:55:00:fb:ae:5e:24:6d:f4:4a:e2:c0: 0f:0b:4d:6b:88:be:9f:50:61:90:b5:94:41:9e:af: e9:84:1e:64:75:46:2b:d2:ad:3e:95:8f:1d:da:7b: b3:d2:74:ae:80:42:a8:a9:11:61:a0:1e:68:9e:9a: 31:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D1:32:8A:14:06:BA:52:79:4B:91:C6:4F:D3:B3:89:CC:FC:9A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89bb151f-5c2a-3e02-8e58-24e220a54b24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:aa:07:17:95:bc:49:78:2a:e5:36:6b:ae:49:c0:5a:79:90: ca:33:61:e9:ee:e2:ea:72:da:5a:25:5e:f0:14:ab:7f:37:2d: de:44:bd:59:b9:e7:c8:cc:02:db:d3:3e:ea:67:e2:a6:44:ab: 24:43:14:ed:9a:30:b7:f0:25:4f:0e:23:fb:f5:b7:8a:1f:60: e7:83:47:42:85:20:7e:22:79:03:93:e0:12:f6:f8:be:12:5c: bb:80:e9:8e:93:69:d7:b6:bd:4e:4d:c6:2e:2e:48:e8:20:5a: b4:a9:88:91:4e:c2:59:7f:0b:14:12:3a:49:1f:ee:17:5e:7d: 1e:66:84:76:dd:86:75:3c:52:5a:5d:5f:31:e6:64:00:3a:d3: 2d:de:da:59:58:d0:a8:d1:b9:f1:1e:43:ae:5e:14:0c:81:b7: ae:9b:3e:38:01:9b:2e:05:dd:86:be:f7:bb:49:af:5e:5b:67: 7d:f9:5b:82:6e:8a:1e:0d:b8:c1:e1:3e:a0:8d:c1:e4:51:5f: 69:9b:5a:30:b2:11:14:d7:91:5e:8b:00:36:3a:96:74:20:24: 3e:28:56:8f:79:43:d8:4b:db:17:ec:47:1b:5c:dc:65:e1:48: f4:5d:d4:dd:54:01:69:25:e1:42:82:15:ed:4f:33:30:fa:8d: f0:63:0e:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnhrfZx6cSMzyeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjdjNDZkMjEtZTRkZS00YjgzLWI5N2QtNGExN2JhNWZjN2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtQAPga2L3n7cq+mkKKeQ1I7qx+L0bQVuinO YqnG5xAFvp7rR5nCk3xO67pTuBOxOznMUnJQ2z9ldY2vSNoVHAkm1jExcelCfzjs 97Qs7X1yDjOP+UvE4bT0bEks4QZ1rxwr+RZpMtgfaGpfoMW/wPt3T8PO9LlSpxQF 9L0Hor5V33x7IeSLFlbc5pRDhra2JRpuatIH1DjvxySOKPUEC7IB9sGmj7WW3A0G mF4qvRnrRbRoR+YUraMdZwz+Xp58yDvL5vNHVQD7rl4kbfRK4sAPC01riL6fUGGQ tZRBnq/phB5kdUYr0q0+lY8d2nuz0nSugEKoqRFhoB5onpoxNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPRMooUBrpSeUuRxk/Ts4nM/JruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODliYjE1MWYtNWMyYS0z ZTAyLThlNTgtMjRlMjIwYTU0YjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANiqBxeVvEl4KuU2a65JwFp5kMozYenu4upy2lolXvAUq383Ld5EvVm5 58jMAtvTPupn4qZEqyRDFO2aMLfwJU8OI/v1t4ofYOeDR0KFIH4ieQOT4BL2+L4S XLuA6Y6Tade2vU5Nxi4uSOggWrSpiJFOwll/CxQSOkkf7hdefR5mhHbdhnU8Ulpd XzHmZAA60y3e2llY0KjRufEeQ65eFAyBt66bPjgBmy4F3Ya+97tJr15bZ335W4Ju ih4NuMHhPqCNweRRX2mbWjCyERTXkV6LADY6lnQgJD4oVo95Q9hL2xfsRxtc3GXh SPRd1N1UAWkl4UKCFe1PMzD6jfBjDrg= -----END CERTIFICATE-----Generated at Thu Sep 10 18:13:49 2026 by rpki-client