$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e2afea8-aee2-3ca8-b8b9-92a361df2fd6.roa File: 8e2afea8-aee2-3ca8-b8b9-92a361df2fd6.roa (raw, json) Hash identifier: C+VQff+lBAKcamnbMwwdAgJBmcGXPaiwvqB+nv4NIuw= Subject key identifier: 78:74:C4:4D:2B:2D:E4:A1:9E:18:49:2D:FF:B6:7B:3D:D7:2C:86:3A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983ED08971F3559C8CB4100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e2afea8-aee2-3ca8-b8b9-92a361df2fd6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:ed:08:97:1f:35:59:c8:cb:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cf9c6fe7-0e97-4f77-84cc-ea0c273774b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b9:2a:10:7a:7e:77:48:74:11:ce:72:ff:7c: 89:eb:13:57:e2:14:9f:1e:2c:0a:f5:92:0d:f9:27: 87:36:26:81:6c:df:4a:e4:69:04:34:59:c3:ff:1a: bd:0e:cc:fb:db:66:22:46:ae:21:dd:92:78:ae:57: 05:b7:c0:b0:a2:8c:f5:bc:c9:25:32:85:7c:3a:f5: e7:d0:37:15:16:ef:d1:30:9b:6b:5a:b3:71:24:35: e5:98:ed:55:3d:0b:d3:38:c9:b9:6a:7d:0f:03:dc: 5a:7b:52:8d:a1:1f:8f:32:9d:a7:1e:b3:a2:7e:ff: a2:27:2e:bd:59:48:f2:c4:ab:d7:ea:9c:b6:82:de: ea:cb:54:29:de:6a:7b:72:b1:a0:a5:e2:fd:da:6e: 36:a5:ae:86:c7:e8:98:50:17:8e:88:7f:6e:0a:b8: 02:bc:0f:b9:c7:66:a3:a7:92:f0:f4:f3:91:c1:51: 41:f4:40:7e:f1:06:b6:7c:d5:dd:9a:6f:7f:cf:9c: 9f:4f:d4:03:1d:b9:55:e2:6f:92:e9:de:1e:0d:ee: b3:8f:67:5f:14:1a:1b:6d:c2:88:25:8d:62:40:13: d9:7b:28:f3:b6:c2:07:d9:59:df:be:df:a4:35:a1: e7:cd:37:88:06:3a:1d:d4:82:37:aa:7a:9a:02:fb: cd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:74:C4:4D:2B:2D:E4:A1:9E:18:49:2D:FF:B6:7B:3D:D7:2C:86:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e2afea8-aee2-3ca8-b8b9-92a361df2fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:aa:dd:22:4d:17:36:86:eb:ee:88:84:45:cc:20:a8:f8:40: 4a:cb:17:52:85:27:1b:2c:5e:ad:b3:73:d2:5a:83:76:20:13: 8b:a8:8e:36:31:44:00:d5:8f:48:e9:5a:08:39:49:ec:cd:a0: 56:28:07:23:fb:bd:3f:34:28:cd:30:0d:e5:ee:f5:a0:12:0e: 93:3d:4b:bc:cf:42:0c:43:c6:1c:8e:7a:a9:1c:85:14:89:da: e1:17:70:b5:36:ab:13:7c:a0:46:88:9d:28:20:9e:3e:c6:d6: f4:cb:fa:b4:9d:7c:c3:dd:d4:44:fb:9d:0e:ef:6e:59:89:98: f8:ab:61:0c:fd:71:d3:bd:72:17:fd:5c:21:06:8f:1b:f4:fa: 7b:ba:ad:bc:93:c0:ad:99:6f:b5:de:83:b8:d9:0b:5f:40:dc: 40:c9:5b:16:65:40:5a:4c:e1:3e:a8:41:f3:f2:a0:53:b4:d5: 4b:31:ea:31:87:a4:8f:24:02:ef:8e:a7:9d:1f:a5:a8:66:22: 84:f1:3d:87:00:87:af:a6:b7:fa:a6:16:c3:b6:ab:bb:0e:20: 4b:73:2e:34:0d:f2:16:2b:0f:65:bf:89:32:3b:5b:17:8f:e5: 46:9f:6f:1a:d0:9e:45:f7:87:d3:d2:e7:8b:8a:d2:a5:5f:0a: 17:62:f6:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg+0Ilx81WcjLQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2Y5YzZmZTctMGU5Ny00Zjc3LTg0Y2MtZWEwYzI3Mzc3NGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbkqEHp+d0h0Ec5y/3yJ6xNX4hSfHiwK9ZIN +SeHNiaBbN9K5GkENFnD/xq9Dsz722YiRq4h3ZJ4rlcFt8Cwooz1vMklMoV8OvXn 0DcVFu/RMJtrWrNxJDXlmO1VPQvTOMm5an0PA9xae1KNoR+PMp2nHrOifv+iJy69 WUjyxKvX6py2gt7qy1Qp3mp7crGgpeL92m42pa6Gx+iYUBeOiH9uCrgCvA+5x2aj p5Lw9PORwVFB9EB+8Qa2fNXdmm9/z5yfT9QDHblV4m+S6d4eDe6zj2dfFBobbcKI JY1iQBPZeyjztsIH2Vnfvt+kNaHnzTeIBjod1II3qnqaAvvNNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHh0xE0rLeShnhhJLf+2ez3XLIY6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGUyYWZlYTgtYWVlMi0z Y2E4LWI4YjktOTJhMzYxZGYyZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMWq3SJNFzaG6+6IhEXMIKj4QErLF1KFJxssXq2zc9Jag3YgE4uojjYx RADVj0jpWgg5SezNoFYoByP7vT80KM0wDeXu9aASDpM9S7zPQgxDxhyOeqkchRSJ 2uEXcLU2qxN8oEaInSggnj7G1vTL+rSdfMPd1ET7nQ7vblmJmPirYQz9cdO9chf9 XCEGjxv0+nu6rbyTwK2Zb7Xeg7jZC19A3EDJWxZlQFpM4T6oQfPyoFO01Usx6jGH pI8kAu+Op50fpahmIoTxPYcAh6+mt/qmFsO2q7sOIEtzLjQN8hYrD2W/iTI7WxeP 5UafbxrQnkX3h9PS54uK0qVfChdi9u4= -----END CERTIFICATE-----Generated at Wed Oct 28 07:23:44 2026 by rpki-client