$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa File: 97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa (raw, json) Hash identifier: MvDNDJav4Z+LN9nfLMC9VUZbWPzgroeSUMIYy6CiYLg= Subject key identifier: F9:EE:74:33:20:09:88:17:50:7C:23:5A:D5:FD:8D:3E:D8:6B:4D:79 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E2389B35E4D36205D4C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.243.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:23:89:b3:5e:4d:36:20:5d:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7c67a0ec-3e11-43be-9695-3201ba21e71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3a:6e:5d:98:3d:05:1e:3e:a5:d5:23:ef:c6: 81:aa:f5:a4:f9:55:85:09:0e:ab:f1:0b:3d:e3:4e: 5c:6f:55:f7:61:6c:2f:99:c2:6f:7b:2a:be:a3:ea: 48:92:02:60:5e:67:af:52:5d:29:83:41:a3:b7:88: 67:eb:bf:ce:6d:84:c1:c6:fb:75:b2:90:92:a4:fe: e9:4a:2d:3d:3a:d7:98:3a:49:f2:a9:20:81:c9:93: cf:30:8e:13:cb:94:eb:86:b5:7a:03:d2:f0:90:92: 79:2c:2c:85:6d:93:99:e8:c6:50:09:2d:40:9e:7a: d5:7d:23:9b:ac:63:09:12:e7:5a:a6:7f:5e:01:fa: 5d:5c:4c:29:fc:2f:ea:fb:65:cb:e9:04:b6:1d:78: 2e:00:87:52:49:ee:bf:73:49:0c:58:f5:3e:83:c5: da:36:f1:6f:35:0f:2f:07:1c:c1:32:79:4c:6a:a3: 65:cd:bf:c8:fd:7f:1d:90:fa:54:b0:01:a2:91:c1: d4:8d:1f:b6:ce:b3:a0:6b:e7:78:37:78:17:a6:63: ed:21:73:e4:9f:a9:c1:bf:02:0c:68:b4:e9:21:f6: 29:53:23:f5:6d:35:70:f2:01:c7:a3:1a:2b:59:ad: e1:c6:11:52:43:4d:17:b4:e1:f0:01:dd:aa:1c:02: 01:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EE:74:33:20:09:88:17:50:7C:23:5A:D5:FD:8D:3E:D8:6B:4D:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a4:b2:f3:36:7c:36:53:fc:32:3d:ec:40:d3:19:51:f1:30: 49:b4:bd:af:78:b6:4f:d5:5a:93:10:fa:e9:d0:c8:6a:1e:70: 53:46:10:45:02:46:19:cd:b3:44:16:6f:86:3e:6b:ca:74:8d: b9:c0:54:e7:4d:72:13:7b:42:fb:81:b3:89:e8:64:5c:1a:80: db:74:60:9e:86:a9:ca:00:c9:38:09:40:9e:0b:e5:36:e0:f8: 3b:19:27:87:1c:cc:a3:3d:eb:da:27:30:be:50:a2:11:bc:0e: 10:6f:4a:6a:24:de:6a:aa:c1:ca:6a:19:3c:ed:df:ec:c9:81: 50:cc:11:62:3a:f6:d1:c1:78:1b:d2:74:5b:db:4d:df:38:30: 45:8c:3d:c6:67:26:a8:cf:db:72:74:ca:6e:db:9c:31:42:3d: ce:a6:7d:cf:7e:64:39:83:4e:07:04:a0:95:fa:96:66:55:6e: 50:e9:48:df:d3:7d:5b:4e:0b:30:ca:8d:e9:bd:36:56:1e:80: 1b:8f:65:55:08:7c:ba:95:c8:53:8c:34:a6:a8:ca:47:d7:b6: 78:aa:4b:1c:c0:d5:83:77:b2:fd:da:a6:19:45:70:17:55:49: 56:94:c5:ed:ce:e1:77:8b:87:5a:1d:32:fc:52:03:d7:9c:bc: 1c:21:ae:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nniOJs15NNiBdTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2M2N2EwZWMtM2UxMS00M2JlLTk2OTUtMzIwMWJhMjFlNzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTpuXZg9BR4+pdUj78aBqvWk+VWFCQ6r8Qs9 405cb1X3YWwvmcJveyq+o+pIkgJgXmevUl0pg0Gjt4hn67/ObYTBxvt1spCSpP7p Si09OteYOknyqSCByZPPMI4Ty5TrhrV6A9LwkJJ5LCyFbZOZ6MZQCS1AnnrVfSOb rGMJEudapn9eAfpdXEwp/C/q+2XL6QS2HXguAIdSSe6/c0kMWPU+g8XaNvFvNQ8v BxzBMnlMaqNlzb/I/X8dkPpUsAGikcHUjR+2zrOga+d4N3gXpmPtIXPkn6nBvwIM aLTpIfYpUyP1bTVw8gHHoxorWa3hxhFSQ00XtOHwAd2qHAIBGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnudDMgCYgXUHwjWtX9jT7Ya015MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTdhZTI2NDAtMjZhZC0z YTY4LWI4M2QtN2QyYmIwYmQ1OTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmksvM2fDZT/DI97EDTGVHxMEm0va94tk/VWpMQ+unQyGoecFNGEEUC RhnNs0QWb4Y+a8p0jbnAVOdNchN7QvuBs4noZFwagNt0YJ6GqcoAyTgJQJ4L5Tbg +DsZJ4cczKM969onML5QohG8DhBvSmok3mqqwcpqGTzt3+zJgVDMEWI69tHBeBvS dFvbTd84MEWMPcZnJqjP23J0ym7bnDFCPc6mfc9+ZDmDTgcEoJX6lmZVblDpSN/T fVtOCzDKjem9NlYegBuPZVUIfLqVyFOMNKaoykfXtniqSxzA1YN3sv3aphlFcBdV SVaUxe3O4XeLh1odMvxSA9ecvBwhrt4= -----END CERTIFICATE-----Generated at Thu Sep 10 17:44:40 2026 by rpki-client