$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa File: b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa (raw, json) Hash identifier: ntIJQfnyVYsocgvWtOULxcoxYbxhAVx67ZfLkdfq4sM= Subject key identifier: AC:CE:CB:9C:94:B1:6A:EC:C1:EC:EA:AC:DA:A8:0C:49:05:5F:E5:38 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79FCFF0880D35BA05E51D00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.243.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:cf:f0:88:0d:35:ba:05:e5:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7e21e556-8d9f-4508-b5ac-85cf3d9afde6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:10:c1:3d:6e:96:32:38:64:5b:c4:1e:e9:91: 3a:ea:b8:27:84:6a:77:c1:81:98:ba:ee:26:90:e6: 2b:e7:23:a3:20:d3:ad:b1:a7:57:dd:31:79:54:91: bb:6c:04:49:a2:07:b5:97:d9:50:cb:f9:09:0e:b9: fd:54:38:b7:8e:53:55:d5:6d:2e:f5:8f:be:a1:fa: 36:56:e7:6b:76:f7:ea:09:f5:b2:fc:2c:c1:3f:3e: 77:37:c0:06:b5:97:0f:57:33:10:20:e3:b5:75:1f: 21:4f:68:26:17:56:0d:b7:2a:e2:0a:ff:a5:77:2a: 56:d4:76:c3:d0:99:e0:c7:41:cb:65:f6:81:b8:5a: 2f:e8:31:bb:37:61:31:e2:b7:46:bc:aa:5d:14:6f: 18:1f:d8:31:6f:19:5c:6a:e7:2c:b7:b2:48:57:61: 49:34:fc:4e:11:c0:9e:46:45:6a:5c:87:ea:7c:18: b9:0d:5d:5a:80:7c:d6:9d:f6:bf:33:39:26:94:a8: 67:93:95:62:d5:1a:4e:37:ae:5b:b0:71:9b:ed:e8: 0b:74:c6:e6:ec:66:c3:e4:b7:1d:c2:8d:4a:fe:57: e5:fa:d8:6f:39:6c:14:43:17:be:eb:3c:67:6b:94: d6:b2:43:9a:a6:dc:0d:e9:21:82:b7:14:ec:f5:d0: 45:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CE:CB:9C:94:B1:6A:EC:C1:EC:EA:AC:DA:A8:0C:49:05:5F:E5:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e9:05:db:af:54:45:ef:f0:77:39:c9:43:74:3c:e9:80:4c: 3c:ab:cd:72:38:15:ca:63:d4:1d:fa:d8:2f:19:50:3e:a8:17: dd:fe:e0:ee:92:cb:d2:31:72:d8:2b:a4:6b:63:54:69:98:cf: 28:05:33:37:e4:4b:0a:95:e2:c0:9d:1b:6a:24:c7:17:3b:16: 08:ae:26:a8:89:d7:5b:85:1c:3a:ee:2f:cb:6a:c7:06:d2:eb: 1a:76:f6:40:67:06:17:93:50:ff:57:80:40:11:e5:2d:da:97: e0:81:eb:01:b4:5f:41:d4:37:b4:62:ef:8e:8a:f3:c7:19:48: 9b:95:e2:53:4c:4e:cf:5b:18:5d:8a:f6:8c:6f:1c:43:38:dc: aa:e7:ef:98:14:2a:c6:f7:bb:01:5f:cb:ea:8b:82:fe:1f:98: 1d:56:fb:20:71:c8:d2:18:ed:76:30:79:a2:31:0b:40:c1:b5: 5b:ac:69:a1:8a:57:63:98:37:67:2c:fc:12:5f:a9:94:ea:df: 04:07:16:d9:39:a2:51:bb:c2:e6:47:69:29:c1:e5:7c:6e:eb: 62:04:73:29:6c:35:f5:cd:84:9e:ec:23:21:fe:51:67:0e:e9: 0a:9e:02:94:f9:c4:6b:df:a2:b8:ad:a1:c7:a1:c4:11:53:fa: 74:60:3e:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn8/wiA01ugXlHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2UyMWU1NTYtOGQ5Zi00NTA4LWI1YWMtODVjZjNkOWFmZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhDBPW6WMjhkW8Qe6ZE66rgnhGp3wYGYuu4m kOYr5yOjINOtsadX3TF5VJG7bARJoge1l9lQy/kJDrn9VDi3jlNV1W0u9Y++ofo2 VudrdvfqCfWy/CzBPz53N8AGtZcPVzMQIOO1dR8hT2gmF1YNtyriCv+ldypW1HbD 0Jngx0HLZfaBuFov6DG7N2Ex4rdGvKpdFG8YH9gxbxlcaucst7JIV2FJNPxOEcCe RkVqXIfqfBi5DV1agHzWnfa/MzkmlKhnk5Vi1RpON65bsHGb7egLdMbm7GbD5Lcd wo1K/lfl+thvOWwUQxe+6zxna5TWskOaptwN6SGCtxTs9dBFowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzOy5yUsWrswezqrNqoDEkFX+U4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjM2ODVlMGQtNmE4NS0z NmQ0LWFhOWYtMTJiYjMwYWViYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjpBduvVEXv8Hc5yUN0POmATDyrzXI4Fcpj1B362C8ZUD6oF93+4O6S y9IxctgrpGtjVGmYzygFMzfkSwqV4sCdG2okxxc7FgiuJqiJ11uFHDruL8tqxwbS 6xp29kBnBheTUP9XgEAR5S3al+CB6wG0X0HUN7Ri746K88cZSJuV4lNMTs9bGF2K 9oxvHEM43Krn75gUKsb3uwFfy+qLgv4fmB1W+yBxyNIY7XYweaIxC0DBtVusaaGK V2OYN2cs/BJfqZTq3wQHFtk5olG7wuZHaSnB5Xxu62IEcylsNfXNhJ7sIyH+UWcO 6QqeApT5xGvforitocehxBFT+nRgPsQ= -----END CERTIFICATE-----Generated at Thu Sep 10 14:52:34 2026 by rpki-client