$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3cf0838-03ae-33be-86d3-57ff017a9f8c.roa File: b3cf0838-03ae-33be-86d3-57ff017a9f8c.roa (raw, json) Hash identifier: m+stDfRpxb6mAcPp5kuoCMiWTOCR2zrqKf80c3jyvRg= Subject key identifier: D6:3F:29:ED:94:95:F3:FB:9C:C3:9A:37:12:39:53:C0:02:68:E6:8F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E22EB5FBDA2001DD14BA4 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3cf0838-03ae-33be-86d3-57ff017a9f8c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.243.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:22:eb:5f:bd:a2:00:1d:d1:4b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0be6fb41-1c01-4338-83a3-709e69eef804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dc:67:58:5e:bf:b9:51:5f:07:81:84:29:a9: b3:d5:9e:cf:64:54:a1:da:8b:d4:f6:5d:cb:3b:e3: 6d:44:41:30:69:e3:95:ea:38:c0:f6:c1:ac:b0:c6: 91:55:bc:f9:a7:9e:7a:cf:4a:9f:e4:8d:3a:4a:a4: d4:44:55:5e:ed:ae:d7:5b:30:ee:63:4d:43:99:58: 97:18:8f:47:ac:a2:1e:0d:17:62:b8:14:8b:2d:1f: de:fb:dc:5d:d6:bb:f1:fc:fb:e1:f0:ac:ac:1f:e1: 13:96:7d:fe:6c:95:0a:e1:51:d8:bd:ac:52:1c:fb: 33:ad:a9:80:18:0a:9d:4e:ca:19:ea:fb:b6:97:3a: c4:0a:d1:8d:bb:04:70:17:57:e1:1e:8c:40:7f:23: 9f:b8:8e:30:bb:02:5e:97:da:dd:82:45:5a:d0:87: 4a:db:fa:4f:4f:b8:9c:fa:a8:d8:e8:19:3c:f0:b2: 58:a3:a9:cd:cc:c1:15:91:2b:eb:1f:59:e5:d2:46: 63:8e:b3:9d:a9:b1:20:d6:44:11:a7:2f:7b:80:03: dd:0e:e4:3b:5e:93:98:00:54:3a:b0:ce:a7:9d:e5: 6f:c4:16:21:72:20:b4:e3:00:e0:e1:a4:38:1f:91: 27:53:04:0e:00:91:02:85:c4:0c:4f:16:54:7f:40: ed:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3F:29:ED:94:95:F3:FB:9C:C3:9A:37:12:39:53:C0:02:68:E6:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3cf0838-03ae-33be-86d3-57ff017a9f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ae:6e:a4:de:fa:f3:4d:74:c1:13:87:00:e3:1a:1e:32:71: b7:8a:fb:43:ad:6c:bb:e9:ca:a2:a0:a2:df:16:32:03:44:0f: 09:fc:ea:85:d4:77:0c:de:6e:04:9b:1b:44:8d:e0:b4:a7:da: 65:98:84:b1:d8:34:ea:84:66:33:55:11:93:a2:d2:68:d5:74: 64:f8:7c:54:01:ba:1b:dd:59:a4:50:20:17:c8:4d:60:af:95: 89:a4:cf:f2:81:73:cc:c2:99:78:24:65:53:4b:37:95:bc:0f: 8a:ae:e2:83:d1:a7:87:4b:42:31:28:bc:fe:f0:ca:3d:17:11: 4b:ff:cf:19:41:07:6d:2b:0d:30:5b:dc:d1:01:30:52:f5:cc: c0:74:e9:f7:e4:ff:99:39:9c:47:e4:7f:81:10:a6:4b:b4:10: bb:5e:5d:d5:bb:57:26:66:54:5f:b2:6a:7e:bc:f8:9f:36:e5: 1d:78:44:5f:c9:19:1b:b2:b6:e4:10:0c:d6:0a:2c:bc:ea:ab: a9:35:5b:07:36:7a:90:fa:53:a2:1b:b9:45:cf:6b:1c:75:ef: 1c:bf:df:9a:3d:ad:2b:d8:31:fe:6d:5f:dd:3e:14:02:61:3b: b0:85:6d:a6:46:3f:5d:1c:66:92:73:2d:fa:68:d7:a2:20:ac: 2e:b0:2e:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nniLrX72iAB3RS6QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGJlNmZiNDEtMWMwMS00MzM4LTgzYTMtNzA5ZTY5ZWVmODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNxnWF6/uVFfB4GEKamz1Z7PZFSh2ovU9l3L O+NtREEwaeOV6jjA9sGssMaRVbz5p556z0qf5I06SqTURFVe7a7XWzDuY01DmViX GI9HrKIeDRdiuBSLLR/e+9xd1rvx/Pvh8KysH+ETln3+bJUK4VHYvaxSHPszramA GAqdTsoZ6vu2lzrECtGNuwRwF1fhHoxAfyOfuI4wuwJel9rdgkVa0IdK2/pPT7ic +qjY6Bk88LJYo6nNzMEVkSvrH1nl0kZjjrOdqbEg1kQRpy97gAPdDuQ7XpOYAFQ6 sM6nneVvxBYhciC04wDg4aQ4H5EnUwQOAJEChcQMTxZUf0Dt6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNY/Ke2UlfP7nMOaNxI5U8ACaOaPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjNjZjA4MzgtMDNhZS0z M2JlLTg2ZDMtNTdmZjAxN2E5ZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmubqTe+vNNdMEThwDjGh4ycbeK+0OtbLvpyqKgot8WMgNEDwn86oXU dwzebgSbG0SN4LSn2mWYhLHYNOqEZjNVEZOi0mjVdGT4fFQBuhvdWaRQIBfITWCv lYmkz/KBc8zCmXgkZVNLN5W8D4qu4oPRp4dLQjEovP7wyj0XEUv/zxlBB20rDTBb 3NEBMFL1zMB06ffk/5k5nEfkf4EQpku0ELteXdW7VyZmVF+yan68+J825R14RF/J GRuytuQQDNYKLLzqq6k1Wwc2epD6U6IbuUXPaxx17xy/35o9rSvYMf5tX90+FAJh O7CFbaZGP10cZpJzLfpo16IgrC6wLlo= -----END CERTIFICATE-----Generated at Thu Sep 10 11:05:41 2026 by rpki-client