$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1063c57-8699-3d54-b59f-d2eccece4f93.roa File: c1063c57-8699-3d54-b59f-d2eccece4f93.roa (raw, json) Hash identifier: BeFmO+M62ErdMAcx+un/rnzdJs+HdqCwQtNgjSdfbgc= Subject key identifier: 80:63:5F:4D:20:79:77:F6:82:AC:0A:B9:7F:F5:9D:08:C7:FB:83:83 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79FBEAA9B0E3124647E59A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1063c57-8699-3d54-b59f-d2eccece4f93.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.242.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:be:aa:9b:0e:31:24:64:7e:59:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=24bf0c18-4db8-4264-a6be-29c27c6dd345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fd:48:0d:34:73:00:7f:58:c2:96:e9:f2:84: 72:15:0c:97:38:75:a1:72:c6:55:0b:c9:a7:aa:56: 5e:72:47:a8:bc:8d:6d:66:3b:89:4b:27:0e:91:ec: f6:c8:99:71:a0:01:20:a9:e3:24:4b:af:11:6d:3c: d7:9c:6b:6d:34:fb:88:cc:c2:01:b5:1a:61:8c:43: ea:71:32:b2:72:f6:ff:c1:96:3d:98:fd:66:4d:51: 7b:d5:3d:a3:0a:a9:c4:1b:71:f1:29:5e:33:d5:1c: 82:ab:f4:bb:5c:8d:87:54:2b:b8:81:9b:9c:6a:e4: 2a:0b:32:bf:f1:5f:62:73:ec:fc:a8:76:7f:ab:58: c7:e0:c0:37:3a:d5:89:f5:a7:c6:f8:0b:86:01:ea: 39:68:00:f3:f5:bc:af:d1:41:21:14:95:4d:a6:09: 12:de:fa:21:5b:43:6d:32:4f:bd:de:a2:3d:78:a6: 61:02:c5:cd:52:9e:93:d6:e5:75:4d:1e:be:a7:d5: 73:e7:90:7f:e6:ad:7a:b5:97:8a:1f:28:73:31:b3: c0:f6:d3:38:13:8f:50:1f:dc:aa:98:4c:95:91:c2: 02:ca:6d:35:84:1c:4c:68:e8:44:7e:dc:5a:06:05: 2e:55:07:44:c0:fd:a9:88:06:54:12:0d:1d:f4:23: a2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:63:5F:4D:20:79:77:F6:82:AC:0A:B9:7F:F5:9D:08:C7:FB:83:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1063c57-8699-3d54-b59f-d2eccece4f93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d1:b2:e4:b3:a9:f1:b0:26:7c:24:76:f1:a3:04:d3:da:a1: 4b:d3:cc:d6:41:10:0a:43:1d:75:5f:91:0f:ff:4e:83:44:e8: 38:fc:5a:04:38:fb:62:a6:f7:01:7d:67:3e:97:50:8f:14:ee: 82:f1:9c:1a:cb:8d:2d:61:c5:26:8f:7a:fb:59:68:1f:b2:31: 87:78:09:ef:38:24:14:87:ed:9a:1c:07:c8:ee:c5:8e:48:f2: 22:2d:10:19:0b:ef:f1:3f:4c:7b:e0:3a:55:12:ef:bc:ff:0c: 6c:39:fe:47:b5:85:12:03:9f:0a:10:fe:63:e4:ff:78:7f:a4: 81:3e:c6:c7:ed:73:01:97:15:a1:ae:97:e4:31:47:29:b9:93: 77:a5:bc:11:43:5b:e4:e9:08:d0:02:08:bf:d4:15:91:a2:7d: c9:5e:34:1d:de:2b:73:c2:43:73:0d:db:2b:e0:53:ac:df:7e: f5:09:c5:29:90:7c:f9:b0:f3:86:da:fc:db:aa:c6:25:ec:d1: 11:4d:61:c9:73:59:97:ce:83:c0:48:02:82:39:06:f1:00:71: ee:b5:b4:c3:aa:32:db:62:36:11:95:65:a4:e9:7e:c0:71:01: d1:3e:6f:fc:e9:de:fe:a6:61:e4:f9:32:c6:b7:aa:98:9b:cc: 20:6d:e3:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn76qmw4xJGR+WaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjRiZjBjMTgtNGRiOC00MjY0LWE2YmUtMjljMjdjNmRkMzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf1IDTRzAH9Ywpbp8oRyFQyXOHWhcsZVC8mn qlZeckeovI1tZjuJSycOkez2yJlxoAEgqeMkS68RbTzXnGttNPuIzMIBtRphjEPq cTKycvb/wZY9mP1mTVF71T2jCqnEG3HxKV4z1RyCq/S7XI2HVCu4gZucauQqCzK/ 8V9ic+z8qHZ/q1jH4MA3OtWJ9afG+AuGAeo5aADz9byv0UEhFJVNpgkS3vohW0Nt Mk+93qI9eKZhAsXNUp6T1uV1TR6+p9Vz55B/5q16tZeKHyhzMbPA9tM4E49QH9yq mEyVkcICym01hBxMaOhEftxaBgUuVQdEwP2piAZUEg0d9COi2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBjX00geXf2gqwKuX/1nQjH+4ODMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzEwNjNjNTctODY5OS0z ZDU0LWI1OWYtZDJlY2NlY2U0ZjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzRsuSzqfGwJnwkdvGjBNPaoUvTzNZBEApDHXVfkQ//ToNE6Dj8WgQ4 +2Km9wF9Zz6XUI8U7oLxnBrLjS1hxSaPevtZaB+yMYd4Ce84JBSH7ZocB8juxY5I 8iItEBkL7/E/THvgOlUS77z/DGw5/ke1hRIDnwoQ/mPk/3h/pIE+xsftcwGXFaGu l+QxRym5k3elvBFDW+TpCNACCL/UFZGifcleNB3eK3PCQ3MN2yvgU6zffvUJxSmQ fPmw84ba/NuqxiXs0RFNYclzWZfOg8BIAoI5BvEAce61tMOqMttiNhGVZaTpfsBx AdE+b/zp3v6mYeT5Msa3qpibzCBt40w= -----END CERTIFICATE-----Generated at Thu Sep 10 11:01:03 2026 by rpki-client