$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c647f0d7-37f4-3e7f-9e5a-be2574de3f16.roa File: c647f0d7-37f4-3e7f-9e5a-be2574de3f16.roa (raw, json) Hash identifier: lKSkaq4sb2YrUE41a1lqYwPyDVl3U43bFGNID7rw63U= Subject key identifier: B8:5A:41:DC:A9:1B:1F:03:40:19:16:48:C4:8D:7B:FD:06:88:6A:C8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79FBB0FF996608614E10B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c647f0d7-37f4-3e7f-9e5a-be2574de3f16.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.242.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:bb:0f:f9:96:60:86:14:e1:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bcd97425-64ae-4a88-8dc0-25294a5de867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d3:41:f1:9e:cb:ba:fc:c0:91:da:35:f1:1e: e8:94:ee:d7:bf:7c:96:58:52:43:cc:6a:f3:5f:a7: bc:35:8f:45:11:e0:1d:39:a0:c1:4e:21:ee:0b:e9: 74:27:9f:60:6b:f9:99:9e:eb:83:b0:56:b9:fb:07: f9:50:85:77:ef:ba:34:3f:ab:f6:d0:3c:27:1f:58: eb:b1:ee:2e:75:41:d7:1d:cf:87:78:29:4f:fa:2d: 19:1f:7b:03:ce:18:59:43:a1:c5:76:60:43:17:9d: 24:28:48:6d:2e:17:31:ba:62:96:f1:4a:75:2e:af: ae:2e:28:30:13:d6:a7:2c:c3:1a:19:0b:b9:02:82: ee:5b:9e:af:8b:1a:cd:76:7b:fd:08:fb:c7:43:71: 73:6a:28:3a:11:bf:09:63:4c:ee:f3:f8:17:6b:37: c5:2c:2c:5c:df:6b:ee:e7:2d:78:e3:31:05:a0:14: 29:17:53:b9:4e:28:90:eb:99:30:71:d9:0f:8a:04: ba:c3:61:64:25:48:66:11:b0:6f:5a:fa:ca:a0:cc: f7:1a:78:68:90:c1:80:c6:11:2c:17:b4:41:da:7f: 71:0a:04:f6:b7:6d:7b:e6:de:ff:5e:6f:a8:5f:b4: fd:46:f8:ea:e2:92:a3:76:9e:01:bf:f4:c3:40:f8: d8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5A:41:DC:A9:1B:1F:03:40:19:16:48:C4:8D:7B:FD:06:88:6A:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c647f0d7-37f4-3e7f-9e5a-be2574de3f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:00:e1:f9:27:30:b8:98:01:0c:c0:7a:a7:c9:3a:ad:55:d7: 18:8d:6e:7c:c2:83:6f:7d:d3:1d:7a:f6:61:f1:aa:4c:89:8b: 81:8d:d1:f5:61:48:5d:62:5a:5b:91:4b:f2:aa:b7:08:ce:ac: 46:b0:88:a5:2a:b9:59:90:b2:f4:4e:5e:7a:e3:7b:84:27:6e: ea:1e:c7:08:47:c4:f6:e3:c9:24:cd:27:f6:65:27:a6:54:35: 60:6c:78:ad:71:43:ed:d4:72:4e:37:ff:c0:0d:d8:99:87:b6: b0:4b:2a:39:2f:5d:a0:ee:bd:a0:24:26:11:2d:1b:e0:52:18: c3:e4:5f:3c:7e:94:19:64:97:31:56:8a:f7:a1:fb:22:4f:4c: 13:72:45:b1:b3:38:7a:28:ff:b5:7b:96:ca:33:d8:03:6a:ae: ab:59:a2:24:04:a9:00:90:0c:1c:3a:8f:af:46:0b:f5:5a:47: c5:e5:fb:4e:f5:34:e8:4d:7f:09:c2:a0:fc:29:77:34:5e:e3: db:f0:5b:4c:18:d6:1b:5e:ab:66:ca:5b:72:77:f1:e1:54:e9: bc:02:1f:f1:68:11:b1:2c:a7:e8:d3:63:f6:69:71:a2:c9:34: 8f:bf:7b:de:1d:81:64:62:03:7a:43:10:fb:7d:d8:fe:0e:8e: 24:00:a3:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn7sP+ZZghhThCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmNkOTc0MjUtNjRhZS00YTg4LThkYzAtMjUyOTRhNWRlODY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNNB8Z7LuvzAkdo18R7olO7Xv3yWWFJDzGrz X6e8NY9FEeAdOaDBTiHuC+l0J59ga/mZnuuDsFa5+wf5UIV377o0P6v20DwnH1jr se4udUHXHc+HeClP+i0ZH3sDzhhZQ6HFdmBDF50kKEhtLhcxumKW8Up1Lq+uLigw E9anLMMaGQu5AoLuW56vixrNdnv9CPvHQ3Fzaig6Eb8JY0zu8/gXazfFLCxc32vu 5y144zEFoBQpF1O5TiiQ65kwcdkPigS6w2FkJUhmEbBvWvrKoMz3GnhokMGAxhEs F7RB2n9xCgT2t2175t7/Xm+oX7T9Rvjq4pKjdp4Bv/TDQPjYDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhaQdypGx8DQBkWSMSNe/0GiGrIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzY0N2YwZDctMzdmNC0z ZTdmLTllNWEtYmUyNTc0ZGUzZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsA4fknMLiYAQzAeqfJOq1V1xiNbnzCg2990x169mHxqkyJi4GN0fVh SF1iWluRS/KqtwjOrEawiKUquVmQsvROXnrje4QnbuoexwhHxPbjySTNJ/ZlJ6ZU NWBseK1xQ+3Uck43/8AN2JmHtrBLKjkvXaDuvaAkJhEtG+BSGMPkXzx+lBlklzFW iveh+yJPTBNyRbGzOHoo/7V7lsoz2ANqrqtZoiQEqQCQDBw6j69GC/VaR8Xl+071 NOhNfwnCoPwpdzRe49vwW0wY1hteq2bKW3J38eFU6bwCH/FoEbEsp+jTY/ZpcaLJ NI+/e94dgWRiA3pDEPt92P4OjiQAo7g= -----END CERTIFICATE-----Generated at Thu Sep 10 15:37:45 2026 by rpki-client