$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf17030f-7b9b-3f34-ada8-e304d0eef0d8.roa File: cf17030f-7b9b-3f34-ada8-e304d0eef0d8.roa (raw, json) Hash identifier: CWLCaYz+/yND9w/1xeoYN6e1TD4dBn+ekbM5vDpQV3g= Subject key identifier: 52:C1:3D:DC:71:0E:7A:DE:3B:71:18:CA:79:91:AE:C8:12:E9:BD:DA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E7FDEF307491C95D00680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf17030f-7b9b-3f34-ada8-e304d0eef0d8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 198.45.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:7f:de:f3:07:49:1c:95:d0:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=484a9ae3-3752-44d7-82ba-84fb9c0678f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3d:16:26:dc:00:b0:f0:39:c5:e6:68:92:79: 0e:14:45:d6:aa:42:23:f8:dd:31:77:e1:cc:10:61: cb:cd:29:52:ef:04:c0:c5:42:d1:b2:e1:97:c5:eb: 6e:83:77:23:5a:1b:9e:bb:7b:f0:f2:fb:e1:f5:87: 3a:7f:34:74:15:b7:1d:82:78:0d:a5:95:90:14:2a: e7:50:ac:a1:bb:5e:09:af:36:8b:c6:f4:6e:4b:28: 60:21:5f:e8:85:10:d6:43:cb:2f:9c:0c:5c:91:11: c9:d8:2b:5a:df:b9:2c:52:a6:dc:08:b8:d7:d7:c4: c1:91:36:95:4e:b6:ec:41:5b:59:fc:b3:40:3e:61: ec:c8:6f:05:4e:89:77:f2:05:b2:db:e4:c9:4c:05: e5:8c:39:78:fd:b0:d1:db:ff:f2:7b:cb:c1:ab:2a: 8f:08:a3:5a:74:74:2c:e8:33:05:c0:29:c9:6e:78: 4e:32:d5:e5:13:a9:0e:4f:2d:8f:17:38:bc:95:63: 31:3b:ec:5c:91:bf:d6:9c:e4:8c:70:08:22:bc:55: 2e:cc:6a:ce:5d:fd:15:62:2b:6b:6b:a5:d3:74:e9: 82:a8:a9:70:92:3c:52:4d:bd:09:c4:3f:eb:79:57: e8:b4:f6:b5:31:1a:c5:51:bc:b1:04:f5:f1:f9:fd: b2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C1:3D:DC:71:0E:7A:DE:3B:71:18:CA:79:91:AE:C8:12:E9:BD:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf17030f-7b9b-3f34-ada8-e304d0eef0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:59:80:5f:17:bf:f9:ce:1f:80:e8:f6:45:13:dc:e4:9c:eb: 84:4b:f1:af:4a:7c:be:37:2c:a0:8e:09:ba:4f:f1:e2:a1:8e: 00:47:bc:c8:59:2e:20:ed:1b:79:ce:fd:f8:f8:16:38:39:91: fc:8e:59:ac:cd:16:ca:e2:0e:9f:e7:73:2a:91:94:5a:71:b2: a1:39:5e:d7:e9:7d:5b:74:51:b8:3e:68:47:d6:30:af:fe:5d: a6:36:31:26:e6:de:3e:db:44:2c:37:ae:57:28:86:59:40:d0: 8f:8b:cb:c4:8a:8b:2e:bf:05:c3:ae:c9:f1:2f:5e:f4:9a:08: 51:01:81:83:e2:df:27:8d:21:72:c8:6a:40:f0:37:68:27:eb: b9:cd:c7:26:a9:8c:30:f3:fd:3f:ec:60:58:73:0a:a2:28:cd: 3b:33:7d:77:1b:02:32:76:2b:b7:12:d6:1e:47:fe:df:57:cb: 9e:d5:6a:f8:63:e1:6f:fc:5f:07:36:a1:36:b7:cc:66:c1:b9: bd:79:55:94:f5:e5:0c:c0:92:80:4e:8d:f9:41:bd:b8:ba:b4: 69:79:ff:8f:8e:d5:f4:6d:62:62:1c:ac:05:4d:d7:55:48:29: 25:00:0e:84:08:8f:31:c0:6b:14:96:61:20:40:4d:51:d2:46: 73:5d:ac:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnn/e8wdJHJXQBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDg0YTlhZTMtMzc1Mi00NGQ3LTgyYmEtODRmYjljMDY3OGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz0WJtwAsPA5xeZoknkOFEXWqkIj+N0xd+HM EGHLzSlS7wTAxULRsuGXxetug3cjWhueu3vw8vvh9Yc6fzR0FbcdgngNpZWQFCrn UKyhu14JrzaLxvRuSyhgIV/ohRDWQ8svnAxckRHJ2Cta37ksUqbcCLjX18TBkTaV TrbsQVtZ/LNAPmHsyG8FTol38gWy2+TJTAXljDl4/bDR2//ye8vBqyqPCKNadHQs 6DMFwCnJbnhOMtXlE6kOTy2PFzi8lWMxO+xckb/WnOSMcAgivFUuzGrOXf0VYitr a6XTdOmCqKlwkjxSTb0JxD/reVfotPa1MRrFUbyxBPXx+f2yWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLBPdxxDnreO3EYynmRrsgS6b3aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2YxNzAzMGYtN2I5Yi0z ZjM0LWFkYTgtZTMwNGQwZWVmMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVZgF8Xv/nOH4Do9kUT3OSc64RL8a9KfL43LKCOCbpP8eKhjgBHvMhZ LiDtG3nO/fj4Fjg5kfyOWazNFsriDp/ncyqRlFpxsqE5XtfpfVt0Ubg+aEfWMK/+ XaY2MSbm3j7bRCw3rlcohllA0I+Ly8SKiy6/BcOuyfEvXvSaCFEBgYPi3yeNIXLI akDwN2gn67nNxyapjDDz/T/sYFhzCqIozTszfXcbAjJ2K7cS1h5H/t9Xy57Vavhj 4W/8Xwc2oTa3zGbBub15VZT15QzAkoBOjflBvbi6tGl5/4+O1fRtYmIcrAVN11VI KSUADoQIjzHAaxSWYSBATVHSRnNdrMM= -----END CERTIFICATE-----Generated at Thu Sep 10 10:17:45 2026 by rpki-client