$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d12c5bca-e1ca-3d00-afc0-e005b203b536.roa File: d12c5bca-e1ca-3d00-afc0-e005b203b536.roa (raw, json) Hash identifier: W2qlTofoUfIdiaDOSJejlL6DIl/XDqsS7yuSni+UCXs= Subject key identifier: DF:1E:3E:CD:E2:20:2A:23:34:86:86:BA:AC:AC:D4:A8:27:B6:04:B2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983D5437F28CAE9B11E6500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d12c5bca-e1ca-3d00-afc0-e005b203b536.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:d5:43:7f:28:ca:e9:b1:1e:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=660ec0a8-639c-4fa7-af56-1ff5df14fc6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f9:a7:7a:d8:67:c5:23:46:74:c7:47:d0:93: 49:1e:4c:84:92:07:66:d0:f5:ec:4f:25:40:b7:74: 96:90:e9:d3:e3:13:e6:1f:ae:3d:7b:99:41:eb:00: 4f:f1:5a:0a:fb:ee:e2:9a:56:60:2f:e4:00:19:48: 8d:3d:4b:39:99:c2:4a:32:9c:ce:5d:5e:b4:22:eb: 48:72:95:c3:d5:c5:de:3e:d2:d3:5e:f6:7a:97:3f: 50:32:e4:71:64:52:8a:bf:e6:77:ea:b1:f8:85:f1: e6:06:29:17:87:7c:32:fc:59:24:57:90:5a:7e:52: b4:24:d8:d5:df:aa:3b:9b:9f:88:13:66:c1:56:65: f5:62:45:44:24:d9:f7:70:9b:96:12:94:b6:ea:d2: 12:28:43:fe:c9:fe:e1:87:10:d0:15:f8:b7:27:b3: 08:a5:1a:4f:a5:c8:18:b5:91:cd:a8:89:79:01:1a: 72:ce:15:71:18:b0:c0:be:79:02:b0:cd:df:63:7a: 0d:1c:d6:40:35:2f:cb:fe:cf:d1:e2:74:1f:cb:45: 80:cb:fd:4e:b6:cc:3c:9c:c3:0d:04:5b:b8:f0:af: 53:6f:fc:0b:eb:79:cf:12:86:cb:1f:cd:58:9d:95: 6d:a3:ca:1e:02:03:3c:10:55:f4:a0:a4:3a:da:da: ba:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1E:3E:CD:E2:20:2A:23:34:86:86:BA:AC:AC:D4:A8:27:B6:04:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d12c5bca-e1ca-3d00-afc0-e005b203b536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:a1:32:6f:f2:40:6c:56:89:a6:5b:dd:71:1e:14:61:1c:1c: 9e:df:d7:91:7f:d7:21:6c:57:b1:0a:b9:a2:9f:79:d3:6f:8a: 15:25:9a:b0:85:25:ef:b1:c6:0a:23:7a:ef:e7:a8:96:76:23: f0:6d:74:72:51:80:c9:15:dc:e7:91:2e:d7:37:94:b9:b9:0c: d5:fe:87:a9:45:b5:dd:08:e9:79:1d:26:a6:f2:1a:ef:93:51: a2:c8:ff:87:7f:43:93:8e:1d:03:61:3e:22:de:d8:5f:e8:3b: 6c:cc:66:6f:4a:31:c1:5b:da:c9:64:21:91:46:5d:2f:81:b1: 67:f1:17:ec:47:17:83:fa:d3:75:b1:5a:06:d4:fd:2a:51:40: 0a:7e:1a:20:5b:8b:da:f6:63:05:b3:4a:12:4c:19:0e:32:36: a0:45:00:ec:96:0a:80:e3:55:35:79:da:ea:e5:72:8a:3b:4d: 2e:18:f5:fe:cc:ca:7d:c1:cc:91:3b:31:44:51:03:ea:ee:17: eb:a3:da:fb:63:1e:52:fe:70:45:4c:1a:f4:af:81:e8:d6:4c: 0d:7d:72:cb:b9:4d:d5:43:31:ff:99:f7:20:9f:4f:da:1e:3e: 53:50:99:23:47:84:83:bf:7a:16:07:14:02:85:58:dd:fb:c4: be:39:d4:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg9VDfyjK6bEeZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjYwZWMwYTgtNjM5Yy00ZmE3LWFmNTYtMWZmNWRmMTRmYzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfmnethnxSNGdMdH0JNJHkyEkgdm0PXsTyVA t3SWkOnT4xPmH649e5lB6wBP8VoK++7imlZgL+QAGUiNPUs5mcJKMpzOXV60IutI cpXD1cXePtLTXvZ6lz9QMuRxZFKKv+Z36rH4hfHmBikXh3wy/FkkV5BaflK0JNjV 36o7m5+IE2bBVmX1YkVEJNn3cJuWEpS26tISKEP+yf7hhxDQFfi3J7MIpRpPpcgY tZHNqIl5ARpyzhVxGLDAvnkCsM3fY3oNHNZANS/L/s/R4nQfy0WAy/1Otsw8nMMN BFu48K9Tb/wL63nPEobLH81YnZVto8oeAgM8EFX0oKQ62tq6jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8ePs3iICojNIaGuqys1KgntgSyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDEyYzViY2EtZTFjYS0z ZDAwLWFmYzAtZTAwNWIyMDNiNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJ9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWhMm/yQGxWiaZb3XEeFGEcHJ7f15F/1yFsV7EKuaKfedNvihUlmrCF Je+xxgojeu/nqJZ2I/BtdHJRgMkV3OeRLtc3lLm5DNX+h6lFtd0I6XkdJqbyGu+T UaLI/4d/Q5OOHQNhPiLe2F/oO2zMZm9KMcFb2slkIZFGXS+BsWfxF+xHF4P603Wx WgbU/SpRQAp+GiBbi9r2YwWzShJMGQ4yNqBFAOyWCoDjVTV52urlcoo7TS4Y9f7M yn3BzJE7MURRA+ruF+uj2vtjHlL+cEVMGvSvgejWTA19csu5TdVDMf+Z9yCfT9oe PlNQmSNHhIO/ehYHFAKFWN37xL451C4= -----END CERTIFICATE-----Generated at Wed Oct 28 00:42:33 2026 by rpki-client