$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2e4c00f-1092-3c2e-a8f5-abe3e94438e2.roa File: d2e4c00f-1092-3c2e-a8f5-abe3e94438e2.roa (raw, json) Hash identifier: mE1xMMRGO41xvSZ65VzD/qMtJG72AJC9roVIaffxAYo= Subject key identifier: 79:11:DC:05:4B:27:A7:21:48:51:E4:0F:38:3E:B9:9C:82:AE:55:7A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983DED7F4B2DB3AED573580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2e4c00f-1092-3c2e-a8f5-abe3e94438e2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:de:d7:f4:b2:db:3a:ed:57:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e3b18f93-a7c1-446e-b681-a165c1ab7cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bb:a7:63:67:d6:f7:f5:56:f3:b3:e9:e9:c1: a6:21:a5:37:4c:6f:13:76:09:83:45:aa:0c:be:04: 60:e5:e9:54:5d:0c:a4:83:07:b4:d9:c4:0f:59:62: 50:bf:cf:12:26:42:c9:63:e1:0e:2b:36:09:f1:a5: 79:d8:30:92:82:03:e5:49:a3:02:2c:1b:d9:08:64: 30:01:9e:7f:ca:58:a4:92:ea:26:b8:5c:38:a1:86: 18:fd:9a:ef:a0:00:b4:da:08:48:f9:43:ba:7f:63: 70:4f:34:f3:60:ab:c1:17:8a:60:e6:b8:36:d8:18: c8:4c:42:d0:f3:c3:f7:a0:14:2b:e0:24:92:ff:61: 45:d9:87:59:00:91:74:c5:9d:81:5c:cb:a0:27:44: 63:4f:9c:27:bb:e5:c6:67:12:ae:9f:3e:3a:ef:fe: e8:bb:be:8c:6a:83:92:37:a6:c4:b5:b5:27:c5:cf: 8a:af:fa:7c:e5:a9:6c:03:cb:65:0c:d8:97:6a:34: 15:73:f3:58:5c:3d:bf:fa:68:91:32:ec:12:72:f9: 72:da:61:13:da:34:4e:5d:2f:59:27:98:1a:a2:8b: 92:b6:9b:10:d3:4c:43:8a:15:ba:c6:87:d4:cd:86: 53:8c:bf:f8:40:ca:de:45:1f:fe:94:07:c2:95:fa: 75:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:11:DC:05:4B:27:A7:21:48:51:E4:0F:38:3E:B9:9C:82:AE:55:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2e4c00f-1092-3c2e-a8f5-abe3e94438e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:c2:2a:6c:e9:4d:30:b3:25:82:8c:42:87:70:b4:e2:d1:cc: 80:97:b7:4f:aa:b8:f0:ed:a8:40:fa:4a:76:4b:75:10:0e:cb: da:4d:e9:dd:43:f6:ef:3a:4a:a3:41:40:83:05:ee:b4:53:57: 76:40:08:d6:23:88:d4:75:6b:59:53:ae:97:dc:6d:71:44:e5: 31:78:dd:3b:bb:5d:47:6a:0a:73:84:36:0b:6f:30:2e:a0:3f: 95:e5:60:1e:dc:13:a0:5b:e8:7e:7e:20:09:b4:2b:86:28:d4: 19:b3:93:59:f5:ac:ff:7c:6c:27:21:fa:69:32:5c:0f:94:18: 57:4c:27:c5:5f:97:74:fc:34:0b:8d:1d:28:ca:30:ce:16:64: 1c:61:f1:22:33:23:b6:89:ac:29:eb:90:d1:8a:40:92:10:46: 16:1f:1d:7d:08:02:a5:d3:3d:7e:ff:b6:74:6b:f0:41:5a:8d: 89:38:2d:b7:07:1f:dd:2d:7b:88:0f:39:5a:9f:aa:01:26:f4: ba:d1:b5:2c:53:c2:3b:9b:58:3c:ee:e9:4f:c0:c2:93:04:d6: 54:9e:1c:5b:8e:c5:85:82:9d:c9:47:ef:24:84:dc:52:a3:6d: 86:0d:fd:a4:1a:e0:56:6c:f8:55:54:7b:33:3a:1a:fb:eb:b7: e7:3a:b6:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg97X9LLbOu1XNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTNiMThmOTMtYTdjMS00NDZlLWI2ODEtYTE2NWMxYWI3Y2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7unY2fW9/VW87Pp6cGmIaU3TG8TdgmDRaoM vgRg5elUXQykgwe02cQPWWJQv88SJkLJY+EOKzYJ8aV52DCSggPlSaMCLBvZCGQw AZ5/ylikkuomuFw4oYYY/ZrvoAC02ghI+UO6f2NwTzTzYKvBF4pg5rg22BjITELQ 88P3oBQr4CSS/2FF2YdZAJF0xZ2BXMugJ0RjT5wnu+XGZxKunz467/7ou76MaoOS N6bEtbUnxc+Kr/p85alsA8tlDNiXajQVc/NYXD2/+miRMuwScvly2mET2jROXS9Z J5gaoouStpsQ00xDihW6xofUzYZTjL/4QMreRR/+lAfClfp1zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkR3AVLJ6chSFHkDzg+uZyCrlV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDJlNGMwMGYtMTA5Mi0z YzJlLWE4ZjUtYWJlM2U5NDQzOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHCKmzpTTCzJYKMQodwtOLRzICXt0+quPDtqED6SnZLdRAOy9pN6d1D 9u86SqNBQIMF7rRTV3ZACNYjiNR1a1lTrpfcbXFE5TF43Tu7XUdqCnOENgtvMC6g P5XlYB7cE6Bb6H5+IAm0K4Yo1Bmzk1n1rP98bCch+mkyXA+UGFdMJ8Vfl3T8NAuN HSjKMM4WZBxh8SIzI7aJrCnrkNGKQJIQRhYfHX0IAqXTPX7/tnRr8EFajYk4LbcH H90te4gPOVqfqgEm9LrRtSxTwjubWDzu6U/AwpME1lSeHFuOxYWCnclH7ySE3FKj bYYN/aQa4FZs+FVUezM6Gvvrt+c6ttg= -----END CERTIFICATE-----Generated at Tue Oct 27 22:40:38 2026 by rpki-client