$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4576aaa-f2b3-324a-a0ed-eb0b969105fe.roa File: e4576aaa-f2b3-324a-a0ed-eb0b969105fe.roa (raw, json) Hash identifier: YuRIyv/q6M5Y/CdPZ1HllEwMFXG/2OmxqG8QHTR4jkY= Subject key identifier: D8:7A:37:AC:4A:85:6C:54:19:D0:90:37:36:2D:C7:49:B2:A7:36:9A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79FD5F0D66F0369ADC0D940 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4576aaa-f2b3-324a-a0ed-eb0b969105fe.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.243.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:d5:f0:d6:6f:03:69:ad:c0:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7a1b6038-6b00-48f6-b059-746554aee8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5e:15:19:65:33:8c:76:e8:44:76:77:31:c8: 84:a7:22:2e:46:2b:c4:12:b6:21:bf:e7:44:00:5c: 5f:d4:d8:ef:42:f3:44:3c:4b:e9:81:69:af:9a:eb: 7d:41:6b:06:7e:63:7c:12:89:64:75:2f:3e:3e:da: 14:c8:9c:31:f3:f8:09:81:47:9b:d6:17:93:e1:23: 8c:d6:4a:f8:01:ff:91:7f:6b:ef:16:ed:c8:4d:d7: 6d:2c:07:0b:4d:37:60:2d:87:84:c5:38:76:3c:7d: f0:3e:d0:1a:57:ff:9a:a2:78:b4:ed:9a:45:fb:3f: 00:e6:00:0d:53:b0:61:a7:53:50:59:cc:d8:b3:9f: f9:a0:bd:00:4c:b2:75:d5:7d:46:9e:b0:62:82:b9: 07:3f:c1:98:ef:c8:8c:7e:a7:d9:ab:28:ee:c0:5d: 3b:af:41:de:83:4e:81:b5:1d:ad:92:89:1b:ea:9a: c0:be:96:c5:4d:99:8c:74:ab:f8:85:66:e6:0c:1f: 9d:15:e2:1d:95:ff:3e:77:66:25:3c:5f:c2:9b:13: 8e:c5:79:c6:04:77:55:19:cf:da:54:e4:2c:8a:aa: 61:0c:05:cc:9f:9a:00:f9:fe:87:9e:2e:93:72:38: 4e:2d:eb:e3:e7:62:5a:4d:d5:5d:d2:79:be:57:54: 4c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7A:37:AC:4A:85:6C:54:19:D0:90:37:36:2D:C7:49:B2:A7:36:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4576aaa-f2b3-324a-a0ed-eb0b969105fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:3c:1b:a5:69:bb:5b:9f:32:23:9d:3b:a1:4c:38:44:35:38: b3:db:bc:ab:7e:87:f7:57:51:c6:fd:0c:19:be:89:15:4e:3b: 8a:7a:41:ea:46:05:93:30:6e:e2:ea:1a:17:60:f0:1f:ca:c3: c0:60:21:23:86:16:45:65:f3:40:f1:a4:ea:da:30:2d:70:20: b0:82:29:67:03:83:f7:25:21:b1:da:7a:0a:f8:06:55:ca:b6: 53:53:ed:59:e4:50:ab:53:b2:df:b7:75:ba:b9:47:85:85:c1: 29:ff:01:3d:63:b9:c0:e3:2e:33:0b:a8:fd:63:61:6b:4e:ab: c3:57:f3:01:5e:6c:42:19:7c:dc:26:1b:36:81:fc:8c:16:e0: 8a:8b:45:f1:19:59:4f:b0:4e:99:2b:6e:84:77:4d:dc:50:02: 8f:a6:63:0c:99:42:1c:31:59:ad:d6:47:20:e2:3b:0f:80:d0: 51:dd:61:3c:28:89:d2:96:29:93:aa:5d:4d:32:e4:5c:b4:a9: 3d:1a:ee:4d:0b:ae:bb:b8:db:cf:46:f8:16:c3:88:fb:80:14: 2f:97:42:dc:11:75:2e:b0:e6:2f:17:ad:76:7f:85:d8:9d:96: 7e:07:06:2c:88:5d:cd:57:2a:20:a7:9a:95:98:71:05:80:e2: 77:ee:00:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn9Xw1m8Daa3A2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2ExYjYwMzgtNmIwMC00OGY2LWIwNTktNzQ2NTU0YWVlOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg14VGWUzjHboRHZ3MciEpyIuRivEErYhv+dE AFxf1NjvQvNEPEvpgWmvmut9QWsGfmN8EolkdS8+PtoUyJwx8/gJgUeb1heT4SOM 1kr4Af+Rf2vvFu3ITddtLAcLTTdgLYeExTh2PH3wPtAaV/+aoni07ZpF+z8A5gAN U7Bhp1NQWczYs5/5oL0ATLJ11X1GnrBigrkHP8GY78iMfqfZqyjuwF07r0Heg06B tR2tkokb6prAvpbFTZmMdKv4hWbmDB+dFeIdlf8+d2YlPF/CmxOOxXnGBHdVGc/a VOQsiqphDAXMn5oA+f6Hni6TcjhOLevj52JaTdVd0nm+V1RMNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNh6N6xKhWxUGdCQNzYtx0mypzaaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTQ1NzZhYWEtZjJiMy0z MjRhLWEwZWQtZWIwYjk2OTEwNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIA8G6Vpu1ufMiOdO6FMOEQ1OLPbvKt+h/dXUcb9DBm+iRVOO4p6QepG BZMwbuLqGhdg8B/Kw8BgISOGFkVl80DxpOraMC1wILCCKWcDg/clIbHaegr4BlXK tlNT7VnkUKtTst+3dbq5R4WFwSn/AT1jucDjLjMLqP1jYWtOq8NX8wFebEIZfNwm GzaB/IwW4IqLRfEZWU+wTpkrboR3TdxQAo+mYwyZQhwxWa3WRyDiOw+A0FHdYTwo idKWKZOqXU0y5Fy0qT0a7k0Lrru4289G+BbDiPuAFC+XQtwRdS6w5i8XrXZ/hdid ln4HBiyIXc1XKiCnmpWYcQWA4nfuADI= -----END CERTIFICATE-----Generated at Thu Sep 10 17:45:06 2026 by rpki-client