$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e750164d-11a2-3b8b-9fda-24d1170b3c46.roa File: e750164d-11a2-3b8b-9fda-24d1170b3c46.roa (raw, json) Hash identifier: U9h4io+7dTKnwtrpLrYTmDd3Lxv5rqbI5ZZQUtXj8yg= Subject key identifier: 78:17:9B:DB:F0:45:67:F1:20:1A:DB:03:8B:14:7E:9F:71:87:AC:62 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79FD333E54E413C6D0A0FE0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e750164d-11a2-3b8b-9fda-24d1170b3c46.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.243.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:d3:33:e5:4e:41:3c:6d:0a:0f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=459dff59-ba18-4aa6-addb-881615ac125b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9d:11:9c:a0:f2:2a:ef:e4:73:cd:87:6d:ab: ea:8d:1b:f0:9e:34:b2:44:7a:ac:8f:62:5e:7e:21: cf:59:16:09:50:ad:3b:8d:ee:d3:e9:ea:87:c6:ec: d0:90:fe:c5:2c:b7:34:1d:f3:78:92:25:ee:64:21: b6:fe:54:5e:03:3d:5f:f4:a1:32:2f:69:bc:06:ba: 19:87:14:a6:e9:25:f9:63:23:a1:c1:36:2b:f2:df: be:bc:06:3c:82:23:a5:43:0d:99:5b:30:af:36:f1: f3:c2:cb:9a:d9:22:ae:10:1a:24:6a:92:13:66:a1: 9f:fd:b6:ec:eb:7a:88:8f:c0:f0:72:d4:14:02:30: 95:ec:b1:05:46:77:27:ff:12:3e:ec:3e:05:b3:9e: fb:8e:80:bb:cf:e8:02:19:e2:44:2e:ef:1e:5f:7e: 08:d6:3e:be:c9:1d:b2:2b:fa:67:b6:d1:28:a5:b1: 37:e3:b6:5d:e4:3c:f5:2c:e1:3a:bd:12:17:20:5c: 89:af:5e:ab:3c:de:38:3b:d1:09:6e:9f:89:82:92: 03:f6:7d:02:20:fd:67:f3:12:78:c8:ab:62:2a:dc: 34:50:94:c9:cb:6f:74:8f:03:23:8c:24:c2:71:29: f6:4f:83:0b:d0:ef:2a:cf:35:e7:b3:8d:e3:e7:f3: d3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:17:9B:DB:F0:45:67:F1:20:1A:DB:03:8B:14:7E:9F:71:87:AC:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e750164d-11a2-3b8b-9fda-24d1170b3c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:54:04:7b:09:0e:1d:76:4c:78:d2:39:b6:0c:c7:d3:af:65: e0:a7:ad:93:68:93:c4:5e:5f:a7:9e:10:8b:78:ed:2a:80:44: b0:f8:19:92:1f:ae:19:5c:e5:11:31:62:6b:f9:9c:6f:c2:5d: 83:bc:2c:6c:2d:08:6b:4f:d0:a3:c4:f5:c4:01:f6:41:72:9a: 17:80:b2:25:15:20:78:65:c4:8a:11:7e:ba:44:23:ab:0f:2a: 02:11:1f:0d:71:20:63:f4:bc:c8:e4:62:6f:eb:c3:00:b4:d2: 89:79:37:2f:4a:07:8c:0b:bc:7d:be:42:6b:97:fa:0f:c2:f6: 0a:31:a9:49:26:5d:e3:76:d9:12:2c:3f:74:1d:20:4a:75:e3: 52:f5:b7:0f:31:9d:64:0b:2a:cd:f2:15:68:14:f7:bd:26:5a: 9d:85:62:15:75:86:6e:23:4c:ad:13:05:8a:61:3b:9e:c8:b0: 86:fe:37:b1:36:df:d9:81:b6:04:6c:97:65:ba:03:48:c2:22: f8:f3:97:a2:ef:a8:aa:85:16:55:c1:9c:db:ab:10:a0:f9:9a: ef:5d:c4:10:77:10:ef:7c:8a:66:19:7f:94:1c:c0:d7:b8:d1: aa:c8:e8:ef:9f:0e:c9:5d:29:e8:d0:57:8f:7c:c1:08:07:54: e8:29:4c:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn9Mz5U5BPG0KD+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDU5ZGZmNTktYmExOC00YWE2LWFkZGItODgxNjE1YWMxMjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ0RnKDyKu/kc82HbavqjRvwnjSyRHqsj2Je fiHPWRYJUK07je7T6eqHxuzQkP7FLLc0HfN4kiXuZCG2/lReAz1f9KEyL2m8BroZ hxSm6SX5YyOhwTYr8t++vAY8giOlQw2ZWzCvNvHzwsua2SKuEBokapITZqGf/bbs 63qIj8DwctQUAjCV7LEFRncn/xI+7D4Fs577joC7z+gCGeJELu8eX34I1j6+yR2y K/pnttEopbE347Zd5Dz1LOE6vRIXIFyJr16rPN44O9EJbp+JgpID9n0CIP1n8xJ4 yKtiKtw0UJTJy290jwMjjCTCcSn2T4ML0O8qzzXns43j5/PT5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgXm9vwRWfxIBrbA4sUfp9xh6xiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTc1MDE2NGQtMTFhMi0z YjhiLTlmZGEtMjRkMTE3MGIzYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdUBHsJDh12THjSObYMx9OvZeCnrZNok8ReX6eeEIt47SqARLD4GZIf rhlc5RExYmv5nG/CXYO8LGwtCGtP0KPE9cQB9kFymheAsiUVIHhlxIoRfrpEI6sP KgIRHw1xIGP0vMjkYm/rwwC00ol5Ny9KB4wLvH2+QmuX+g/C9goxqUkmXeN22RIs P3QdIEp141L1tw8xnWQLKs3yFWgU970mWp2FYhV1hm4jTK0TBYphO57IsIb+N7E2 39mBtgRsl2W6A0jCIvjzl6LvqKqFFlXBnNurEKD5mu9dxBB3EO98imYZf5QcwNe4 0arI6O+fDsldKejQV498wQgHVOgpTEI= -----END CERTIFICATE-----Generated at Thu Sep 10 14:36:46 2026 by rpki-client