$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7271c280-8ac0-3c17-ac66-d4537440da47.roa File: 7271c280-8ac0-3c17-ac66-d4537440da47.roa (raw, json) Hash identifier: 7dPaOcF2b3c3/Xj8wLChKYaE9/ypxJOSnXDDyIwIFvU= Subject key identifier: 4C:A7:83:04:56:C7:88:83:16:67:D5:EB:95:BC:E3:3F:68:56:9B:E1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983E6A73D79B78F83DADD80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7271c280-8ac0-3c17-ac66-d4537440da47.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:e6:a7:3d:79:b7:8f:83:da:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=51401695-06d2-48cc-aac4-da0e6e0b9cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:5e:0b:70:d8:c0:14:7a:92:65:cc:bb:2a: ed:2c:5f:c1:53:ff:f3:3e:ae:68:7c:c8:a9:26:40: 15:44:c3:c9:a6:3f:4b:df:4e:d1:7c:25:4a:2c:f1: c0:07:5b:59:45:e4:b6:24:e0:30:13:9f:fb:08:e3: 1d:c5:81:42:1b:29:2f:d2:fd:fb:36:30:51:3c:23: e8:c3:f0:b6:b9:4b:32:d3:2a:fc:2f:99:e6:f5:cd: 70:21:de:45:04:c1:3c:3d:4b:47:ce:9c:27:e7:1c: 2b:97:f4:24:a9:e0:5d:a8:83:e9:e0:5f:95:94:4b: ca:41:21:57:53:e8:ad:5f:06:2f:9a:c5:66:02:b6: 71:24:7b:f3:99:39:3d:fa:cf:79:33:14:6b:8e:19: 07:0f:6c:6b:3a:1c:a8:7e:88:19:d3:31:4e:26:9a: 23:22:42:54:0d:0a:17:f3:49:0f:8e:56:03:7c:1e: 2f:13:38:92:2c:6e:32:20:f2:7b:fd:aa:da:5d:49: 68:b3:c3:22:94:6c:f6:65:a0:a0:82:ad:fd:4b:7a: bb:b9:15:11:9f:21:2b:95:09:8e:d7:04:47:6a:1a: 98:78:0c:fc:65:ab:b6:17:f8:c5:16:1f:22:89:40: ca:42:9a:0e:07:7f:b7:4d:32:c2:98:0f:8e:e8:f3: d8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A7:83:04:56:C7:88:83:16:67:D5:EB:95:BC:E3:3F:68:56:9B:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7271c280-8ac0-3c17-ac66-d4537440da47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:cd:6f:2b:1a:f6:4e:56:54:03:69:52:45:95:ca:64:d2:0c: 46:61:dd:c9:a2:ae:f0:1e:89:99:2f:43:9a:2c:e8:09:fa:d3: e3:ba:86:17:ff:8b:d7:e5:a1:bc:4d:97:c9:80:58:00:6e:87: 26:d2:1c:a9:9d:05:c5:57:72:2f:9e:40:a3:34:49:47:39:81: e7:32:08:a0:b5:b3:3b:c3:c3:4f:94:89:90:e3:e0:a5:ce:31: fa:17:a2:86:ba:58:82:09:28:28:fc:63:ba:e0:ed:90:61:18: 20:dc:17:46:74:b4:40:8e:d0:fc:4d:d0:01:17:9a:a4:95:ea: 74:98:a3:3a:1c:b5:2d:90:18:6d:d1:80:e9:84:aa:8c:46:73: d2:9c:63:02:a2:ec:79:ac:af:96:cd:b6:93:ab:f5:55:6c:50: 32:a2:5d:c9:a0:78:75:69:82:aa:8a:cc:f9:b7:e5:0f:eb:3a: 16:25:a3:7c:43:7c:19:fa:27:2c:85:01:b9:4b:a9:ad:96:25: bc:14:23:57:b8:1f:c8:40:78:8a:59:29:57:f3:6f:63:f3:3b: ff:74:af:c9:4d:74:43:75:e3:10:00:60:22:af:73:05:5e:58: 06:be:15:96:5e:a2:f6:30:b7:5c:6f:57:c7:07:70:1e:57:57: 6a:2f:0f:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg+anPXm3j4Pa3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTE0MDE2OTUtMDZkMi00OGNjLWFhYzQtZGEwZTZlMGI5Y2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwdeC3DYwBR6kmXMuyrtLF/BU//zPq5ofMip JkAVRMPJpj9L307RfCVKLPHAB1tZReS2JOAwE5/7COMdxYFCGykv0v37NjBRPCPo w/C2uUsy0yr8L5nm9c1wId5FBME8PUtHzpwn5xwrl/QkqeBdqIPp4F+VlEvKQSFX U+itXwYvmsVmArZxJHvzmTk9+s95MxRrjhkHD2xrOhyofogZ0zFOJpojIkJUDQoX 80kPjlYDfB4vEziSLG4yIPJ7/araXUlos8MilGz2ZaCggq39S3q7uRURnyErlQmO 1wRHahqYeAz8Zau2F/jFFh8iiUDKQpoOB3+3TTLCmA+O6PPY9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyngwRWx4iDFmfV65W84z9oVpvhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzI3MWMyODAtOGFjMC0z YzE3LWFjNjYtZDQ1Mzc0NDBkYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjNbysa9k5WVANpUkWVymTSDEZh3cmirvAeiZkvQ5os6An60+O6hhf/ i9flobxNl8mAWABuhybSHKmdBcVXci+eQKM0SUc5gecyCKC1szvDw0+UiZDj4KXO MfoXooa6WIIJKCj8Y7rg7ZBhGCDcF0Z0tECO0PxN0AEXmqSV6nSYozoctS2QGG3R gOmEqoxGc9KcYwKi7Hmsr5bNtpOr9VVsUDKiXcmgeHVpgqqKzPm35Q/rOhYlo3xD fBn6JyyFAblLqa2WJbwUI1e4H8hAeIpZKVfzb2PzO/90r8lNdEN14xAAYCKvcwVe WAa+FZZeovYwt1xvV8cHcB5XV2ovD6g= -----END CERTIFICATE-----Generated at Mon Sep 28 20:49:42 2026 by rpki-client