$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9fcf7deb-a816-3640-b174-499dadd22af9.roa File: 9fcf7deb-a816-3640-b174-499dadd22af9.roa (raw, json) Hash identifier: zX2L8JDJ1fl+fhXd3heAQe+EHWwNYk8d9RL5+XK/dlA= Subject key identifier: C8:BF:52:18:1F:38:3E:F4:D1:A7:06:68:FE:23:2A:16:2D:F7:20:39 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFFD26D6CF24F0BB6D8E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9fcf7deb-a816-3640-b174-499dadd22af9.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:ff:d2:6d:6c:f2:4f:0b:b6:d8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=50b33df9-3818-4a71-9f9b-087880c27725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:13:94:76:53:e8:57:f4:2c:04:e6:0b:2d:10: 4a:a9:de:81:1b:81:6c:ba:eb:6d:5d:33:f8:90:02: f2:9d:77:cd:a2:2d:61:fa:f1:dc:1b:71:ef:1a:df: d8:3b:fc:23:02:3a:80:b5:2a:27:e5:b7:13:9d:b5: a5:70:09:fa:d2:64:af:fa:c3:8d:85:35:8a:ce:0a: 70:6d:bc:0e:c6:88:de:fa:ad:d0:6f:92:84:21:81: 0c:f4:d4:99:48:77:7c:f2:3c:be:6d:76:53:83:4a: 20:9f:ee:70:ff:3a:c5:cd:28:7b:f5:6d:d1:87:67: 77:0b:c8:41:5c:16:5d:5d:2b:54:17:20:ec:a2:e6: fe:57:25:a5:19:ca:39:6e:c8:a6:f2:ab:8d:31:ca: ed:db:bb:11:b2:96:46:f9:c2:fc:07:54:64:2c:26: 71:35:ad:23:0f:99:b3:9b:f9:89:a3:37:a6:27:1c: a2:4c:dc:49:c6:1e:06:47:2a:50:9d:eb:25:ba:81: ae:0d:7e:7f:6e:a2:a3:19:06:2b:65:15:3f:03:16: 8b:3f:5a:75:fa:cc:f0:7c:c8:d1:0a:89:3b:74:8e: f8:93:7a:6b:2f:77:ac:f3:4c:8d:30:51:12:c2:26: f2:3f:fb:9a:d6:66:a1:69:02:f2:62:cc:d5:f2:b1: d3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BF:52:18:1F:38:3E:F4:D1:A7:06:68:FE:23:2A:16:2D:F7:20:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9fcf7deb-a816-3640-b174-499dadd22af9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:96:49:4f:d9:3a:3b:12:ce:dd:87:54:4d:16:65:e6:3a:94: 60:d2:26:b8:94:bc:fc:b9:8c:bb:de:f9:b0:b0:41:96:f2:30: c1:fa:a7:54:7b:0a:55:6e:11:4f:89:33:57:05:f8:91:40:64: a6:05:f1:9b:d8:dc:ae:35:a2:23:04:9c:41:cc:3a:b2:35:d0: 65:4c:98:f9:ac:77:83:df:81:a3:5c:e0:32:de:a8:98:e1:ea: 9b:f1:f2:fc:37:d4:ad:5a:3c:08:0b:1d:ae:7b:26:62:0f:f3: 14:6a:16:25:de:a7:7d:a1:41:35:dc:75:86:7a:65:38:ca:4c: 02:2b:21:5b:54:8e:b3:22:30:9c:f6:ef:52:f7:20:5d:ad:64: e4:d7:be:b4:94:c9:eb:35:11:95:74:90:cc:27:a5:37:0b:82: f2:8b:e7:d7:fd:2c:93:62:c3:2e:6f:de:3d:b7:e4:e9:3d:89: 3f:3e:65:ef:b6:b9:9d:b3:ee:a3:38:b0:1b:c1:17:2a:21:75: 5d:96:66:cd:a9:41:60:c9:bf:b5:a3:f1:2d:76:31:1f:af:0f: be:83:8c:35:ac:39:bb:84:e1:da:68:a8:fc:03:b0:29:42:d3: 5a:6f:a7:d0:c6:52:d2:bc:bf:5d:09:0c:f9:d2:ea:ee:ac:18: 59:49:9c:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3//SbWzyTwu22OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTBiMzNkZjktMzgxOC00YTcxLTlmOWItMDg3ODgwYzI3NzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hOUdlPoV/QsBOYLLRBKqd6BG4FsuuttXTP4 kALynXfNoi1h+vHcG3HvGt/YO/wjAjqAtSon5bcTnbWlcAn60mSv+sONhTWKzgpw bbwOxoje+q3Qb5KEIYEM9NSZSHd88jy+bXZTg0ogn+5w/zrFzSh79W3Rh2d3C8hB XBZdXStUFyDsoub+VyWlGco5bsim8quNMcrt27sRspZG+cL8B1RkLCZxNa0jD5mz m/mJozemJxyiTNxJxh4GRypQnesluoGuDX5/bqKjGQYrZRU/AxaLP1p1+szwfMjR Cok7dI74k3prL3es80yNMFESwibyP/ua1mahaQLyYszV8rHTpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMi/UhgfOD700acGaP4jKhYt9yA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWZjZjdkZWItYTgxNi0z NjQwLWIxNzQtNDk5ZGFkZDIyYWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGWSU/ZOjsSzt2HVE0WZeY6lGDSJriUvPy5jLve+bCwQZbyMMH6p1R7 ClVuEU+JM1cF+JFAZKYF8ZvY3K41oiMEnEHMOrI10GVMmPmsd4PfgaNc4DLeqJjh 6pvx8vw31K1aPAgLHa57JmIP8xRqFiXep32hQTXcdYZ6ZTjKTAIrIVtUjrMiMJz2 71L3IF2tZOTXvrSUyes1EZV0kMwnpTcLgvKL59f9LJNiwy5v3j235Ok9iT8+Ze+2 uZ2z7qM4sBvBFyohdV2WZs2pQWDJv7Wj8S12MR+vD76DjDWsObuE4dpoqPwDsClC 01pvp9DGUtK8v10JDPnS6u6sGFlJnGo= -----END CERTIFICATE-----Generated at Thu Mar 26 20:10:30 2026 by rpki-client