$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9fcf7deb-a816-3640-b174-499dadd22af9.roa File: 9fcf7deb-a816-3640-b174-499dadd22af9.roa (raw, json) Hash identifier: FRGDO7IA05PdHLFsJO8pipPtTlVFbJ3gzk5iWPZoo24= Subject key identifier: 05:1E:08:D8:A1:90:41:4F:48:71:FD:61:D6:5D:2C:6D:78:A3:4E:FF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B9DBF07B2B77A0F62A980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9fcf7deb-a816-3640-b174-499dadd22af9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:9d:bf:07:b2:b7:7a:0f:62:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2fa494b5-76dc-4e4d-81a1-8bd5509bc074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:75:38:c3:58:71:22:61:ba:9c:16:63:27:00: de:77:48:26:8a:f1:15:cb:01:8c:b2:6c:12:a5:fa: 84:fc:ae:f2:58:c6:de:97:2f:59:e9:1c:61:c1:01: 3e:e7:92:9e:68:3c:4a:91:b7:12:48:ef:74:ce:7c: 5a:29:08:b4:ce:55:e4:bd:2b:df:17:af:55:8c:16: 9d:53:00:83:63:75:a2:a4:fb:9f:97:e7:f7:be:f5: 1a:e6:62:8c:57:97:32:c2:87:f7:e3:1c:7f:df:af: 08:c3:44:a7:fb:79:2a:01:b4:7f:1d:30:28:8b:79: ad:81:4e:b1:e2:2a:05:7b:51:b0:87:49:53:a1:c4: fa:d2:4b:c3:8f:9b:87:ed:5c:e9:82:79:cf:2b:26: a8:a7:e1:ab:51:d9:85:36:de:83:5b:7f:d1:7f:58: 88:5d:a6:ab:64:0b:5f:dd:29:3c:38:ba:c9:aa:b9: bf:76:9d:f6:9e:f3:31:04:74:af:3c:12:31:89:87: f6:9b:08:4f:d7:11:4a:2a:4c:56:cf:59:df:f7:a6: 88:73:bd:05:96:1b:c1:77:47:cc:8e:a9:8d:7b:46: 01:d1:9f:5e:05:4e:ef:7c:c4:cc:0e:dd:be:55:e1: ff:05:5b:91:3f:e3:64:3e:41:32:bb:63:b7:61:73: 85:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1E:08:D8:A1:90:41:4F:48:71:FD:61:D6:5D:2C:6D:78:A3:4E:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9fcf7deb-a816-3640-b174-499dadd22af9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d3:54:ba:af:44:d7:8c:e5:ce:95:ed:2a:bd:cf:9c:1c:8f: 20:eb:71:28:dc:07:f1:96:ee:4d:ff:71:d5:71:a5:cf:a4:37: 03:3b:cb:cb:4a:7c:72:f0:ba:df:2e:76:ee:f3:e0:82:75:e5: bd:09:71:74:bc:d4:36:cd:53:4f:11:3e:36:ad:15:31:21:da: d1:f2:9c:ad:4d:bd:b8:9f:a1:67:ca:fb:c9:f0:91:87:7d:6c: ab:3b:4c:e0:ca:7f:d6:40:f3:8c:b0:58:33:33:58:22:28:e2: f6:1e:99:0b:44:04:00:3d:f4:89:8f:9c:5d:3c:d2:a6:80:08: 1f:40:97:5f:00:4e:4b:c0:29:c0:d7:15:23:d4:d9:0b:ef:87: 41:a2:07:05:80:7d:a5:5b:01:5f:55:49:f5:d5:cc:d0:6e:d2: db:29:d3:5e:a0:7a:34:05:b5:75:6f:e1:b6:25:d5:20:bc:da: 8d:a4:9e:e8:8f:4b:1e:75:e3:aa:39:22:e9:6c:26:76:20:e8: f1:3b:b6:0e:5a:85:62:d6:33:f7:e3:96:c6:45:ad:5a:05:d1: 87:df:28:56:4e:98:fa:92:ec:16:a9:8d:f1:42:0b:f6:89:cd: a3:4d:5d:18:50:90:32:93:f9:c7:7e:8f:35:88:3e:86:43:a6: 95:f2:6b:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je52/B7K3eg9iqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmZhNDk0YjUtNzZkYy00ZTRkLTgxYTEtOGJkNTUwOWJjMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HU4w1hxImG6nBZjJwDed0gmivEVywGMsmwS pfqE/K7yWMbely9Z6RxhwQE+55KeaDxKkbcSSO90znxaKQi0zlXkvSvfF69VjBad UwCDY3WipPufl+f3vvUa5mKMV5cywof34xx/368Iw0Sn+3kqAbR/HTAoi3mtgU6x 4ioFe1Gwh0lTocT60kvDj5uH7VzpgnnPKyaop+GrUdmFNt6DW3/Rf1iIXaarZAtf 3Sk8OLrJqrm/dp32nvMxBHSvPBIxiYf2mwhP1xFKKkxWz1nf96aIc70FlhvBd0fM jqmNe0YB0Z9eBU7vfMTMDt2+VeH/BVuRP+NkPkEyu2O3YXOFXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUeCNihkEFPSHH9YdZdLG14o07/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWZjZjdkZWItYTgxNi0z NjQwLWIxNzQtNDk5ZGFkZDIyYWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDTVLqvRNeM5c6V7Sq9z5wcjyDrcSjcB/GW7k3/cdVxpc+kNwM7y8tK fHLwut8udu7z4IJ15b0JcXS81DbNU08RPjatFTEh2tHynK1NvbifoWfK+8nwkYd9 bKs7TODKf9ZA84ywWDMzWCIo4vYemQtEBAA99ImPnF080qaACB9Al18ATkvAKcDX FSPU2Qvvh0GiBwWAfaVbAV9VSfXVzNBu0tsp016gejQFtXVv4bYl1SC82o2knuiP Sx5146o5IulsJnYg6PE7tg5ahWLWM/fjlsZFrVoF0YffKFZOmPqS7BapjfFCC/aJ zaNNXRhQkDKT+cd+jzWIPoZDppXya5o= -----END CERTIFICATE-----Generated at Fri Oct 9 15:55:17 2026 by rpki-client