$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fac17059-23f4-3dcf-898a-477be15a41fa.roa File: fac17059-23f4-3dcf-898a-477be15a41fa.roa (raw, json) Hash identifier: 035m8a7b5UY5zdP0rt7xPx9Iz+zH5/NVIoBSQj+qk70= Subject key identifier: 67:37:4C:A3:45:93:6A:44:F6:16:24:E2:AC:8D:93:1A:55:B5:F7:84 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B9DCAF88616400FA11280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fac17059-23f4-3dcf-898a-477be15a41fa.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:9d:ca:f8:86:16:40:0f:a1:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6f57a062-8414-4699-ada6-b5ac3589c9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0d:30:de:9f:29:77:e2:f6:d1:db:43:83:65: 3c:57:70:1d:b7:7b:36:4e:15:70:e7:ed:19:a2:e2: 24:ec:59:8c:e2:ad:4a:35:41:29:ef:cc:ee:c4:bd: 2b:a8:5b:50:73:43:9b:7b:67:05:d2:76:4b:b4:dc: 8e:9b:10:cd:cd:1e:d8:bd:01:ff:ff:73:60:d9:fb: 5e:ca:13:5b:6d:96:80:28:91:5b:82:dd:b2:9a:9f: bf:9b:e0:d9:07:86:7e:90:d0:d1:73:74:08:a4:92: 90:41:50:f4:84:40:72:e5:01:1f:70:e6:ea:8e:5b: b1:da:ab:7c:5f:1c:34:81:cd:ae:3f:84:45:ec:4d: 7a:8a:38:21:3c:8d:b7:8d:93:8e:6d:ba:1b:85:de: 92:01:df:b4:15:54:31:e6:5a:63:12:d4:f6:01:3b: 3d:45:f9:5c:2d:df:0a:97:66:87:31:cf:ea:e9:26: a1:e3:87:8c:b1:a5:8b:f6:8a:c8:9a:92:42:75:f6: b4:e3:98:4d:0c:9e:ad:04:52:cd:9f:0d:e1:28:52: d6:66:22:d0:c6:ca:41:75:a1:03:f3:40:a3:ea:6d: ae:54:b0:de:34:59:7f:3a:d8:16:ed:0f:f5:0f:97: d3:ad:4c:9f:bc:1f:f7:81:84:6d:22:a6:86:8e:76: b5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:37:4C:A3:45:93:6A:44:F6:16:24:E2:AC:8D:93:1A:55:B5:F7:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fac17059-23f4-3dcf-898a-477be15a41fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:c5:51:44:6d:3c:8f:31:10:96:d9:ec:6d:ad:75:0e:f3:2e: a3:6c:09:df:48:f7:41:a7:6e:68:9a:4f:06:f7:ed:0d:0f:98: 04:27:4a:18:37:7e:65:04:5d:04:3f:7a:66:29:02:83:8e:67: 94:9f:6c:e3:e3:c2:8f:6d:62:cc:e8:62:4d:c4:09:b6:a7:5d: 3a:79:19:38:3b:3d:db:c0:52:b7:80:13:e4:58:ab:bd:da:93: b6:fe:cc:07:10:bf:36:2a:21:06:02:7f:10:39:cf:78:69:41: 53:ea:45:a4:12:7c:33:86:70:fb:e4:01:c6:5b:7e:6e:86:ba: ed:31:d0:44:b3:11:d5:0a:aa:33:38:54:23:b1:62:3a:c4:cb: 4a:69:d9:57:dc:04:38:90:b1:84:53:b2:f2:64:ed:bc:3a:5e: 4d:ca:77:0c:28:be:6e:f9:c4:80:68:80:bc:81:88:b2:66:c3: fc:77:59:33:11:54:8e:fb:a2:02:f9:bb:10:c3:91:65:86:96: d1:73:cf:31:cd:fd:84:62:88:82:35:97:05:30:40:77:27:a8: 60:50:c7:f1:21:58:a1:e0:60:d9:e8:82:c0:b2:43:fe:61:31: d4:f6:df:7d:78:87:49:78:28:59:af:9e:f3:56:90:c8:90:e6: fe:89:2a:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je53K+IYWQA+hEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmY1N2EwNjItODQxNC00Njk5LWFkYTYtYjVhYzM1ODljOWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg0w3p8pd+L20dtDg2U8V3Adt3s2ThVw5+0Z ouIk7FmM4q1KNUEp78zuxL0rqFtQc0Obe2cF0nZLtNyOmxDNzR7YvQH//3Ng2fte yhNbbZaAKJFbgt2ymp+/m+DZB4Z+kNDRc3QIpJKQQVD0hEBy5QEfcObqjlux2qt8 Xxw0gc2uP4RF7E16ijghPI23jZOObbobhd6SAd+0FVQx5lpjEtT2ATs9RflcLd8K l2aHMc/q6Sah44eMsaWL9orImpJCdfa045hNDJ6tBFLNnw3hKFLWZiLQxspBdaED 80Cj6m2uVLDeNFl/OtgW7Q/1D5fTrUyfvB/3gYRtIqaGjna1AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGc3TKNFk2pE9hYk4qyNkxpVtfeEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmFjMTcwNTktMjNmNC0z ZGNmLTg5OGEtNDc3YmUxNWE0MWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnFUURtPI8xEJbZ7G2tdQ7zLqNsCd9I90GnbmiaTwb37Q0PmAQnShg3 fmUEXQQ/emYpAoOOZ5SfbOPjwo9tYszoYk3ECbanXTp5GTg7PdvAUreAE+RYq73a k7b+zAcQvzYqIQYCfxA5z3hpQVPqRaQSfDOGcPvkAcZbfm6Guu0x0ESzEdUKqjM4 VCOxYjrEy0pp2VfcBDiQsYRTsvJk7bw6Xk3Kdwwovm75xIBogLyBiLJmw/x3WTMR VI77ogL5uxDDkWWGltFzzzHN/YRiiII1lwUwQHcnqGBQx/EhWKHgYNnogsCyQ/5h MdT23314h0l4KFmvnvNWkMiQ5v6JKmc= -----END CERTIFICATE-----Generated at Sun Sep 27 14:57:13 2026 by rpki-client