$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/048a0b86-d861-3443-858e-27449974ed53.roa File: 048a0b86-d861-3443-858e-27449974ed53.roa (raw, json) Hash identifier: 0LWxTrwRIVPdyhwPK9BM5fEDIDOUMqqjB6VqgfRpipI= Subject key identifier: 9B:B2:44:3B:BE:00:66:62:18:DF:41:6C:98:2A:22:CA:9A:57:15:7F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EAFE6F773807B710613BAF440 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/048a0b86-d861-3443-858e-27449974ed53.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.243.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:f7:73:80:7b:71:06:13:ba:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=7a22de69-5916-4a6c-929e-f722d8e6349e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2a:60:2a:ac:88:c5:55:46:9f:c8:6d:30:1d: fb:5b:4d:8d:11:c9:56:20:8f:6f:9b:71:bf:20:7f: 22:3c:7b:2f:9f:89:70:06:30:1b:08:16:3e:6b:61: 85:c9:bd:f5:6e:b8:f0:6b:f8:48:55:72:21:06:93: 0a:23:82:c7:35:8d:47:e3:0f:f4:1e:6d:06:11:55: 6e:ef:67:d3:10:75:bf:a2:ba:0f:cf:dd:ee:fb:ef: 7b:f6:97:d2:c2:a1:04:32:96:51:02:f3:66:e1:be: 8d:8c:6b:af:e1:a9:45:db:41:62:42:0d:db:91:6d: 47:5f:7a:3a:36:44:16:22:15:24:ed:43:ce:4f:e1: 29:24:de:0f:81:6c:d5:3d:c8:bd:39:e4:15:21:b8: 71:de:e2:b8:29:2d:9f:3f:f9:65:cf:ea:d4:f3:14: 7b:88:73:7f:d4:34:e2:45:ce:9b:e9:3d:b8:06:d7: f3:02:0f:bd:1b:3e:d8:d6:35:5a:90:c4:cf:61:1f: 9d:1e:02:51:16:f0:ad:51:37:70:79:00:8b:88:9f: c1:47:a8:f1:7e:d9:65:e5:85:9d:ab:fd:df:a9:d8: 55:13:81:7b:60:cd:82:59:b9:56:03:a4:b7:96:e6: f0:4e:ca:fa:e6:9e:5d:47:b9:7a:f4:2e:39:37:dd: fd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B2:44:3B:BE:00:66:62:18:DF:41:6C:98:2A:22:CA:9A:57:15:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/048a0b86-d861-3443-858e-27449974ed53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a5:af:35:24:d6:02:ac:b3:62:1e:44:0c:5f:e1:40:8e:97: 7e:98:16:32:71:56:6c:57:2f:af:ca:0b:44:cc:36:9e:24:97: 65:75:88:dd:5b:81:ea:bd:79:0d:10:f3:29:16:f7:30:33:90: 94:b4:8e:31:36:eb:d6:5c:44:a8:07:9a:72:65:5f:e9:ea:33: 9e:0b:eb:c7:cf:93:41:83:73:0e:dd:06:c9:11:a4:e5:4d:56: cd:b7:5e:2e:a0:0b:a3:44:7b:55:e6:12:e4:7a:9a:eb:3c:78: 6f:7f:f5:32:3f:73:13:c5:b0:b3:81:7e:4d:51:95:b0:df:ce: 0c:b4:aa:d5:0a:15:38:4f:bd:4a:22:15:8f:d6:51:13:57:a6: 69:0c:3a:13:7e:b3:00:84:a6:a2:4a:30:6b:fc:5a:bd:80:b6: f3:7a:32:84:10:c0:06:81:11:21:6a:29:77:cf:48:bf:7a:3c: b6:55:3b:51:6b:d1:7a:e0:6b:bd:a7:c5:a9:6c:91:5d:e6:4e: 09:47:9a:f9:c1:8f:78:d8:10:2b:43:96:ad:4f:cc:89:ca:af: f1:ff:e2:ae:58:cc:7e:63:64:00:d1:c2:31:d1:cf:c5:48:a9: 85:34:5f:2e:1d:bd:c1:ab:12:29:b6:2a:12:f0:fe:d0:69:71: d3:25:e5:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vdzgHtxBhO69EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk N2EyMmRlNjktNTkxNi00YTZjLTkyOWUtZjcyMmQ4ZTYzNDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAripgKqyIxVVGn8htMB37W02NEclWII9vm3G/ IH8iPHsvn4lwBjAbCBY+a2GFyb31brjwa/hIVXIhBpMKI4LHNY1H4w/0Hm0GEVVu 72fTEHW/oroPz93u++979pfSwqEEMpZRAvNm4b6NjGuv4alF20FiQg3bkW1HX3o6 NkQWIhUk7UPOT+EpJN4PgWzVPci9OeQVIbhx3uK4KS2fP/llz+rU8xR7iHN/1DTi Rc6b6T24BtfzAg+9Gz7Y1jVakMTPYR+dHgJRFvCtUTdweQCLiJ/BR6jxftll5YWd q/3fqdhVE4F7YM2CWblWA6S3lubwTsr65p5dR7l69C45N939FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuyRDu+AGZiGN9BbJgqIsqaVxV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDQ4YTBiODYtZDg2MS0z NDQzLTg1OGUtMjc0NDk5NzRlZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErPMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWlrzUk1gKss2IeRAxf4UCOl36YFjJxVmxXL6/KC0TMNp4kl2V1iN1b geq9eQ0Q8ykW9zAzkJS0jjE269ZcRKgHmnJlX+nqM54L68fPk0GDcw7dBskRpOVN Vs23Xi6gC6NEe1XmEuR6mus8eG9/9TI/cxPFsLOBfk1RlbDfzgy0qtUKFThPvUoi FY/WURNXpmkMOhN+swCEpqJKMGv8Wr2AtvN6MoQQwAaBESFqKXfPSL96PLZVO1Fr 0Xrga72nxalskV3mTglHmvnBj3jYECtDlq1PzInKr/H/4q5YzH5jZADRwjHRz8VI qYU0Xy4dvcGrEim2KhLw/tBpcdMl5UM= -----END CERTIFICATE-----Generated at Thu Sep 10 09:40:06 2026 by rpki-client