$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fac17059-23f4-3dcf-898a-477be15a41fa.roa File: fac17059-23f4-3dcf-898a-477be15a41fa.roa (raw, json) Hash identifier: d9WK4rj9TfCcx8yphdfN9cXm+8SrxdpKUDdMtLFTcVo= Subject key identifier: 20:89:B5:45:2F:71:33:C3:E3:0B:7D:C7:FF:59:8F:46:95:AB:CC:34 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFFE2B2C78E4BD9EB4BC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fac17059-23f4-3dcf-898a-477be15a41fa.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:ff:e2:b2:c7:8e:4b:d9:eb:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0e694393-c5e9-4252-97bb-1756d7e092ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:87:e8:0a:69:f0:5b:8d:01:00:39:be:51:f5: 37:46:c3:44:0e:9e:b2:61:d5:53:bd:55:21:8c:bf: b4:43:5e:7e:be:93:99:1b:94:ef:37:d8:be:35:c7: 82:15:44:58:64:92:fe:38:9b:7c:28:92:dd:9b:1d: 50:54:0c:20:31:3a:7d:23:f0:1b:5c:5d:d2:8c:21: f8:ee:38:ae:11:67:e6:22:c6:2d:a8:92:2d:60:ec: ed:78:44:d3:03:fb:5d:dc:8c:99:d2:f8:7b:a9:6c: 19:be:13:06:e7:fd:42:15:13:7d:3d:2d:74:7f:5e: 2e:ae:5c:0a:1e:78:c2:85:23:6b:50:7a:63:0a:0b: e0:ad:1e:bc:2b:4c:be:a9:42:8e:80:ca:2d:a6:ed: d4:3b:19:36:bb:46:58:e9:eb:77:af:ee:6d:87:ef: bb:59:e8:63:c2:a8:8b:cb:39:0e:1e:c5:a9:ef:31: e1:92:20:c9:cb:71:da:d5:4e:54:c9:ec:f8:0b:14: 63:10:b1:e3:d8:4a:76:1e:71:fd:55:5b:fb:aa:04: 1d:d8:d5:b7:e4:39:41:0a:a0:28:5d:01:1c:f3:52: 19:a6:b4:e6:bc:a1:36:72:c2:a8:99:c1:e6:57:28: eb:f0:89:e6:7d:90:68:5d:38:44:e3:1a:27:fc:b0: f5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:89:B5:45:2F:71:33:C3:E3:0B:7D:C7:FF:59:8F:46:95:AB:CC:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fac17059-23f4-3dcf-898a-477be15a41fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:92:9e:7f:08:16:9b:37:ee:c8:c6:51:f4:5f:e1:1e:34:5b: 1f:26:7f:ff:71:30:5e:2f:aa:5e:a1:77:9f:27:d7:2a:05:4c: 8e:b0:4f:70:6d:84:c9:b7:e8:74:6b:fb:ed:95:ae:bf:17:9e: 36:bd:ec:e5:00:54:0a:db:b0:f3:4d:32:d3:ce:12:3c:12:06: b3:f0:89:1b:ce:57:d8:52:75:ee:64:7d:97:32:40:d6:db:a7: 0b:83:0d:71:59:86:22:b5:a8:55:7c:41:49:20:5e:d0:b1:bc: 9d:c2:eb:19:41:28:6a:93:b9:d5:42:68:2f:f2:2d:39:f1:9d: 01:2a:dd:b2:cb:1b:55:94:38:af:57:21:9a:f9:ef:70:c2:d2: 27:50:44:93:93:57:b1:93:51:d3:b8:52:32:ce:05:97:65:3d: 2e:21:0f:52:bf:cc:49:6b:89:6b:7c:9d:ef:c2:06:14:d8:f3: 94:bc:45:fb:e0:4b:66:c3:93:58:18:88:d9:0b:18:07:71:45: ac:04:4e:41:d1:4d:f5:38:78:56:0b:d9:d4:55:c3:35:77:81: e4:ca:0a:04:5c:2e:8f:17:53:74:e4:8a:e8:68:b4:13:ca:8e: 70:17:a3:c7:b7:03:5d:4b:e3:96:e7:3d:6c:ec:0a:5c:e6:3a: 36:ee:fa:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3//isseOS9nrS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MGU2OTQzOTMtYzVlOS00MjUyLTk3YmItMTc1NmQ3ZTA5MmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IfoCmnwW40BADm+UfU3RsNEDp6yYdVTvVUh jL+0Q15+vpOZG5TvN9i+NceCFURYZJL+OJt8KJLdmx1QVAwgMTp9I/AbXF3SjCH4 7jiuEWfmIsYtqJItYOzteETTA/td3IyZ0vh7qWwZvhMG5/1CFRN9PS10f14urlwK HnjChSNrUHpjCgvgrR68K0y+qUKOgMotpu3UOxk2u0ZY6et3r+5th++7WehjwqiL yzkOHsWp7zHhkiDJy3Ha1U5Uyez4CxRjELHj2Ep2HnH9VVv7qgQd2NW35DlBCqAo XQEc81IZprTmvKE2csKomcHmVyjr8InmfZBoXThE4xon/LD17wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCJtUUvcTPD4wt9x/9Zj0aVq8w0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmFjMTcwNTktMjNmNC0z ZGNmLTg5OGEtNDc3YmUxNWE0MWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuSnn8IFps37sjGUfRf4R40Wx8mf/9xMF4vql6hd58n1yoFTI6wT3Bt hMm36HRr++2Vrr8Xnja97OUAVArbsPNNMtPOEjwSBrPwiRvOV9hSde5kfZcyQNbb pwuDDXFZhiK1qFV8QUkgXtCxvJ3C6xlBKGqTudVCaC/yLTnxnQEq3bLLG1WUOK9X IZr573DC0idQRJOTV7GTUdO4UjLOBZdlPS4hD1K/zElriWt8ne/CBhTY85S8Rfvg S2bDk1gYiNkLGAdxRawETkHRTfU4eFYL2dRVwzV3geTKCgRcLo8XU3TkiuhotBPK jnAXo8e3A11L45bnPWzsClzmOjbu+ks= -----END CERTIFICATE-----Generated at Fri Mar 13 05:51:30 2026 by rpki-client