$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0248a708-1e5d-3bac-8f01-bf8e608bb045.roa File: 0248a708-1e5d-3bac-8f01-bf8e608bb045.roa (raw, json) Hash identifier: hslHobXHx5Wn67GTzRk26nOYFFMMxNZouiOpuOiK5R0= Subject key identifier: 90:A7:26:B3:7E:41:2B:EC:8B:66:A4:57:32:06:14:16:2E:14:B7:7B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BA697F1B4219BC3237680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0248a708-1e5d-3bac-8f01-bf8e608bb045.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:a6:97:f1:b4:21:9b:c3:23:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d3505d2c-b79d-4a2b-8819-06166e33046c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:13:00:a5:52:2c:50:fa:f7:be:40:92:a0:99: af:29:2c:a5:29:a6:f8:e1:18:b1:7b:85:41:10:38: 85:b2:4b:02:89:e0:1a:f1:75:7b:47:4f:9d:f7:e9: 48:9c:10:fa:96:df:15:27:42:16:0c:6f:45:25:e7: 72:1a:8d:bd:12:3a:f9:d3:72:b5:4f:2c:ef:03:13: 6e:39:29:bd:69:82:85:35:17:c5:b1:98:56:dd:ee: c2:d0:1e:63:d8:2e:b1:d4:30:86:9a:53:52:24:e0: ad:82:e0:ef:13:5e:5b:fa:53:ac:8e:fb:10:78:6c: 91:9c:df:17:e5:6d:b8:d2:28:b2:bd:b2:e6:4f:07: 77:27:8c:56:13:cf:14:6b:14:ca:f6:2a:73:37:2e: 80:de:7d:e5:c1:b4:0c:06:fe:41:b9:58:54:11:2c: f2:69:0c:31:19:e0:a6:84:7f:f4:bc:12:45:6d:f3: 3e:a0:1b:b1:9b:73:be:99:40:dd:49:20:d4:74:e4: b2:91:f9:e9:17:b6:c0:84:94:a3:7c:48:16:1a:1d: 6f:2d:c1:7c:a2:20:39:8f:7b:0b:4f:ab:ba:07:3e: 32:bb:e0:65:9a:6e:d6:33:c5:b0:67:96:61:f8:62: fc:fd:ff:0b:64:22:af:ec:e2:16:25:31:02:86:c9: 20:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A7:26:B3:7E:41:2B:EC:8B:66:A4:57:32:06:14:16:2E:14:B7:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0248a708-1e5d-3bac-8f01-bf8e608bb045.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:8f:f5:da:78:e7:63:73:aa:2b:15:b3:0b:c9:a3:7d:a8:71: f4:59:34:b2:5c:ac:f4:68:e7:b2:86:97:db:32:77:2f:91:2b: 21:70:ed:1f:12:c9:15:97:66:02:60:39:4c:64:cd:ce:ac:23: b2:70:fd:f1:dd:cf:63:1c:10:b6:10:df:f7:b1:d6:de:48:a3: d2:ef:fa:a8:57:91:5f:41:27:0f:07:55:b6:b5:d6:b8:b4:e2: a6:86:2e:03:80:c2:7e:92:d8:5b:c5:5f:96:34:81:b6:67:75: c8:d3:78:12:e7:07:97:37:3d:73:c9:5b:3d:b1:45:cd:d4:61: 37:a0:1a:b3:c3:5c:cd:15:6d:6d:f8:00:1c:9e:e0:30:e2:66: f9:05:53:68:f1:66:85:09:81:31:51:8b:b1:ad:04:f8:1d:ae: 4d:62:46:5c:6a:66:f5:2b:c7:b9:73:b9:0c:da:fa:1e:7e:39: a7:6b:51:c0:30:b0:44:0d:bd:04:86:9d:90:5c:95:30:fe:58: aa:02:58:eb:ad:ae:76:59:e7:b5:2f:b6:22:a6:51:26:a7:44: 12:36:8e:4c:40:76:d3:5b:af:46:fe:c5:cd:ca:b8:25:78:f7: a7:e5:1d:d8:85:a6:57:2c:da:5e:85:15:21:50:22:34:c4:4b: d7:86:ec:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je6aX8bQhm8MjdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDM1MDVkMmMtYjc5ZC00YTJiLTg4MTktMDYxNjZlMzMwNDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhMApVIsUPr3vkCSoJmvKSylKab44Rixe4VB EDiFsksCieAa8XV7R0+d9+lInBD6lt8VJ0IWDG9FJedyGo29Ejr503K1TyzvAxNu OSm9aYKFNRfFsZhW3e7C0B5j2C6x1DCGmlNSJOCtguDvE15b+lOsjvsQeGyRnN8X 5W240iiyvbLmTwd3J4xWE88UaxTK9ipzNy6A3n3lwbQMBv5BuVhUESzyaQwxGeCm hH/0vBJFbfM+oBuxm3O+mUDdSSDUdOSykfnpF7bAhJSjfEgWGh1vLcF8oiA5j3sL T6u6Bz4yu+Blmm7WM8WwZ5Zh+GL8/f8LZCKv7OIWJTEChskg/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCnJrN+QSvsi2akVzIGFBYuFLd7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDI0OGE3MDgtMWU1ZC0z YmFjLThmMDEtYmY4ZTYwOGJiMDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANeP9dp452NzqisVswvJo32ocfRZNLJcrPRo57KGl9sydy+RKyFw7R8S yRWXZgJgOUxkzc6sI7Jw/fHdz2McELYQ3/ex1t5Io9Lv+qhXkV9BJw8HVba11ri0 4qaGLgOAwn6S2FvFX5Y0gbZndcjTeBLnB5c3PXPJWz2xRc3UYTegGrPDXM0VbW34 ABye4DDiZvkFU2jxZoUJgTFRi7GtBPgdrk1iRlxqZvUrx7lzuQza+h5+OadrUcAw sEQNvQSGnZBclTD+WKoCWOutrnZZ57UvtiKmUSanRBI2jkxAdtNbr0b+xc3KuCV4 96flHdiFplcs2l6FFSFQIjTES9eG7J0= -----END CERTIFICATE-----Generated at Tue Sep 29 00:59:01 2026 by rpki-client