$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01e17b2c-98c7-37b0-acc2-846e6503a6e6.roa File: 01e17b2c-98c7-37b0-acc2-846e6503a6e6.roa (raw, json) Hash identifier: WYmRNim+knzrqWAXEeILeurwss+EWsqQs7H31KBtgEM= Subject key identifier: B0:90:48:89:C1:CD:C1:4D:F4:33:65:D8:0E:44:8E:FC:39:DA:B1:62 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFBF1807941A15C5C8E980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01e17b2c-98c7-37b0-acc2-846e6503a6e6.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:bf:18:07:94:1a:15:c5:c8:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d5d517f6-b084-4490-a67c-9985c3b0e627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b3:34:c5:67:7e:fb:0f:b5:41:f7:14:06:86: a1:64:16:cc:df:13:d0:61:2a:6b:b7:5d:f9:3f:34: e8:28:76:cf:71:db:1b:b1:0d:10:d0:6b:0a:64:29: fc:9a:ee:da:b2:84:d8:48:ea:46:13:cb:08:0a:15: af:82:11:47:5f:d1:64:f8:21:07:4b:97:8c:f3:63: db:90:e2:28:a7:5d:39:bb:bd:fc:a3:b2:8b:b1:2b: b3:7f:97:0a:d0:76:81:c9:26:53:be:90:ff:b5:5e: 04:7e:4a:ed:6c:31:02:00:2d:0c:23:75:3b:58:98: e5:eb:42:db:06:19:35:bf:73:1e:2a:d2:64:71:74: fd:ac:5c:9a:6e:27:bf:73:d3:e5:17:1b:9a:e5:1a: 14:a8:a2:dc:fe:f6:f4:93:f8:d4:ce:b6:39:8b:0b: 29:1b:47:70:91:7d:d7:fe:a8:ba:9e:c3:cf:26:ca: c7:5c:14:70:9f:73:53:4a:0c:4f:7c:ce:de:85:6c: 6a:ff:e4:b4:fc:2a:bd:08:2f:1d:b5:b0:2d:52:26: 2c:9e:3f:fa:f8:19:31:71:00:61:ba:64:7e:d2:dc: ac:a5:0d:e0:64:d9:b9:fb:76:6e:b7:7e:45:ff:09: 11:bb:21:9c:19:a7:4b:82:04:e2:11:9a:2f:ac:3b: 41:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:90:48:89:C1:CD:C1:4D:F4:33:65:D8:0E:44:8E:FC:39:DA:B1:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01e17b2c-98c7-37b0-acc2-846e6503a6e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:19:b3:29:ba:4e:9c:0b:b5:17:51:e8:7d:6f:ba:f0:ae:06: 7f:25:93:49:dc:66:17:b9:30:68:9e:23:76:95:9d:bb:58:91: e6:62:f5:bb:e4:7b:2d:20:c5:c1:1b:54:e1:7a:0a:ce:4b:13: e0:18:dc:f3:9f:bc:02:f9:a3:df:e1:48:6b:ce:bc:72:99:0c: 54:c2:26:77:9b:a3:ff:31:1f:5e:21:97:91:8a:86:7b:23:b1: 53:ae:84:79:12:92:b6:da:ab:55:ba:3b:57:a3:96:eb:d2:98: 53:54:1d:dd:60:fe:8a:76:e3:11:04:dd:56:cd:82:a5:96:4c: 5d:fc:a0:60:9b:d7:0b:b4:ef:9e:9f:04:05:02:a5:7f:35:2b: e6:e5:80:32:34:f6:ee:50:8a:15:dd:94:01:9f:42:20:eb:97: e4:6c:5a:a5:f8:83:cc:9b:f1:34:73:80:96:2c:7c:fe:a1:b3: 5a:4f:aa:ec:d1:7f:11:f9:12:35:d8:e0:0f:fc:0f:f2:71:7a: c6:cb:78:08:84:76:15:69:81:d4:64:e1:29:0b:3e:59:0f:3d: a1:64:6c:57:89:ac:fd:af:68:77:95:89:8d:d1:6f:51:35:36: 14:42:20:36:66:e8:bb:8f:e6:5a:7f:bd:b9:0d:ef:03:0d:aa: 18:10:f1:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k378YB5QaFcXI6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDVkNTE3ZjYtYjA4NC00NDkwLWE2N2MtOTk4NWMzYjBlNjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7M0xWd++w+1QfcUBoahZBbM3xPQYSprt135 PzToKHbPcdsbsQ0Q0GsKZCn8mu7asoTYSOpGE8sIChWvghFHX9Fk+CEHS5eM82Pb kOIop105u738o7KLsSuzf5cK0HaBySZTvpD/tV4EfkrtbDECAC0MI3U7WJjl60Lb Bhk1v3MeKtJkcXT9rFyabie/c9PlFxua5RoUqKLc/vb0k/jUzrY5iwspG0dwkX3X /qi6nsPPJsrHXBRwn3NTSgxPfM7ehWxq/+S0/Cq9CC8dtbAtUiYsnj/6+BkxcQBh umR+0tyspQ3gZNm5+3Zut35F/wkRuyGcGadLggTiEZovrDtBwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCQSInBzcFN9DNl2A5Ejvw52rFiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDFlMTdiMmMtOThjNy0z N2IwLWFjYzItODQ2ZTY1MDNhNmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8Zsym6TpwLtRdR6H1vuvCuBn8lk0ncZhe5MGieI3aVnbtYkeZi9bvk ey0gxcEbVOF6Cs5LE+AY3POfvAL5o9/hSGvOvHKZDFTCJnebo/8xH14hl5GKhnsj sVOuhHkSkrbaq1W6O1ejluvSmFNUHd1g/op24xEE3VbNgqWWTF38oGCb1wu0756f BAUCpX81K+blgDI09u5QihXdlAGfQiDrl+RsWqX4g8yb8TRzgJYsfP6hs1pPquzR fxH5EjXY4A/8D/JxesbLeAiEdhVpgdRk4SkLPlkPPaFkbFeJrP2vaHeViY3Rb1E1 NhRCIDZm6LuP5lp/vbkN7wMNqhgQ8fg= -----END CERTIFICATE-----Generated at Thu Mar 26 18:21:42 2026 by rpki-client