$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03869d3c-77f4-3705-aed3-af0b2f180872.roa File: 03869d3c-77f4-3705-aed3-af0b2f180872.roa (raw, json) Hash identifier: fa4sQHCGP9gjsxBBlZW5xLcDbp11kXOFudlLacKRs2M= Subject key identifier: 95:89:E9:E0:4C:A6:58:3B:BC:1F:2F:16:4D:ED:B2:D5:8D:9D:ED:5C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E06687F572C2F3CF402680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03869d3c-77f4-3705-aed3-af0b2f180872.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:66:87:f5:72:c2:f3:cf:40:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1d2e819b-4950-4f0d-939f-07681b439626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b0:9c:bb:a2:b0:b3:47:30:19:62:fa:1e:15: b6:20:46:a8:0c:8a:5a:e6:4d:e5:99:b5:52:ab:03: a8:e1:00:25:5e:21:f0:d2:f9:da:1c:15:fb:ac:ce: 28:5f:86:18:94:c3:d9:c4:62:a5:06:6a:c8:a0:89: 18:aa:aa:9d:a7:36:f8:f2:09:8d:3c:7e:b5:b9:0e: b7:d6:01:99:3c:d4:05:9c:3a:0d:e3:5e:23:aa:33: 11:15:a5:19:e9:10:cb:25:7a:e7:e4:91:72:07:30: ac:4b:ab:61:64:8a:b0:17:30:bd:7f:d2:aa:66:e5: f7:06:42:c9:a8:7e:2e:90:e5:cb:c4:8e:93:80:f5: 21:6f:13:36:b9:92:8b:97:ff:36:f0:c0:25:f7:c0: dd:81:f5:38:ae:ef:3a:04:b3:47:76:8b:80:40:30: 2f:15:e7:da:3a:5e:35:02:18:a8:6b:b9:1d:2a:9c: 9a:9a:02:e9:fd:38:b4:1d:cd:ec:43:c7:9f:a6:2b: fe:d1:f1:a5:25:ef:ba:68:0d:f5:2e:d4:e9:c5:4f: d0:9c:89:3e:d9:1f:9e:72:09:db:e1:66:90:ae:ed: a4:48:3f:84:70:c7:0a:69:72:52:b6:8d:b5:f7:6d: 4e:43:e4:20:58:6c:37:c5:95:30:c3:e1:2f:89:58: 3f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:89:E9:E0:4C:A6:58:3B:BC:1F:2F:16:4D:ED:B2:D5:8D:9D:ED:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03869d3c-77f4-3705-aed3-af0b2f180872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:72:4b:db:75:d2:e1:9a:d2:66:ba:88:fd:8a:ce:24:50:ea: 8a:db:d9:35:75:cd:df:b3:af:08:50:11:50:e4:7d:d2:d5:14: 8f:c5:9f:f4:d2:d6:ab:eb:1f:94:11:a5:77:be:d5:45:30:85: e8:38:02:81:ca:55:9c:e2:ed:c4:49:21:76:44:3f:db:dd:c8: f0:d4:7f:8e:47:b3:3d:49:c8:a9:c3:84:e0:f0:bb:01:fe:67: ae:5d:23:8f:15:2a:bd:9d:10:fb:51:c9:3f:b5:d7:55:ac:38: 37:e8:c1:53:3e:c5:dc:df:39:10:9a:be:9e:5c:2e:9d:c8:77: 97:f7:22:ed:88:54:4e:28:a7:2c:9c:d3:e6:8e:b5:1d:9d:c5: 63:df:c7:13:ad:46:54:43:6c:d9:b1:d4:5d:e7:ac:c8:c6:7a: 99:a0:23:b5:c6:76:28:f9:62:58:22:e6:36:14:59:31:22:0b: 8b:1c:de:27:27:4c:ca:31:1b:0c:d4:97:b6:8d:e3:86:64:22: 17:25:39:9c:5e:d2:08:14:c5:e3:4d:f9:9c:31:e2:95:e1:5a: b8:30:84:50:1b:8b:38:b2:0d:cd:f0:c8:8c:10:6e:7d:06:27: 37:70:ca:38:cd:15:a2:2b:8c:15:48:ea:e9:42:a1:f9:87:1c: 00:7c:80:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GaH9XLC889AJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MWQyZTgxOWItNDk1MC00ZjBkLTkzOWYtMDc2ODFiNDM5NjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbCcu6Kws0cwGWL6HhW2IEaoDIpa5k3lmbVS qwOo4QAlXiHw0vnaHBX7rM4oX4YYlMPZxGKlBmrIoIkYqqqdpzb48gmNPH61uQ63 1gGZPNQFnDoN414jqjMRFaUZ6RDLJXrn5JFyBzCsS6thZIqwFzC9f9KqZuX3BkLJ qH4ukOXLxI6TgPUhbxM2uZKLl/828MAl98DdgfU4ru86BLNHdouAQDAvFefaOl41 Ahioa7kdKpyamgLp/Ti0Hc3sQ8efpiv+0fGlJe+6aA31LtTpxU/QnIk+2R+ecgnb 4WaQru2kSD+EcMcKaXJSto21921OQ+QgWGw3xZUww+EviVg/mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWJ6eBMplg7vB8vFk3tstWNne1cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDM4NjlkM2MtNzdmNC0z NzA1LWFlZDMtYWYwYjJmMTgwODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK15MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpyS9t10uGa0ma6iP2KziRQ6orb2TV1zd+zrwhQEVDkfdLVFI/Fn/TS 1qvrH5QRpXe+1UUwheg4AoHKVZzi7cRJIXZEP9vdyPDUf45Hsz1JyKnDhODwuwH+ Z65dI48VKr2dEPtRyT+111WsODfowVM+xdzfORCavp5cLp3Id5f3Iu2IVE4opyyc 0+aOtR2dxWPfxxOtRlRDbNmx1F3nrMjGepmgI7XGdij5Ylgi5jYUWTEiC4sc3icn TMoxGwzUl7aN44ZkIhclOZxe0ggUxeNN+Zwx4pXhWrgwhFAbiziyDc3wyIwQbn0G JzdwyjjNFaIrjBVI6ulCofmHHAB8gBE= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:22 2026 by rpki-client