$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/067c1a6e-8f24-30fb-9279-e47359944c80.roa File: 067c1a6e-8f24-30fb-9279-e47359944c80.roa (raw, json) Hash identifier: Do01fLTdhabKU7EEtSkfd4rEfU/oxFvbwYO3eg3SH7s= Subject key identifier: 31:C7:5A:82:82:FF:71:5B:4C:12:B0:43:68:54:D1:37:32:93:DC:64 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0BAE3ABED4592100DF700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/067c1a6e-8f24-30fb-9279-e47359944c80.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ba:e3:ab:ed:45:92:10:0d:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3e16d7af-8b60-4179-b978-ad8590494b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:80:06:b7:2b:9d:eb:37:73:18:34:ae:8c:c2: 61:dd:e5:88:4c:87:38:dc:4e:7a:1a:89:8b:cb:53: 51:0f:dc:32:80:e2:8c:21:a5:14:92:2b:e9:75:23: 76:92:2e:46:9d:34:04:c6:67:a2:2e:4a:8a:f8:3a: 53:ec:45:b6:c4:45:79:02:f3:fb:34:b6:f9:79:7e: 89:c0:87:6e:67:cb:7c:05:92:bb:d9:70:30:a8:3f: c0:c2:16:05:16:66:60:e7:96:25:56:94:cf:a2:87: 00:62:f7:2e:f2:a3:5d:03:2c:ad:a5:26:9d:fb:38: da:bc:d6:a3:91:3f:b0:38:72:7a:ad:b5:cf:a6:30: 10:09:69:41:a1:00:97:42:67:f8:5c:a3:ca:2c:ae: be:10:4d:03:7b:81:a7:fa:e1:35:bd:8f:6f:22:60: 49:68:68:2e:5e:ba:1a:dd:06:db:9d:79:83:aa:74: c2:34:62:1d:2a:02:b3:a2:0d:cb:19:e2:e8:f4:69: 47:1c:b0:30:ae:c3:18:af:0a:b7:2c:11:b0:26:67: 5f:97:69:fa:8c:c7:1b:e4:73:db:49:f8:7b:27:dd: c6:2d:08:e1:65:49:16:94:03:14:0b:da:b0:3d:86: 5f:5f:0f:58:f7:f5:1b:20:9c:b1:21:3f:20:65:57: bb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C7:5A:82:82:FF:71:5B:4C:12:B0:43:68:54:D1:37:32:93:DC:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/067c1a6e-8f24-30fb-9279-e47359944c80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:02:f2:3a:f9:08:82:e0:06:d5:0c:c0:91:ea:12:2c:5e:69: d3:6a:09:c4:bc:ac:19:3f:3a:ba:66:d5:ca:78:86:cc:9f:44: 49:fb:1e:48:4d:bb:21:63:f1:35:da:28:2d:ac:c6:19:bf:cd: b9:13:96:5a:e5:7b:ec:11:b8:d3:ec:18:4b:14:82:71:a3:18: e2:0c:6f:f0:20:dc:da:aa:f1:d7:84:4b:a0:3f:f6:cc:36:fe: 2c:cb:6d:b8:fa:fe:f6:22:77:25:84:88:1e:42:ca:b3:fe:ed: bc:ce:c1:64:5c:f6:72:be:1f:bb:3e:4f:48:4b:78:c4:51:15: 63:64:52:bc:08:c0:84:40:9f:56:6a:8a:3b:79:7c:70:c0:48: 87:e9:5d:c3:d8:98:62:e9:6c:b7:e2:d7:27:13:92:23:7a:61: 54:b3:4f:86:57:c3:18:82:21:9b:34:55:47:84:6c:6b:8a:cd: 59:75:d9:cf:9a:55:44:33:72:25:97:d9:14:88:19:e9:27:40: 32:87:04:c9:e5:46:4c:47:9a:fb:98:9d:be:17:47:b7:bc:94: a9:ea:a8:af:25:19:c0:f6:b5:e2:13:3e:69:80:58:57:6b:ce: 36:90:79:4b:31:21:d8:99:0b:c2:f0:78:9e:8c:16:1a:c1:8e: 65:a7:a5:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Lrjq+1FkhAN9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk M2UxNmQ3YWYtOGI2MC00MTc5LWI5NzgtYWQ4NTkwNDk0YjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYAGtyud6zdzGDSujMJh3eWITIc43E56GomL y1NRD9wygOKMIaUUkivpdSN2ki5GnTQExmeiLkqK+DpT7EW2xEV5AvP7NLb5eX6J wIduZ8t8BZK72XAwqD/AwhYFFmZg55YlVpTPoocAYvcu8qNdAyytpSad+zjavNaj kT+wOHJ6rbXPpjAQCWlBoQCXQmf4XKPKLK6+EE0De4Gn+uE1vY9vImBJaGguXroa 3QbbnXmDqnTCNGIdKgKzog3LGeLo9GlHHLAwrsMYrwq3LBGwJmdfl2n6jMcb5HPb Sfh7J93GLQjhZUkWlAMUC9qwPYZfXw9Y9/UbIJyxIT8gZVe7+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHHWoKC/3FbTBKwQ2hU0Tcyk9xkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDY3YzFhNmUtOGYyNC0z MGZiLTkyNzktZTQ3MzU5OTQ0YzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL0C8jr5CILgBtUMwJHqEixeadNqCcS8rBk/Orpm1cp4hsyfREn7HkhN uyFj8TXaKC2sxhm/zbkTllrle+wRuNPsGEsUgnGjGOIMb/Ag3Nqq8deES6A/9sw2 /izLbbj6/vYidyWEiB5CyrP+7bzOwWRc9nK+H7s+T0hLeMRRFWNkUrwIwIRAn1Zq ijt5fHDASIfpXcPYmGLpbLfi1ycTkiN6YVSzT4ZXwxiCIZs0VUeEbGuKzVl12c+a VUQzciWX2RSIGeknQDKHBMnlRkxHmvuYnb4XR7e8lKnqqK8lGcD2teITPmmAWFdr zjaQeUsxIdiZC8LweJ6MFhrBjmWnpcA= -----END CERTIFICATE-----Generated at Thu Mar 26 22:12:10 2026 by rpki-client