$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/07da9258-5fd4-34df-8d3d-fe0bc0f5c423.roa File: 07da9258-5fd4-34df-8d3d-fe0bc0f5c423.roa (raw, json) Hash identifier: E2WF4nmL6b6Z/GnMuF2k2Am3embGUZK4A3tpVJ+QIag= Subject key identifier: 07:A0:88:C2:89:B3:45:DB:D6:6B:7D:47:3E:E3:E4:97:E5:75:21:44 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFBD6BCD91DAAB68821980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/07da9258-5fd4-34df-8d3d-fe0bc0f5c423.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:bd:6b:cd:91:da:ab:68:82:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d4cf8e1e-12ec-474e-941f-de696f84fdc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:98:fd:98:2c:e9:af:5e:b1:67:96:32:bc:90: 91:6e:10:5f:bb:f4:66:be:f5:59:d3:72:02:b0:c8: 8e:7b:7c:ba:4f:ee:0c:b4:83:53:65:d5:9c:ec:f0: ae:d6:7b:b4:44:3d:b9:f2:bc:e3:f4:89:e0:fa:4d: 84:b2:c3:9b:60:bd:7f:e8:ab:3a:56:62:af:c9:f8: 57:9d:48:3b:56:2d:3c:9c:6c:91:63:da:67:3d:e7: 48:ad:4f:67:3d:f6:28:b4:97:3e:bd:de:40:b6:ec: 52:7f:13:79:de:a7:ea:6f:ee:9c:a6:8e:27:a7:46: c0:b7:4d:2c:44:ad:aa:98:4a:87:78:6c:cc:dc:7c: 99:e0:a2:98:94:c0:30:da:1c:20:08:a5:e6:5c:94: 83:df:72:31:e8:41:ab:e2:49:07:9c:3d:62:1f:ce: 5b:06:54:42:b1:3a:a6:24:cc:ef:ff:5d:52:bc:12: d7:ce:ed:30:12:d5:c2:07:7c:b0:c5:71:11:b0:9f: 23:e5:9d:80:69:ee:43:75:bf:dc:b9:9f:fc:7d:ce: cf:36:e3:7c:f9:61:bc:aa:e5:e0:68:3b:f2:fa:ed: 3f:ef:c9:b8:9d:97:ca:d2:39:0e:3a:59:da:d8:5f: 8d:68:9a:b9:7f:4e:69:a7:d6:ff:0c:18:c4:a1:55: 88:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A0:88:C2:89:B3:45:DB:D6:6B:7D:47:3E:E3:E4:97:E5:75:21:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/07da9258-5fd4-34df-8d3d-fe0bc0f5c423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:78:91:41:3f:98:24:db:a6:2f:e7:2b:dc:a6:70:40:db:e0: dc:66:35:bd:cc:23:4a:2c:cc:d0:4e:c2:a2:6e:46:18:74:58: 66:6d:f6:37:50:d9:b2:9f:9a:45:f9:0b:87:6c:9a:c3:e2:0f: 52:48:37:13:f8:e6:cb:6e:d6:60:3b:6c:de:27:9a:b7:ff:8b: 86:0e:df:f5:ab:c5:48:26:f4:cb:e2:71:7a:51:9b:be:52:6d: 01:f5:b5:b9:87:00:58:75:f5:49:7e:01:a0:b5:1e:c8:39:ed: 73:e0:b4:9a:55:ae:47:8e:68:68:33:77:7a:ac:d6:a0:35:27: d5:b8:a1:43:bd:be:bd:5c:f3:44:d6:54:30:35:f6:dc:e7:4a: 94:15:38:b4:d4:61:d6:51:af:27:95:d4:07:e5:0a:aa:86:68: 06:5b:f9:c2:9a:b5:13:92:03:23:21:26:7d:7b:1b:e7:a6:71: c4:2b:2e:35:17:d8:41:c7:b1:18:e1:4b:b6:4f:7b:c8:e9:f8: f6:83:44:56:bd:1e:29:8e:ab:a4:a6:ea:a8:b1:b3:ca:e3:57: 52:8a:34:2a:83:15:3f:32:d7:8d:18:14:54:bb:ce:f3:aa:52: 10:56:3d:fb:8f:61:9a:e5:71:7c:63:87:2a:35:10:fe:95:d2: 5c:c5:b2:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k371rzZHaq2iCGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDRjZjhlMWUtMTJlYy00NzRlLTk0MWYtZGU2OTZmODRmZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Jj9mCzpr16xZ5YyvJCRbhBfu/RmvvVZ03IC sMiOe3y6T+4MtINTZdWc7PCu1nu0RD258rzj9Ing+k2EssObYL1/6Ks6VmKvyfhX nUg7Vi08nGyRY9pnPedIrU9nPfYotJc+vd5AtuxSfxN53qfqb+6cpo4np0bAt00s RK2qmEqHeGzM3HyZ4KKYlMAw2hwgCKXmXJSD33Ix6EGr4kkHnD1iH85bBlRCsTqm JMzv/11SvBLXzu0wEtXCB3ywxXERsJ8j5Z2Aae5Ddb/cuZ/8fc7PNuN8+WG8quXg aDvy+u0/78m4nZfK0jkOOlna2F+NaJq5f05pp9b/DBjEoVWIQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAegiMKJs0Xb1mt9Rz7j5JfldSFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDdkYTkyNTgtNWZkNC0z NGRmLThkM2QtZmUwYmMwZjVjNDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANh4kUE/mCTbpi/nK9ymcEDb4NxmNb3MI0oszNBOwqJuRhh0WGZt9jdQ 2bKfmkX5C4dsmsPiD1JINxP45stu1mA7bN4nmrf/i4YO3/WrxUgm9MvicXpRm75S bQH1tbmHAFh19Ul+AaC1Hsg57XPgtJpVrkeOaGgzd3qs1qA1J9W4oUO9vr1c80TW VDA19tznSpQVOLTUYdZRryeV1AflCqqGaAZb+cKatROSAyMhJn17G+emccQrLjUX 2EHHsRjhS7ZPe8jp+PaDRFa9HimOq6Sm6qixs8rjV1KKNCqDFT8y140YFFS7zvOq UhBWPfuPYZrlcXxjhyo1EP6V0lzFsj4= -----END CERTIFICATE-----Generated at Thu Mar 26 05:06:35 2026 by rpki-client