$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/083c10f2-1ad9-3491-9a35-4cf1a0b25ff3.roa File: 083c10f2-1ad9-3491-9a35-4cf1a0b25ff3.roa (raw, json) Hash identifier: tPuiy5I/k2OMxIf2cjpTbUdoaD6pPWo4/DA81LPMH7E= Subject key identifier: 5C:BD:17:CD:03:69:1C:76:52:B8:23:4C:FF:A8:18:9E:1D:24:B3:F5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFEE72A27553182576F40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/083c10f2-1ad9-3491-9a35-4cf1a0b25ff3.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fe:e7:2a:27:55:31:82:57:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3fb89a3d-12c0-4554-8d27-8cbf3be27050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6f:d2:50:6f:17:8f:35:00:35:92:49:45:6e: 82:5b:ad:26:48:c0:be:41:17:20:fb:8d:d5:40:1d: f9:7d:6a:24:05:23:23:e0:4c:56:16:f6:6e:60:3b: c0:5b:29:67:80:1d:5f:a4:3c:52:3c:70:89:69:41: 58:b3:c1:0d:e4:ab:e9:e5:72:2b:32:58:87:c3:1b: 54:e6:c0:1a:75:6b:0f:ea:31:82:4c:ae:01:bb:36: d6:1a:ca:df:2d:0a:02:92:03:49:c3:b1:36:3e:73: ec:af:63:92:bf:c6:72:e2:d1:8c:b8:b2:25:44:63: 6a:1f:4e:cb:82:05:03:7e:2c:38:e8:2a:66:a6:ed: be:89:ca:a9:35:4c:ec:a1:b9:80:7a:c9:7b:01:78: dc:66:f9:1b:77:77:e0:f4:19:6f:43:f7:e7:ea:b0: 6c:b6:8f:b1:cb:61:c5:03:46:0f:9e:94:75:3a:5c: 10:3c:20:b7:46:eb:62:61:a8:c6:fc:58:4e:c0:df: fd:b7:b8:b8:4c:30:10:8d:14:70:24:f8:cb:7e:f5: 2a:ef:9c:af:af:64:9e:4e:27:a5:e3:07:ad:e9:de: b7:fb:d6:7d:9f:9c:71:86:77:fe:ea:af:8c:78:68: 70:c4:16:dd:47:31:bd:fa:c8:ac:b6:cc:ce:f3:6a: 4a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BD:17:CD:03:69:1C:76:52:B8:23:4C:FF:A8:18:9E:1D:24:B3:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/083c10f2-1ad9-3491-9a35-4cf1a0b25ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e0:5e:67:8b:91:84:75:13:7c:c6:cc:9e:21:51:60:a9:7f: cd:22:59:64:c9:9d:88:64:3b:c8:58:88:65:15:b5:19:e1:3d: cc:dc:07:fd:96:d8:2b:ff:36:cb:32:24:e4:7d:8c:b2:3f:3f: 91:6d:a9:fe:df:fa:74:29:57:3b:47:c5:58:32:3d:7e:04:34: 91:cb:80:46:3a:13:34:1b:d7:dd:88:a1:1d:b2:8a:b3:52:7b: 0f:1a:99:a6:f0:fd:fb:57:07:6d:aa:25:9f:df:cb:7f:7a:46: f5:63:65:04:7b:57:1e:e1:13:41:e9:f2:7d:a9:c2:36:bc:da: 8d:2e:ed:fa:08:ed:23:f7:06:a6:e4:00:5c:2d:79:0d:89:cb: 8f:e2:ca:c4:1a:d5:02:f5:45:6d:a9:1c:64:58:ed:53:f5:51: 54:45:b3:ef:00:9b:11:e5:87:7d:89:ec:bf:91:41:c7:17:00: a2:9f:ce:5b:5e:7f:41:e8:ca:00:44:1b:32:20:28:ca:58:3f: 1f:13:5a:28:68:e6:c4:d0:d1:66:82:0d:21:bf:18:2c:9c:46: 04:e9:35:9c:c2:74:08:2e:6e:e5:1a:36:8e:4b:0f:06:ba:eb: f5:7d:df:43:60:50:bf:54:0a:71:25:63:a7:f3:34:95:5c:25: 15:0a:ac:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/7nKidVMYJXb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk M2ZiODlhM2QtMTJjMC00NTU0LThkMjctOGNiZjNiZTI3MDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm/SUG8XjzUANZJJRW6CW60mSMC+QRcg+43V QB35fWokBSMj4ExWFvZuYDvAWylngB1fpDxSPHCJaUFYs8EN5Kvp5XIrMliHwxtU 5sAadWsP6jGCTK4BuzbWGsrfLQoCkgNJw7E2PnPsr2OSv8Zy4tGMuLIlRGNqH07L ggUDfiw46Cpmpu2+icqpNUzsobmAesl7AXjcZvkbd3fg9BlvQ/fn6rBsto+xy2HF A0YPnpR1OlwQPCC3RutiYajG/FhOwN/9t7i4TDAQjRRwJPjLfvUq75yvr2SeTiel 4wet6d63+9Z9n5xxhnf+6q+MeGhwxBbdRzG9+sistszO82pK4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFy9F80DaRx2UrgjTP+oGJ4dJLP1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDgzYzEwZjItMWFkOS0z NDkxLTlhMzUtNGNmMWEwYjI1ZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfgXmeLkYR1E3zGzJ4hUWCpf80iWWTJnYhkO8hYiGUVtRnhPczcB/2W 2Cv/NssyJOR9jLI/P5Ftqf7f+nQpVztHxVgyPX4ENJHLgEY6EzQb192IoR2yirNS ew8amabw/ftXB22qJZ/fy396RvVjZQR7Vx7hE0Hp8n2pwja82o0u7foI7SP3Bqbk AFwteQ2Jy4/iysQa1QL1RW2pHGRY7VP1UVRFs+8AmxHlh32J7L+RQccXAKKfzlte f0HoygBEGzIgKMpYPx8TWiho5sTQ0WaCDSG/GCycRgTpNZzCdAgubuUaNo5LDwa6 6/V930NgUL9UCnElY6fzNJVcJRUKrHc= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:08 2026 by rpki-client