$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08ea6e2f-adac-3e05-8c71-7a86b061972f.roa File: 08ea6e2f-adac-3e05-8c71-7a86b061972f.roa (raw, json) Hash identifier: BxjQ2G6ytJKXFoOCU+FDUKWzSsddsDDFYVpRgNI7avM= Subject key identifier: DE:3C:CD:5E:B3:94:1D:00:6A:BF:02:E2:15:22:C2:E6:DC:ED:55:F7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0664890A5AD8A0BF01D80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08ea6e2f-adac-3e05-8c71-7a86b061972f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:66:48:90:a5:ad:8a:0b:f0:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=330a2140-0dd5-48c8-b5ff-b893342ac0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:5b:24:cb:02:94:c7:da:f7:55:4a:07:cc: 3e:99:e1:bb:03:f5:9a:cc:30:34:b0:a9:c5:c7:13: 00:71:c0:1c:1b:01:35:92:4f:83:27:22:04:48:b1: 78:5f:cd:01:9a:89:f0:50:38:ea:6e:ac:b3:95:6a: 74:f4:47:e0:2d:a8:6b:50:6e:5d:ce:80:59:8f:5d: 29:50:73:45:2e:e3:e3:d9:cf:26:46:e4:0a:1f:53: 7a:fb:57:81:91:1d:d8:b6:90:c8:2f:4a:ac:ee:b1: 90:01:1c:f7:93:b3:46:7b:9d:77:c4:6b:d9:84:c1: 2c:a0:d3:6a:37:59:e9:07:57:68:09:9f:47:43:4e: c7:5f:02:20:bb:9d:75:98:13:f9:a9:87:c4:aa:f7: a6:af:8b:4e:01:0e:e6:a8:e5:ac:26:6a:b0:38:e1: b5:82:6c:fe:e8:a5:aa:22:86:9f:92:27:49:dd:94: af:e8:ad:71:f1:11:89:8e:6f:5d:0f:d4:64:34:d6: ed:6d:8d:e7:03:8a:c0:60:e5:54:fe:71:6a:54:58: cb:2c:2d:eb:99:bb:97:4d:b9:fb:e0:66:2e:a4:88: b8:3e:16:29:0c:e6:f6:eb:bb:ed:d1:bd:11:6f:23: 1b:21:20:96:77:e6:8c:90:2c:cf:1e:00:6d:45:42: b6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3C:CD:5E:B3:94:1D:00:6A:BF:02:E2:15:22:C2:E6:DC:ED:55:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08ea6e2f-adac-3e05-8c71-7a86b061972f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:22:4f:49:e3:60:6f:f7:aa:7f:a4:8b:68:ce:71:c6:72:57: 8d:b0:15:7e:02:0e:87:3a:c2:ab:d7:f1:3f:61:9b:f2:70:66: 5a:e7:d5:5a:8e:bc:2b:d8:2b:d9:3a:d6:98:f8:2a:ca:fa:c6: 41:57:76:77:50:22:1f:b9:fa:cb:06:7a:c5:0f:e0:7f:55:5c: f8:ae:8b:c8:86:a0:63:c9:52:52:63:53:61:97:87:20:9c:f2: 14:2b:2e:16:4f:42:8c:85:ad:40:6e:95:e8:e4:3f:1c:d0:f3: e5:c4:c1:06:35:e5:08:52:ea:c5:3e:ac:7d:07:2f:c7:5c:b5: f0:2b:c1:66:ce:3f:92:f1:17:c5:3e:c3:4f:ac:b4:05:c5:10: ae:29:73:d3:92:9f:fe:56:55:7e:ee:56:ae:87:0f:9d:d4:5b: 33:7b:83:5a:4d:f4:52:44:64:a0:05:1a:0b:b7:12:85:73:4f: d0:83:19:b2:c1:24:0b:a8:c2:23:5c:ee:82:15:33:42:7c:04: 6a:84:b6:b3:76:e5:42:da:ec:f7:9f:ab:34:58:98:9b:fa:2b: 9f:17:df:1a:bb:f1:3a:73:af:4d:82:56:f0:85:f1:f9:a8:6f: 1b:ea:6d:64:f1:04:92:38:fe:7a:9b:50:ff:65:57:ea:13:36: 28:24:2f:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GZIkKWtigvwHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MzMwYTIxNDAtMGRkNS00OGM4LWI1ZmYtYjg5MzM0MmFjMGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp5bJMsClMfa91VKB8w+meG7A/WazDA0sKnF xxMAccAcGwE1kk+DJyIESLF4X80BmonwUDjqbqyzlWp09EfgLahrUG5dzoBZj10p UHNFLuPj2c8mRuQKH1N6+1eBkR3YtpDIL0qs7rGQARz3k7NGe513xGvZhMEsoNNq N1npB1doCZ9HQ07HXwIgu511mBP5qYfEqvemr4tOAQ7mqOWsJmqwOOG1gmz+6KWq IoafkidJ3ZSv6K1x8RGJjm9dD9RkNNbtbY3nA4rAYOVU/nFqVFjLLC3rmbuXTbn7 4GYupIi4PhYpDOb267vt0b0RbyMbISCWd+aMkCzPHgBtRUK2dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN48zV6zlB0Aar8C4hUiwubc7VX3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDhlYTZlMmYtYWRhYy0z ZTA1LThjNzEtN2E4NmIwNjE5NzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsiT0njYG/3qn+ki2jOccZyV42wFX4CDoc6wqvX8T9hm/JwZlrn1VqO vCvYK9k61pj4Ksr6xkFXdndQIh+5+ssGesUP4H9VXPiui8iGoGPJUlJjU2GXhyCc 8hQrLhZPQoyFrUBulejkPxzQ8+XEwQY15QhS6sU+rH0HL8dctfArwWbOP5LxF8U+ w0+stAXFEK4pc9OSn/5WVX7uVq6HD53UWzN7g1pN9FJEZKAFGgu3EoVzT9CDGbLB JAuowiNc7oIVM0J8BGqEtrN25ULa7PefqzRYmJv6K58X3xq78Tpzr02CVvCF8fmo bxvqbWTxBJI4/nqbUP9lV+oTNigkLyc= -----END CERTIFICATE-----Generated at Thu Mar 26 14:29:26 2026 by rpki-client