$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/109a2877-8f41-3e6a-b026-4ee9dbd03a1e.roa File: 109a2877-8f41-3e6a-b026-4ee9dbd03a1e.roa (raw, json) Hash identifier: RpyxdP6t2UP8YDe8ywJC5bVWrYPBItFhs2RZPDjTdIw= Subject key identifier: F3:BB:98:5C:59:11:0C:EE:17:0B:F5:9C:3B:9C:91:D1:77:0C:7E:28 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFBBF52BD4B3E31266F160 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/109a2877-8f41-3e6a-b026-4ee9dbd03a1e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:bb:f5:2b:d4:b3:e3:12:66:f1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3db8c8f2-2f92-49db-977a-65618f02b30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ad:88:30:0f:94:22:8b:62:d0:a9:0d:a4:a9: f1:2d:e3:ec:ac:11:c8:55:54:1e:a6:75:dc:8e:f3: 95:5e:ad:26:13:40:f2:2e:4d:6a:e2:a7:c0:b6:f2: c9:e8:45:54:25:5b:97:4b:ff:47:d8:38:98:5a:9e: 08:b1:1f:41:02:18:c0:c2:c9:d9:38:6c:c5:dd:f9: 86:0f:16:36:e2:5c:a7:45:ec:4b:7b:27:ae:08:03: 8b:9b:09:b4:32:ee:c6:8d:c8:7b:5d:11:ad:af:08: f9:16:51:6d:8a:35:90:12:20:af:ef:4e:69:33:d6: c1:33:29:aa:01:a0:aa:c9:e5:93:e9:92:8a:25:d2: 34:d0:5b:0d:14:62:86:99:cd:e2:47:39:14:9d:2e: 56:ee:07:37:47:ef:b1:dd:3b:5f:79:97:98:a6:1c: d0:52:a9:5f:77:f4:3f:e3:02:85:61:08:de:14:5b: 36:b4:2b:bf:a3:c1:e8:13:4a:5d:19:84:95:1c:9f: 5e:d0:e1:8c:a0:60:07:4d:5f:af:10:4f:50:f5:86: 5e:f5:90:d3:fc:ae:2c:57:01:43:51:5c:c5:94:9d: f4:49:86:bf:88:31:70:88:57:b0:cb:d6:f9:2e:2b: d0:1c:3c:25:a9:e0:a4:38:60:1e:51:14:ec:fc:14: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BB:98:5C:59:11:0C:EE:17:0B:F5:9C:3B:9C:91:D1:77:0C:7E:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/109a2877-8f41-3e6a-b026-4ee9dbd03a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:79:bf:98:9f:55:53:98:b0:46:c0:88:05:09:0a:00:67:12: b3:68:99:7a:64:3f:ea:29:a1:49:51:aa:da:b6:4d:d0:ea:fe: bd:de:07:8a:5f:32:3f:8e:a2:f0:41:74:49:29:bf:ed:a0:91: 83:08:6a:ce:8d:30:fb:e1:79:64:46:cf:88:90:f8:a0:72:48: 72:a8:9a:25:19:42:6d:99:f1:8f:5c:e9:b8:b5:5d:6b:9a:87: 9a:83:6f:23:b9:0c:8c:56:bd:bb:38:f3:9f:d6:1d:83:b2:25: 8f:04:0f:7d:06:f4:84:22:85:24:24:54:7a:3a:76:64:a3:1a: a4:4e:e7:e2:52:33:a5:60:c0:04:a6:a7:85:35:e3:df:c7:0e: e0:d1:8b:4c:f4:b7:c5:94:1e:6b:06:81:2c:c4:37:e7:80:dc: 57:9b:4a:c1:57:74:8a:67:18:ab:11:e2:19:32:ce:29:c0:05: 46:d5:f2:aa:9f:92:14:68:86:52:f6:f0:4e:75:09:91:0e:75: ee:14:d0:a9:c9:6a:62:a0:ce:dc:d7:96:18:b0:dd:cc:07:ab: 70:4c:3e:38:00:ab:36:94:07:20:37:3e:23:e6:8f:1c:d1:11: 29:e7:c9:dc:7f:69:67:f7:f5:67:0a:27:9f:19:72:84:7f:a9: bf:66:d5:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37v1K9Sz4xJm8WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk M2RiOGM4ZjItMmY5Mi00OWRiLTk3N2EtNjU2MThmMDJiMzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK2IMA+UIoti0KkNpKnxLePsrBHIVVQepnXc jvOVXq0mE0DyLk1q4qfAtvLJ6EVUJVuXS/9H2DiYWp4IsR9BAhjAwsnZOGzF3fmG DxY24lynRexLeyeuCAOLmwm0Mu7Gjch7XRGtrwj5FlFtijWQEiCv705pM9bBMymq AaCqyeWT6ZKKJdI00FsNFGKGmc3iRzkUnS5W7gc3R++x3TtfeZeYphzQUqlfd/Q/ 4wKFYQjeFFs2tCu/o8HoE0pdGYSVHJ9e0OGMoGAHTV+vEE9Q9YZe9ZDT/K4sVwFD UVzFlJ30SYa/iDFwiFewy9b5LivQHDwlqeCkOGAeURTs/BTWNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPO7mFxZEQzuFwv1nDuckdF3DH4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTA5YTI4NzctOGY0MS0z ZTZhLWIwMjYtNGVlOWRiZDAzYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANV5v5ifVVOYsEbAiAUJCgBnErNomXpkP+opoUlRqtq2TdDq/r3eB4pf Mj+OovBBdEkpv+2gkYMIas6NMPvheWRGz4iQ+KBySHKomiUZQm2Z8Y9c6bi1XWua h5qDbyO5DIxWvbs485/WHYOyJY8ED30G9IQihSQkVHo6dmSjGqRO5+JSM6VgwASm p4U149/HDuDRi0z0t8WUHmsGgSzEN+eA3FebSsFXdIpnGKsR4hkyzinABUbV8qqf khRohlL28E51CZEOde4U0KnJamKgztzXlhiw3cwHq3BMPjgAqzaUByA3PiPmjxzR ESnnydx/aWf39WcKJ58ZcoR/qb9m1RE= -----END CERTIFICATE-----Generated at Thu Mar 26 15:04:22 2026 by rpki-client