$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12304d24-1c4d-30ee-8950-9cb3fd480a88.roa File: 12304d24-1c4d-30ee-8950-9cb3fd480a88.roa (raw, json) Hash identifier: Bl7niEpmeniYSWMWpujichfQcc5I4oE17bivJwHSFAo= Subject key identifier: DE:98:7D:EE:6E:88:D2:79:B9:85:FD:F0:59:B6:0B:0A:73:A0:96:99 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0AF5D85C5E6EBED1C2C60 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12304d24-1c4d-30ee-8950-9cb3fd480a88.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:af:5d:85:c5:e6:eb:ed:1c:2c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d3d2addf-5d0f-4c53-839b-ba5aec57b5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:eb:60:d5:17:21:f5:96:09:f0:be:d3:3f:fc: 3d:a2:40:93:fc:b8:af:4c:b4:6e:be:1b:d2:6b:53: 88:4e:43:60:4d:e0:84:a7:53:35:0b:b0:30:ca:9c: b7:ae:03:ba:73:b3:93:92:88:01:af:d8:70:d4:24: 34:5b:2e:05:ad:2c:cf:42:3c:7a:41:f5:6c:a5:b4: 46:7d:3d:7d:26:2e:5d:07:2c:d2:97:42:b1:f9:ad: cf:f7:9d:74:8f:51:b4:be:7c:b8:88:55:84:42:11: f5:1c:59:56:44:39:25:a3:cc:27:0f:2a:f2:f2:be: 7b:2c:5c:97:48:db:be:b7:60:83:a3:7a:cb:23:e6: 32:da:77:c0:7b:3c:cf:b2:99:bb:93:1e:5f:20:26: 40:58:36:b4:cd:9f:50:18:dd:43:35:b9:d8:64:15: fe:c5:ca:44:32:4e:21:80:19:46:9e:29:0d:d3:35: 20:db:23:63:e5:2c:48:fa:d7:5c:df:e0:95:76:7d: 18:f8:97:34:29:c9:e5:ef:d1:ca:46:1c:94:49:1d: ba:55:4c:02:df:2c:b9:03:2c:81:cd:05:08:d8:2a: 09:2e:5d:64:8f:1a:53:71:d7:03:b5:2a:31:95:e4: 37:5d:84:3e:05:12:0c:ea:db:7a:91:b7:4d:e3:da: aa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:98:7D:EE:6E:88:D2:79:B9:85:FD:F0:59:B6:0B:0A:73:A0:96:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12304d24-1c4d-30ee-8950-9cb3fd480a88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:0a:a2:bd:0d:e9:fc:e5:9f:57:f4:e6:71:86:c2:dd:cb:45: 10:81:1b:f1:ce:7c:d5:46:e3:95:9c:43:d4:d7:86:6b:37:b7: db:93:2e:7b:33:84:c2:8a:e5:e8:10:5b:2c:ab:18:bf:ac:36: db:84:b0:c5:c1:49:71:87:55:79:fe:df:90:f7:69:59:01:d4: 62:68:82:0a:dc:6e:3e:45:9a:da:e6:30:49:15:a6:26:ca:d1: e9:3d:48:14:89:6b:18:d3:12:54:d9:c3:99:9f:41:ba:45:0c: 8a:bf:f6:a9:27:e0:f1:3e:37:ba:6c:c6:00:e3:7b:e7:50:1d: 79:98:0e:f8:ac:1e:d1:a2:7f:a1:43:b0:08:56:99:9a:f2:da: 8d:70:9c:67:9e:5e:2c:39:d8:ce:7d:2d:46:eb:1d:ab:54:69: cd:3a:2c:cc:8f:eb:e4:9d:7a:07:d7:2d:69:9c:46:bc:b6:7a: 4f:f1:d4:d0:5f:98:fb:a1:0c:62:a6:a8:af:2a:09:54:52:cd: 3f:0f:6b:19:a7:0b:43:f8:92:fb:93:4f:83:9a:cd:f0:a8:9c: 24:fd:71:c1:89:4b:d6:17:33:85:ab:73:fd:a9:df:38:96:25: 0c:aa:ea:81:5d:54:62:92:aa:38:1f:6a:0d:d1:4e:0c:e1:4a: e5:18:aa:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4K9dhcXm6+0cLGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDNkMmFkZGYtNWQwZi00YzUzLTgzOWItYmE1YWVjNTdiNWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+tg1Rch9ZYJ8L7TP/w9okCT/LivTLRuvhvS a1OITkNgTeCEp1M1C7Awypy3rgO6c7OTkogBr9hw1CQ0Wy4FrSzPQjx6QfVspbRG fT19Ji5dByzSl0Kx+a3P9510j1G0vny4iFWEQhH1HFlWRDklo8wnDyry8r57LFyX SNu+t2CDo3rLI+Yy2nfAezzPspm7kx5fICZAWDa0zZ9QGN1DNbnYZBX+xcpEMk4h gBlGnikN0zUg2yNj5SxI+tdc3+CVdn0Y+Jc0Kcnl79HKRhyUSR26VUwC3yy5AyyB zQUI2CoJLl1kjxpTcdcDtSoxleQ3XYQ+BRIM6tt6kbdN49qqQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6Yfe5uiNJ5uYX98Fm2CwpzoJaZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTIzMDRkMjQtMWM0ZC0z MGVlLTg5NTAtOWNiM2ZkNDgwYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8Kor0N6fzln1f05nGGwt3LRRCBG/HOfNVG45WcQ9TXhms3t9uTLnsz hMKK5egQWyyrGL+sNtuEsMXBSXGHVXn+35D3aVkB1GJoggrcbj5FmtrmMEkVpibK 0ek9SBSJaxjTElTZw5mfQbpFDIq/9qkn4PE+N7psxgDje+dQHXmYDvisHtGif6FD sAhWmZry2o1wnGeeXiw52M59LUbrHatUac06LMyP6+SdegfXLWmcRry2ek/x1NBf mPuhDGKmqK8qCVRSzT8PaxmnC0P4kvuTT4OazfConCT9ccGJS9YXM4Wrc/2p3ziW JQyq6oFdVGKSqjgfag3RTgzhSuUYqvY= -----END CERTIFICATE-----Generated at Thu Mar 26 16:26:36 2026 by rpki-client