$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/129dca48-db60-34d2-801e-0d7c82dc0f87.roa File: 129dca48-db60-34d2-801e-0d7c82dc0f87.roa (raw, json) Hash identifier: I1UnqhBQSeE235KuERmpTRAXTeQ+h1PL+2oaQcMAI3c= Subject key identifier: E6:9B:F5:F1:E4:A1:6C:05:D1:9C:E4:B7:4F:BE:4E:96:AD:21:50:FB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0652BF3A4FE5BF164EF00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/129dca48-db60-34d2-801e-0d7c82dc0f87.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:65:2b:f3:a4:fe:5b:f1:64:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=53a9de91-1e1a-422b-b14f-6a55bc06c142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c9:f0:73:a6:a6:09:60:c0:09:3f:36:f7:f6: d9:54:c6:76:79:6e:82:f8:9f:c0:cd:8d:cb:8d:e0: 6f:19:41:0e:99:cb:50:89:83:f1:72:3c:2d:ff:4b: 7c:e6:c3:b4:94:de:ee:5a:9b:0f:37:10:f9:45:45: 61:9e:4d:61:77:e9:84:cf:2a:06:7e:ac:1d:e4:40: bc:a9:08:9b:5b:62:a8:96:14:40:1a:ab:9c:9b:54: 04:0f:e9:90:9b:2e:ad:58:0d:c8:9b:de:f8:6a:b4: 00:94:ae:bf:86:2c:7d:44:6b:0a:e4:6b:e3:74:51: 06:b0:bb:50:5b:af:98:ac:df:bd:27:ce:92:1c:68: a8:93:75:d1:5c:99:29:ac:1c:9f:1f:b5:9e:75:63: 2a:0d:b6:96:e7:5c:ab:7c:a5:50:de:d7:01:1f:27: c2:2c:33:0e:a6:c0:9a:6f:0c:be:05:f4:10:bd:e5: 9d:2c:65:73:75:d3:53:11:fc:f8:10:8f:7c:73:9a: a8:ad:ce:73:c5:3f:b3:12:41:8b:b0:e8:ed:f3:ed: ef:d4:20:92:24:cc:05:57:70:10:86:4c:a6:e6:fb: c9:a8:5a:8e:06:80:49:bd:45:89:b1:d1:3d:a0:52: fc:be:c5:52:4d:29:f5:ff:d6:62:49:43:78:92:06: 1d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9B:F5:F1:E4:A1:6C:05:D1:9C:E4:B7:4F:BE:4E:96:AD:21:50:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/129dca48-db60-34d2-801e-0d7c82dc0f87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:d2:5d:ae:41:d8:66:f7:16:60:6c:e7:76:1e:24:ad:45:51: 9c:3d:f5:7f:f5:ec:33:69:99:8d:96:27:fc:3a:64:86:5e:bd: be:7b:71:64:2c:b9:05:8d:e2:48:67:c7:f2:e0:82:8b:c3:2b: 80:ba:8e:45:a8:f8:88:22:67:c6:0f:c9:e8:0c:2f:68:72:62: 61:34:bd:a1:f7:87:cf:44:58:03:ad:fc:54:0d:c0:96:9d:e6: 3c:6b:6f:23:02:41:10:4a:36:88:c5:15:5d:42:99:cd:fc:66: 5c:00:1e:f5:96:69:62:54:ca:ca:b9:a1:d9:cb:93:97:5a:04: 16:dd:c3:a0:da:43:30:95:19:6f:1b:9a:bb:b8:6a:ba:dc:7b: bf:4b:7d:9e:f1:3b:cd:46:9f:aa:f5:fb:88:a2:4e:b7:15:30: a4:7d:2d:ef:b6:b2:f8:67:15:27:77:65:7e:3d:42:e2:90:c1: ae:60:2b:37:f2:66:3f:a7:07:90:39:09:53:84:bb:44:6b:8e: 47:f1:b5:61:96:3c:c6:d5:50:70:56:24:99:6d:34:3f:6e:c6: 7f:d8:94:96:28:12:f6:53:ab:fb:6a:35:b1:be:b5:00:c9:5d: 77:a6:27:a9:ec:d6:c1:12:c1:94:19:98:c4:95:a0:d3:b0:af: 7c:9d:b3:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GUr86T+W/Fk7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTNhOWRlOTEtMWUxYS00MjJiLWIxNGYtNmE1NWJjMDZjMTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMnwc6amCWDACT829/bZVMZ2eW6C+J/AzY3L jeBvGUEOmctQiYPxcjwt/0t85sO0lN7uWpsPNxD5RUVhnk1hd+mEzyoGfqwd5EC8 qQibW2KolhRAGqucm1QED+mQmy6tWA3Im974arQAlK6/hix9RGsK5GvjdFEGsLtQ W6+YrN+9J86SHGiok3XRXJkprByfH7WedWMqDbaW51yrfKVQ3tcBHyfCLDMOpsCa bwy+BfQQveWdLGVzddNTEfz4EI98c5qorc5zxT+zEkGLsOjt8+3v1CCSJMwFV3AQ hkym5vvJqFqOBoBJvUWJsdE9oFL8vsVSTSn1/9ZiSUN4kgYd+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOab9fHkoWwF0Zzkt0++TpatIVD7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTI5ZGNhNDgtZGI2MC0z NGQyLTgwMWUtMGQ3YzgyZGMwZjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK07MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPSXa5B2Gb3FmBs53YeJK1FUZw99X/17DNpmY2WJ/w6ZIZevb57cWQs uQWN4khnx/LggovDK4C6jkWo+IgiZ8YPyegML2hyYmE0vaH3h89EWAOt/FQNwJad 5jxrbyMCQRBKNojFFV1Cmc38ZlwAHvWWaWJUysq5odnLk5daBBbdw6DaQzCVGW8b mru4arrce79LfZ7xO81Gn6r1+4iiTrcVMKR9Le+2svhnFSd3ZX49QuKQwa5gKzfy Zj+nB5A5CVOEu0RrjkfxtWGWPMbVUHBWJJltND9uxn/YlJYoEvZTq/tqNbG+tQDJ XXemJ6ns1sESwZQZmMSVoNOwr3ydsww= -----END CERTIFICATE-----Generated at Thu Mar 26 12:45:41 2026 by rpki-client