$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/138e208c-b64d-35dc-82cf-e05f0cba2043.roa File: 138e208c-b64d-35dc-82cf-e05f0cba2043.roa (raw, json) Hash identifier: R+L/UO8lUxxwQU7E9UsIZBBb0jSZosAlPagddWF6IAg= Subject key identifier: 11:B8:A1:D9:F1:90:19:DC:2D:7F:23:E2:BF:CA:F8:5B:F6:3C:F1:AF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E002977CCC34ADE106B7D0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/138e208c-b64d-35dc-82cf-e05f0cba2043.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:02:97:7c:cc:34:ad:e1:06:b7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ef9dfcec-0070-4f15-8e2a-3191f008a4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:5d:48:1d:a2:53:2b:e3:61:4d:30:21:e8: 39:83:55:fd:93:82:ed:d5:1b:dc:a0:4d:e0:ce:c2: 71:a8:fc:03:60:17:05:b9:06:24:b0:ce:ea:30:12: 16:8a:06:78:0d:76:de:51:74:ed:30:7c:3c:0c:9d: 06:ae:3b:e5:ff:08:c8:21:be:fa:b6:a0:2c:12:33: c2:95:eb:30:74:43:a1:7e:04:d7:2c:01:2b:27:17: 68:da:4e:46:c7:69:a3:49:d3:60:b3:9a:e5:00:cc: 1e:33:aa:a5:39:79:96:12:19:a0:02:98:92:fd:e1: 0e:49:b1:74:42:ee:42:1b:7a:70:dd:17:47:24:c6: 95:86:a3:96:bf:78:ea:6b:f3:73:11:39:37:a9:33: 73:f0:d6:af:75:4a:7f:4b:fd:38:0e:65:91:9e:10: cd:c7:0e:3d:01:a9:f2:72:ed:3a:a2:3e:78:bf:1c: ae:67:34:95:04:c1:e1:6c:ef:1a:d6:d9:71:b3:98: 85:04:35:e0:1a:77:2c:e5:c5:51:d2:e0:8b:77:fd: d3:d4:f9:6f:f8:21:cb:48:4d:dd:17:53:25:5e:67: 99:90:46:55:6c:9e:a7:74:fa:07:0b:d9:27:dd:7e: 4f:c9:a6:65:45:99:b3:74:09:85:9d:48:b8:a5:de: b4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B8:A1:D9:F1:90:19:DC:2D:7F:23:E2:BF:CA:F8:5B:F6:3C:F1:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/138e208c-b64d-35dc-82cf-e05f0cba2043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ea:87:31:1e:96:8b:d8:aa:2a:99:03:ad:d6:8d:3c:d1:3f: 1f:10:61:e9:5c:ab:26:58:d6:ca:42:63:07:93:9d:68:a4:bd: 19:cc:32:04:7d:86:bf:d7:d3:3f:4b:a4:be:8f:06:5d:22:55: b7:4e:b7:66:5a:b0:1b:e1:68:3e:69:e2:9a:b8:1c:e5:28:44: 35:11:04:d6:38:cc:1e:97:77:69:4e:33:38:48:10:f3:e8:00: 9c:64:06:f3:89:2c:d1:53:3b:03:10:68:58:45:e2:c3:40:7d: b5:9e:63:a0:39:d0:bf:49:72:7b:d8:cb:29:92:ca:f9:48:c9: 5e:f4:3f:5f:82:4b:8f:d3:46:63:70:b9:f2:ab:43:44:01:67: 4b:47:43:88:7f:6b:ad:36:3e:28:9f:b9:b4:3e:6b:8c:6a:ea: 10:8f:f0:3b:3f:03:32:52:ec:e3:d9:14:c1:36:f1:dd:8d:12: 0f:4c:e9:23:55:28:5b:1b:6d:82:8f:b0:74:8f:be:87:86:a9: 1b:87:65:79:24:d6:e9:4c:6b:f2:e6:1b:01:68:20:aa:1c:14: 3f:db:00:2c:ed:ba:48:06:a1:f8:31:28:a4:09:7d:ef:35:86: 57:e0:59:9f:94:30:a5:be:7a:2d:6d:d7:1d:04:75:fb:b5:10: e9:65:58:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4AKXfMw0reEGt9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZWY5ZGZjZWMtMDA3MC00ZjE1LThlMmEtMzE5MWYwMDhhNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxhdSB2iUyvjYU0wIeg5g1X9k4Lt1RvcoE3g zsJxqPwDYBcFuQYksM7qMBIWigZ4DXbeUXTtMHw8DJ0Grjvl/wjIIb76tqAsEjPC leswdEOhfgTXLAErJxdo2k5Gx2mjSdNgs5rlAMweM6qlOXmWEhmgApiS/eEOSbF0 Qu5CG3pw3RdHJMaVhqOWv3jqa/NzETk3qTNz8NavdUp/S/04DmWRnhDNxw49Aany cu06oj54vxyuZzSVBMHhbO8a1tlxs5iFBDXgGncs5cVR0uCLd/3T1Plv+CHLSE3d F1MlXmeZkEZVbJ6ndPoHC9kn3X5PyaZlRZmzdAmFnUi4pd60IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBG4odnxkBncLX8j4r/K+Fv2PPGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTM4ZTIwOGMtYjY0ZC0z NWRjLTgyY2YtZTA1ZjBjYmEyMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfqhzEelovYqiqZA63WjTzRPx8QYelcqyZY1spCYweTnWikvRnMMgR9 hr/X0z9LpL6PBl0iVbdOt2ZasBvhaD5p4pq4HOUoRDURBNY4zB6Xd2lOMzhIEPPo AJxkBvOJLNFTOwMQaFhF4sNAfbWeY6A50L9JcnvYyymSyvlIyV70P1+CS4/TRmNw ufKrQ0QBZ0tHQ4h/a602PiifubQ+a4xq6hCP8Ds/AzJS7OPZFME28d2NEg9M6SNV KFsbbYKPsHSPvoeGqRuHZXkk1ulMa/LmGwFoIKocFD/bACztukgGofgxKKQJfe81 hlfgWZ+UMKW+ei1t1x0Edfu1EOllWN8= -----END CERTIFICATE-----Generated at Thu Mar 26 04:43:15 2026 by rpki-client