$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16d0375e-b11a-35f2-98ff-0da748e948ef.roa File: 16d0375e-b11a-35f2-98ff-0da748e948ef.roa (raw, json) Hash identifier: ss5Soe8DFWOnXkDrcb8gUCfmk612eRuymrLFmVGKlwE= Subject key identifier: 4F:99:2C:C5:C1:0A:B7:42:3F:1D:6F:59:E2:C7:E3:07:99:D6:B1:5B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B63254DB446DB16CB0A8 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16d0375e-b11a-35f2-98ff-0da748e948ef.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b6:32:54:db:44:6d:b1:6c:b0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4b90bc33-7b1f-4e83-95c5-7b344f0f38ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:35:17:d3:ad:66:0a:fb:b3:f2:56:c8:04:a1: 66:56:a1:68:b0:c7:88:0f:c2:f5:4d:a2:d9:ce:86: b6:8c:de:d8:8d:7b:2b:ab:d3:60:c6:4e:f5:26:da: a1:d9:bb:95:82:00:bc:70:d2:ea:c8:b5:a2:c2:d1: 2c:9d:4f:d4:e6:26:b7:a6:d5:da:57:b6:24:bf:47: b8:de:e4:02:11:f3:e9:4a:1f:9d:33:2d:90:5a:49: 90:a7:97:c3:9b:62:76:f0:00:6b:75:81:19:01:ce: 34:12:95:5c:c0:e4:45:6a:1b:91:ec:52:b8:87:1e: fa:b3:6f:b2:e7:b8:7a:ae:32:09:a1:bf:78:3f:76: eb:9d:7f:68:2a:c4:a7:a1:cf:a2:e4:4b:c4:e6:e7: 99:18:0d:aa:df:dc:79:0b:7c:94:74:57:7a:34:51: 88:41:29:56:0e:d3:25:82:dc:3a:9c:2a:36:fa:fa: a4:2c:d9:ad:86:b4:ca:4e:4c:2f:de:c8:4b:dd:60: a3:ce:53:7e:27:7c:5c:f2:aa:8a:38:56:51:a8:b4: b2:7e:0a:5f:1e:28:cf:d6:c4:49:a0:d6:20:97:28: 81:51:c1:e6:17:5c:b0:04:f8:f7:88:ce:51:7a:e8: 83:69:9b:39:d8:a8:5e:60:fb:ae:eb:0f:d8:54:99: 8d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:99:2C:C5:C1:0A:B7:42:3F:1D:6F:59:E2:C7:E3:07:99:D6:B1:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16d0375e-b11a-35f2-98ff-0da748e948ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:44:25:0a:dc:dc:8e:d5:90:b0:47:33:ed:12:39:d8:8a:ac: 31:a9:97:89:79:cd:20:71:7a:15:79:0b:a9:1c:79:9c:08:0b: 76:67:c6:8f:35:5c:52:e3:46:4c:89:ff:8b:04:cf:48:3d:44: c7:2a:08:fd:ad:9d:1b:bc:d4:d4:9e:2f:88:dc:cc:98:0f:98: 6d:0f:d6:e1:92:6e:e7:e0:60:3a:74:f1:10:fc:17:2f:b4:e7: 08:dd:6b:6d:83:23:cc:13:7b:fa:cb:f6:9c:f0:32:a3:1e:cd: ae:f9:78:fb:3a:06:07:08:54:ab:13:a7:ff:6e:fb:8b:6e:4c: 18:e2:ba:54:40:d0:11:5b:42:66:1d:bf:4a:e6:20:2c:bb:66: 3f:35:5b:0e:63:27:55:e2:d1:8d:f0:fa:44:e0:76:3d:4a:56: fc:18:29:66:43:57:a6:e9:91:1f:bb:03:f3:9d:ff:5c:57:aa: 6e:94:95:2e:75:5b:64:50:5b:b8:77:e6:51:e0:94:c0:d4:7e: 37:bd:aa:1e:fe:41:8c:31:48:ea:34:00:58:42:91:1b:59:b8: 15:4e:8d:d5:fe:a2:7f:6f:a5:74:22:e4:22:72:42:7a:d0:53: 92:db:3c:14:a5:de:c9:18:f8:25:ae:53:38:48:ef:f6:75:96: 28:f5:08:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LYyVNtEbbFssKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NGI5MGJjMzMtN2IxZi00ZTgzLTk1YzUtN2IzNDRmMGYzOGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTUX061mCvuz8lbIBKFmVqFosMeID8L1TaLZ zoa2jN7YjXsrq9Ngxk71Jtqh2buVggC8cNLqyLWiwtEsnU/U5ia3ptXaV7Ykv0e4 3uQCEfPpSh+dMy2QWkmQp5fDm2J28ABrdYEZAc40EpVcwORFahuR7FK4hx76s2+y 57h6rjIJob94P3brnX9oKsSnoc+i5EvE5ueZGA2q39x5C3yUdFd6NFGIQSlWDtMl gtw6nCo2+vqkLNmthrTKTkwv3shL3WCjzlN+J3xc8qqKOFZRqLSyfgpfHijP1sRJ oNYglyiBUcHmF1ywBPj3iM5ReuiDaZs52KheYPuu6w/YVJmNvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+ZLMXBCrdCPx1vWeLH4weZ1rFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTZkMDM3NWUtYjExYS0z NWYyLTk4ZmYtMGRhNzQ4ZTk0OGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpEJQrc3I7VkLBHM+0SOdiKrDGpl4l5zSBxehV5C6kceZwIC3Znxo81 XFLjRkyJ/4sEz0g9RMcqCP2tnRu81NSeL4jczJgPmG0P1uGSbufgYDp08RD8Fy+0 5wjda22DI8wTe/rL9pzwMqMeza75ePs6BgcIVKsTp/9u+4tuTBjiulRA0BFbQmYd v0rmICy7Zj81Ww5jJ1Xi0Y3w+kTgdj1KVvwYKWZDV6bpkR+7A/Od/1xXqm6UlS51 W2RQW7h35lHglMDUfje9qh7+QYwxSOo0AFhCkRtZuBVOjdX+on9vpXQi5CJyQnrQ U5LbPBSl3skY+CWuUzhI7/Z1lij1CJA= -----END CERTIFICATE-----Generated at Thu Mar 26 15:45:39 2026 by rpki-client