$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d996163-640b-33de-a221-baef81990d2e.roa File: 1d996163-640b-33de-a221-baef81990d2e.roa (raw, json) Hash identifier: TRSzk0DogIZX4kwFqwF4D6P6f9FW97xUcVy4r0GxaqA= Subject key identifier: A9:88:93:40:42:62:74:B8:7E:7A:F8:4D:98:2E:81:67:C7:69:17:88 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFBE6E5ADE7D9BF2536940 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d996163-640b-33de-a221-baef81990d2e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:be:6e:5a:de:7d:9b:f2:53:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=9f6d7356-e4c7-407d-adfa-ea625b18e151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d2:03:46:65:ca:d8:cc:33:c2:5a:00:db:2f: 3c:c5:4f:e1:d4:49:43:00:eb:6a:f5:50:f3:ec:7d: 7c:ec:ef:ee:4b:0e:62:62:05:88:03:d4:4b:ef:7c: 13:e7:57:e2:d1:c8:55:24:95:00:03:fb:47:f4:3f: 06:a3:12:e1:13:45:05:e5:f5:55:a9:c1:45:6d:fb: f7:b5:6e:33:23:58:24:87:ad:ae:6c:c0:fd:d8:9f: f0:61:44:76:94:5f:ca:95:70:28:10:45:13:c4:6a: 3f:f7:f9:7e:12:df:7e:be:d1:44:67:ee:9a:86:be: 4c:59:a4:69:74:84:61:dc:52:81:5e:62:6c:61:7e: 3d:af:3f:01:b5:b3:97:26:e8:10:cc:87:22:b8:9d: 06:75:f4:ce:1c:70:09:a9:71:1b:fc:09:f5:b6:90: 37:48:4b:f1:41:c2:f5:95:ae:a8:2d:ed:9a:19:10: af:ce:cf:91:ba:1c:8a:b6:a5:13:59:de:79:2d:e3: c4:bb:b9:5e:51:73:24:99:d8:6e:1e:f3:52:78:bf: f6:db:db:d5:e0:cd:fc:a0:9f:30:70:e8:1a:ce:4f: 50:78:a2:ac:d9:d4:2b:77:24:03:ef:68:c5:3f:a6: 45:2e:f1:31:d9:ed:c2:df:77:e6:4a:a0:99:57:13: 91:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:88:93:40:42:62:74:B8:7E:7A:F8:4D:98:2E:81:67:C7:69:17:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d996163-640b-33de-a221-baef81990d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:ae:bb:69:84:ed:50:98:19:cf:8e:cf:df:6f:9b:25:63:f3: 16:97:a8:48:a1:15:ce:12:a9:68:95:98:2c:f6:14:7c:4a:4f: 14:77:90:19:81:60:08:ba:de:70:c0:17:56:32:88:81:28:50: 4b:09:d6:9a:8f:a9:7b:ca:ab:82:80:89:65:02:89:66:e0:c4: 95:24:07:17:a4:9d:d6:c2:d4:db:8e:35:2f:0b:8a:e6:5c:1a: de:9f:e4:72:0d:a3:f1:31:7e:e1:7b:10:bc:05:1b:42:52:e8: fb:c7:81:22:47:8c:8f:6b:d4:13:41:9b:12:e3:39:1e:5c:2c: 7a:15:41:f0:c8:9a:35:66:1b:7c:b2:22:30:9f:ad:a1:cb:dc: e5:e9:6d:f2:5b:0a:a5:e5:a6:1e:3e:2d:8d:1f:d5:6d:e9:16: 9b:96:2d:5c:8b:45:5e:41:4a:cc:d7:f6:9e:e4:03:f3:74:60: c5:2d:92:f2:fb:f3:83:b8:fb:53:14:d7:4f:86:2f:24:9d:78: 2a:38:a8:72:3a:fc:eb:7c:20:94:06:72:42:31:f5:b3:52:43: 68:17:f2:63:79:7f:d5:4f:e5:ad:8e:56:2c:7b:9e:96:93:f2: 71:1f:f1:b9:19:ae:85:ce:c6:de:a5:01:ab:d6:f1:aa:78:3a: 8e:0a:10:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k375uWt59m/JTaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OWY2ZDczNTYtZTRjNy00MDdkLWFkZmEtZWE2MjViMThlMTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtIDRmXK2MwzwloA2y88xU/h1ElDAOtq9VDz 7H187O/uSw5iYgWIA9RL73wT51fi0chVJJUAA/tH9D8GoxLhE0UF5fVVqcFFbfv3 tW4zI1gkh62ubMD92J/wYUR2lF/KlXAoEEUTxGo/9/l+Et9+vtFEZ+6ahr5MWaRp dIRh3FKBXmJsYX49rz8BtbOXJugQzIciuJ0GdfTOHHAJqXEb/An1tpA3SEvxQcL1 la6oLe2aGRCvzs+RuhyKtqUTWd55LePEu7leUXMkmdhuHvNSeL/229vV4M38oJ8w cOgazk9QeKKs2dQrdyQD72jFP6ZFLvEx2e3C33fmSqCZVxOR2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmIk0BCYnS4fnr4TZgugWfHaReIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWQ5OTYxNjMtNjQwYi0z M2RlLWEyMjEtYmFlZjgxOTkwZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmuu2mE7VCYGc+Oz99vmyVj8xaXqEihFc4SqWiVmCz2FHxKTxR3kBmB YAi63nDAF1YyiIEoUEsJ1pqPqXvKq4KAiWUCiWbgxJUkBxekndbC1NuONS8LiuZc Gt6f5HINo/ExfuF7ELwFG0JS6PvHgSJHjI9r1BNBmxLjOR5cLHoVQfDImjVmG3yy IjCfraHL3OXpbfJbCqXlph4+LY0f1W3pFpuWLVyLRV5BSszX9p7kA/N0YMUtkvL7 84O4+1MU10+GLySdeCo4qHI6/Ot8IJQGckIx9bNSQ2gX8mN5f9VP5a2OVix7npaT 8nEf8bkZroXOxt6lAavW8ap4Oo4KELw= -----END CERTIFICATE-----Generated at Thu Mar 26 21:10:31 2026 by rpki-client