$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20462c47-8bd2-3e07-ad43-017e73297e3e.roa File: 20462c47-8bd2-3e07-ad43-017e73297e3e.roa (raw, json) Hash identifier: njIE4ZmfIIp7OeYKAXPkoGW5dJD31oerLE8OWyM0TMg= Subject key identifier: 68:A4:A7:E8:20:CF:00:CD:96:D1:A3:F5:8D:96:4F:31:00:DA:C1:42 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B6E39ED4915589050EC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20462c47-8bd2-3e07-ad43-017e73297e3e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b6:e3:9e:d4:91:55:89:05:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b17156b0-0e9a-4f48-9426-13896f086248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c7:d7:08:7e:18:93:77:91:a2:58:5d:02:a5: 19:de:c1:88:29:2c:3b:65:15:08:01:45:39:14:4e: b6:0b:67:e1:cd:16:f2:04:d3:6a:3a:98:e6:b6:b6: c8:f8:5f:e8:4b:9f:8a:46:78:e2:64:2b:14:98:8b: e2:f3:60:ea:5e:65:77:ee:43:1b:02:7a:a1:b2:c9: 75:e6:ac:b1:50:37:41:31:33:e1:ad:47:08:38:aa: 9a:27:b9:3f:50:35:b8:aa:8d:4d:1f:e1:e8:ce:21: f1:6b:c4:7c:d7:6f:72:a9:4b:79:c8:11:ac:26:41: 22:8c:e3:e8:bc:92:b9:e5:66:fb:2a:1b:ce:79:0d: 5c:2f:4a:0c:e6:fd:71:ab:86:fc:eb:1b:3e:e9:e8: 5d:aa:52:a4:49:20:46:34:07:a5:13:35:bd:9e:78: ca:f9:3c:83:72:93:82:97:0c:ad:42:9b:b2:9d:1e: a9:37:ae:f3:a2:40:76:92:2d:f5:88:6e:c0:08:b3: 18:7c:1e:8d:83:2f:4c:21:24:b2:ce:45:6b:c8:3b: cf:6e:c9:b6:88:c2:8e:ad:4d:b0:60:e4:9f:81:f2: 8f:93:08:de:55:59:05:d1:ab:4d:77:8d:74:f2:e1: 04:2b:17:da:2e:d8:b9:50:de:ed:80:22:5a:c0:2b: cf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A4:A7:E8:20:CF:00:CD:96:D1:A3:F5:8D:96:4F:31:00:DA:C1:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20462c47-8bd2-3e07-ad43-017e73297e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:e7:b7:80:74:7d:80:05:ae:ae:1f:9b:83:25:37:d7:6b:ae: 68:2c:51:43:a3:ae:59:87:71:8a:a3:03:c3:39:e1:cf:13:c6: ed:d2:ef:db:a7:a0:94:5d:d7:61:94:fc:9e:f9:a3:47:72:48: d1:2e:74:e4:5c:a7:46:dd:4e:a8:95:20:28:15:2c:65:4b:42: 6e:65:54:8b:77:ac:bc:65:25:db:e7:dd:15:81:dd:05:a9:78: fc:ef:09:51:8b:8f:9c:c4:18:6b:ac:14:9d:05:9b:de:6a:41: 20:fb:2f:cd:0c:cc:b3:60:35:7c:de:62:c8:56:4a:a1:be:eb: 9e:7e:e5:b8:a5:cb:97:ab:50:6d:87:d6:00:8c:97:21:e5:67: 84:ef:fd:32:00:ef:22:33:04:d0:a6:41:f5:21:1b:c8:cc:c7: cf:2e:74:3a:e0:37:df:a4:6f:f1:72:96:a9:62:78:94:5d:0d: 16:ee:5e:3e:73:70:39:c6:ac:b1:52:b8:9c:ae:b9:6b:3a:56: 06:06:b4:bf:b1:73:00:a3:80:c8:19:44:fb:c8:b0:f7:12:db: 50:25:12:ac:ff:45:06:61:b9:95:47:85:12:bc:0f:5f:91:f8: ec:19:30:61:ac:4e:33:b9:23:3c:90:e8:ba:ea:fb:f1:f4:88: b6:c6:9d:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LbjntSRVYkFDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjE3MTU2YjAtMGU5YS00ZjQ4LTk0MjYtMTM4OTZmMDg2MjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsfXCH4Yk3eRolhdAqUZ3sGIKSw7ZRUIAUU5 FE62C2fhzRbyBNNqOpjmtrbI+F/oS5+KRnjiZCsUmIvi82DqXmV37kMbAnqhssl1 5qyxUDdBMTPhrUcIOKqaJ7k/UDW4qo1NH+HoziHxa8R8129yqUt5yBGsJkEijOPo vJK55Wb7KhvOeQ1cL0oM5v1xq4b86xs+6ehdqlKkSSBGNAelEzW9nnjK+TyDcpOC lwytQpuynR6pN67zokB2ki31iG7ACLMYfB6Ngy9MISSyzkVryDvPbsm2iMKOrU2w YOSfgfKPkwjeVVkF0atNd4108uEEKxfaLti5UN7tgCJawCvPwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGikp+ggzwDNltGj9Y2WTzEA2sFCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjA0NjJjNDctOGJkMi0z ZTA3LWFkNDMtMDE3ZTczMjk3ZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjnt4B0fYAFrq4fm4MlN9drrmgsUUOjrlmHcYqjA8M54c8Txu3S79un oJRd12GU/J75o0dySNEudORcp0bdTqiVICgVLGVLQm5lVIt3rLxlJdvn3RWB3QWp ePzvCVGLj5zEGGusFJ0Fm95qQSD7L80MzLNgNXzeYshWSqG+655+5bily5erUG2H 1gCMlyHlZ4Tv/TIA7yIzBNCmQfUhG8jMx88udDrgN9+kb/FylqlieJRdDRbuXj5z cDnGrLFSuJyuuWs6VgYGtL+xcwCjgMgZRPvIsPcS21AlEqz/RQZhuZVHhRK8D1+R +OwZMGGsTjO5IzyQ6Lrq+/H0iLbGnQ4= -----END CERTIFICATE-----Generated at Thu Mar 26 16:29:21 2026 by rpki-client