$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24e01890-7488-3e7c-9709-e862e074ef73.roa File: 24e01890-7488-3e7c-9709-e862e074ef73.roa (raw, json) Hash identifier: imPVRj5kMNM15ZXMX90Gvo+dXMbmY2UMzyB5AkzejTE= Subject key identifier: A2:33:E3:2D:29:17:98:10:56:16:BF:BA:9F:BA:7A:BF:21:4B:0D:38 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E066C7F15E712D28A11800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24e01890-7488-3e7c-9709-e862e074ef73.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:66:c7:f1:5e:71:2d:28:a1:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0aff827f-5b2b-48ad-8da8-06233a7b8d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cb:ae:73:c3:68:9e:8b:5e:94:1e:c1:cf:93: 2e:02:67:53:56:d4:41:d8:0f:24:e4:75:83:9e:2c: 72:2f:05:ad:f4:e6:e2:7d:20:87:67:2c:64:fb:cc: 98:04:6a:ca:9b:55:71:69:14:91:7b:da:fb:f4:83: 41:60:79:b1:d7:89:91:3c:04:e3:01:b2:cf:3d:89: 46:22:60:7f:1d:ab:45:ee:2a:52:60:09:dc:48:1e: ad:12:2b:37:9a:3e:8d:97:70:13:67:61:cc:ac:8f: 0d:3e:f8:99:8a:2d:00:a3:ab:43:f6:9f:90:18:42: a0:d3:2f:3e:36:92:e4:9e:94:6a:8b:7e:2c:89:7b: 25:eb:50:96:22:cc:2c:d6:5d:a6:84:91:5a:05:3b: 8f:8a:01:36:ab:af:c9:14:4c:1b:67:d7:fd:70:4b: 96:f5:11:63:fe:76:f3:02:85:8c:b2:ea:f6:e8:49: 7d:e8:eb:a2:e1:ae:eb:be:82:6a:ff:17:c3:fd:8b: 0d:83:a7:82:ec:53:59:d1:4b:21:36:e4:a7:96:ab: 0c:53:16:77:51:cc:d1:7d:52:f8:a8:d0:e0:f9:53: 37:8c:04:38:88:f1:95:65:65:3b:73:30:7a:70:1c: 27:94:b3:23:ac:11:a0:69:69:c5:b9:7c:24:e3:c7: 6a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:33:E3:2D:29:17:98:10:56:16:BF:BA:9F:BA:7A:BF:21:4B:0D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24e01890-7488-3e7c-9709-e862e074ef73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:73:f3:6d:52:4a:65:91:ce:4d:da:e7:ba:7c:83:04:4b:a9: 12:01:89:75:b6:ad:2f:06:fe:b3:e6:9e:b2:b2:f0:07:d3:f2: 27:d8:4a:fa:44:0a:4c:75:59:b9:3b:7a:01:bf:2e:ce:d6:4f: e8:20:ae:1a:90:11:ef:dd:7a:52:b3:e0:fc:74:e1:3e:59:29: dd:20:b0:c7:80:d3:a4:f7:78:f2:7a:ac:81:06:f5:53:50:c3: e5:9f:b3:02:f8:e0:ab:54:cb:3a:8f:64:67:fe:a7:04:29:40: 4e:0f:fb:56:4e:38:b9:b1:92:c1:e4:d6:04:99:08:83:b0:92: 6e:8b:7e:6f:55:12:45:54:01:a3:1a:3d:d9:63:1c:24:d8:12: b9:d2:5d:02:56:43:bf:fa:2a:6a:cc:f4:86:d0:ee:94:63:97: c1:1c:3d:f2:b1:84:8d:79:66:bd:8e:a1:d7:42:7b:ce:98:24: d3:ec:90:81:4b:84:19:4d:88:c2:47:d2:0b:51:c7:32:f1:59: 15:26:99:f6:7c:70:48:d7:e5:d6:36:f9:86:15:de:ad:7a:68: 27:0b:8a:ee:7e:fd:cd:e7:c9:ea:05:a8:ed:36:9e:02:24:6a: 34:8a:a8:c2:48:bf:bf:e4:d7:fd:71:18:1d:a9:6d:db:1d:e2: 1d:64:9d:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GbH8V5xLSihGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MGFmZjgyN2YtNWIyYi00OGFkLThkYTgtMDYyMzNhN2I4ZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcuuc8NonotelB7Bz5MuAmdTVtRB2A8k5HWD nixyLwWt9ObifSCHZyxk+8yYBGrKm1VxaRSRe9r79INBYHmx14mRPATjAbLPPYlG ImB/HatF7ipSYAncSB6tEis3mj6Nl3ATZ2HMrI8NPviZii0Ao6tD9p+QGEKg0y8+ NpLknpRqi34siXsl61CWIsws1l2mhJFaBTuPigE2q6/JFEwbZ9f9cEuW9RFj/nbz AoWMsur26El96Oui4a7rvoJq/xfD/YsNg6eC7FNZ0UshNuSnlqsMUxZ3UczRfVL4 qNDg+VM3jAQ4iPGVZWU7czB6cBwnlLMjrBGgaWnFuXwk48dqKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIz4y0pF5gQVha/up+6er8hSw04MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjRlMDE4OTAtNzQ4OC0z ZTdjLTk3MDktZTg2MmUwNzRlZjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVz821SSmWRzk3a57p8gwRLqRIBiXW2rS8G/rPmnrKy8AfT8ifYSvpE Ckx1Wbk7egG/Ls7WT+ggrhqQEe/delKz4Px04T5ZKd0gsMeA06T3ePJ6rIEG9VNQ w+WfswL44KtUyzqPZGf+pwQpQE4P+1ZOOLmxksHk1gSZCIOwkm6Lfm9VEkVUAaMa PdljHCTYErnSXQJWQ7/6KmrM9IbQ7pRjl8EcPfKxhI15Zr2OoddCe86YJNPskIFL hBlNiMJH0gtRxzLxWRUmmfZ8cEjX5dY2+YYV3q16aCcLiu5+/c3nyeoFqO02ngIk ajSKqMJIv7/k1/1xGB2pbdsd4h1knSQ= -----END CERTIFICATE-----Generated at Thu Mar 26 06:22:11 2026 by rpki-client