$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25ffd5c2-35f4-3ecb-9557-6964354a7797.roa File: 25ffd5c2-35f4-3ecb-9557-6964354a7797.roa (raw, json) Hash identifier: yx9Ht/zFENyUS8YbCi4lbgnHl4vjHodJnERNHOimQCQ= Subject key identifier: 7B:B4:C9:DB:00:E3:2B:D4:43:65:0C:CA:A6:CD:D5:59:29:5D:8F:75 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFBDEF88EB24037767C480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25ffd5c2-35f4-3ecb-9557-6964354a7797.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:bd:ef:88:eb:24:03:77:67:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=e36471cf-cd6a-4735-930b-5ff69c07e526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c0:06:ca:1f:bd:d3:ff:0b:43:7f:7d:4b:ca: 9a:6b:8d:2f:76:cb:37:e1:8e:10:90:62:bd:c6:b0: 18:57:c9:fb:66:a5:98:1a:67:c0:ce:a7:23:ca:7e: 50:39:31:f1:97:85:c6:14:30:80:71:56:b7:04:37: 4d:5e:08:b9:2f:80:ae:c2:95:f4:58:f7:4b:21:0a: 92:e0:ef:84:1e:59:6c:62:23:83:81:46:b4:64:fb: 7e:aa:45:b3:1a:d8:94:f5:72:d0:12:fe:03:f9:40: 27:31:d0:5f:aa:3d:36:d1:33:e6:7c:59:83:b2:7a: 9d:ff:60:42:54:fe:d7:1d:e0:d9:4d:b2:72:e2:af: 7d:3b:be:c6:3c:b1:b5:db:f5:b9:30:d1:19:f2:0a: 52:d6:ab:06:98:81:a6:82:f2:f2:7d:13:31:5a:a8: cd:e7:f6:63:59:b6:e2:fb:16:5e:dc:e4:a9:af:5a: 36:6d:4f:e3:41:de:1a:35:de:e8:62:0e:ab:71:9a: d3:5d:bd:5f:c0:2f:7f:1b:49:ab:35:f9:d1:7f:d6: 53:ac:23:af:08:12:37:af:9e:a1:46:b0:8a:5e:8d: f4:3b:c0:eb:d4:52:2c:a0:6b:26:70:7a:c4:6d:e4: 6e:40:ed:ff:23:90:d2:c2:4b:54:cc:62:f5:66:c7: 0e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B4:C9:DB:00:E3:2B:D4:43:65:0C:CA:A6:CD:D5:59:29:5D:8F:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25ffd5c2-35f4-3ecb-9557-6964354a7797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:b5:65:cc:ec:59:cb:ae:07:5f:72:61:03:6a:64:d4:7c:bb: 36:d3:d7:d3:b4:62:70:96:98:dc:fd:81:e1:5a:5e:44:e0:aa: fc:ee:ec:b8:59:5e:25:86:9e:39:1f:92:3e:0a:99:ca:4e:45: f2:4e:4a:f0:e4:80:e2:6f:d3:4b:6e:a1:5b:54:ff:a4:a3:94: a7:c2:79:b2:30:26:e5:7a:82:0b:e0:07:ba:48:d7:7b:e9:dd: 8f:b8:d2:39:f7:28:40:db:f4:7f:99:e3:b9:c9:20:78:5d:0f: a1:da:cd:0d:5e:45:0f:37:46:ae:99:41:7b:99:7f:7f:53:ac: 13:88:8a:c5:f5:40:fd:1d:3b:cb:48:32:ac:6b:77:19:0d:ae: 4d:2f:0f:98:f2:02:a2:56:33:df:cb:25:5a:62:10:eb:24:ea: cd:5b:a1:c7:e5:49:6b:c9:a7:4a:6f:40:eb:f4:07:6f:e1:6b: c6:01:82:1a:2f:57:a2:f8:a3:ee:25:3e:42:91:62:68:8b:23: 95:51:a6:05:34:51:82:3a:e3:c7:c4:a0:ba:fd:24:e4:c4:a1: 5e:3b:ed:69:df:7d:cc:de:6f:b3:ce:91:d6:8b:62:d6:c9:4e: 62:1d:06:24:d0:09:19:10:db:33:3e:19:41:41:d6:84:6e:8a: a7:6b:fc:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k373viOskA3dnxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZTM2NDcxY2YtY2Q2YS00NzM1LTkzMGItNWZmNjljMDdlNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcAGyh+90/8LQ399S8qaa40vdss34Y4QkGK9 xrAYV8n7ZqWYGmfAzqcjyn5QOTHxl4XGFDCAcVa3BDdNXgi5L4CuwpX0WPdLIQqS 4O+EHllsYiODgUa0ZPt+qkWzGtiU9XLQEv4D+UAnMdBfqj020TPmfFmDsnqd/2BC VP7XHeDZTbJy4q99O77GPLG12/W5MNEZ8gpS1qsGmIGmgvLyfRMxWqjN5/ZjWbbi +xZe3OSpr1o2bU/jQd4aNd7oYg6rcZrTXb1fwC9/G0mrNfnRf9ZTrCOvCBI3r56h RrCKXo30O8Dr1FIsoGsmcHrEbeRuQO3/I5DSwktUzGL1ZscOuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHu0ydsA4yvUQ2UMyqbN1VkpXY91MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjVmZmQ1YzItMzVmNC0z ZWNiLTk1NTctNjk2NDM1NGE3Nzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM21ZczsWcuuB19yYQNqZNR8uzbT19O0YnCWmNz9geFaXkTgqvzu7LhZ XiWGnjkfkj4KmcpORfJOSvDkgOJv00tuoVtU/6SjlKfCebIwJuV6ggvgB7pI13vp 3Y+40jn3KEDb9H+Z47nJIHhdD6HazQ1eRQ83Rq6ZQXuZf39TrBOIisX1QP0dO8tI MqxrdxkNrk0vD5jyAqJWM9/LJVpiEOsk6s1bocflSWvJp0pvQOv0B2/ha8YBghov V6L4o+4lPkKRYmiLI5VRpgU0UYI648fEoLr9JOTEoV477Wnffczeb7POkdaLYtbJ TmIdBiTQCRkQ2zM+GUFB1oRuiqdr/E0= -----END CERTIFICATE-----Generated at Thu Mar 26 22:31:38 2026 by rpki-client