$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2808ffa8-dd82-3492-9899-bb02a50ff806.roa File: 2808ffa8-dd82-3492-9899-bb02a50ff806.roa (raw, json) Hash identifier: kjqfTdA9aZAtRF+OqG7NFTes4Ln40lghgFtvQkxWdT4= Subject key identifier: 1F:37:0A:F2:FD:AF:A5:8F:C5:F4:C7:C9:5D:9B:08:7B:51:E9:2F:70 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B57FFF3D538E681E1380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2808ffa8-dd82-3492-9899-bb02a50ff806.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b5:7f:ff:3d:53:8e:68:1e:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d9fa9a1a-52a3-4159-b183-0d51ea3f7da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:26:92:48:ec:b2:57:fd:cc:72:25:2c:78:a8: 21:9d:d7:9a:2d:3e:01:79:80:86:17:3b:7f:d1:bf: 12:5d:32:9c:f8:55:cb:48:33:de:07:08:4f:98:95: c7:f6:13:eb:8e:ab:32:ec:82:00:c1:93:d4:20:77: 2e:72:61:ad:ed:03:78:78:1a:31:ab:59:7b:9c:8a: 54:27:54:98:97:15:a1:37:d0:4b:89:71:f8:ff:ec: ae:0d:cd:b8:89:40:09:4b:a6:aa:fe:d1:bd:06:d3: ba:fa:63:2c:3a:fc:61:ef:36:8e:14:3e:d6:9d:13: e8:a1:49:cb:df:50:8e:98:85:b9:88:f1:29:1f:cc: cd:8b:d5:79:39:1e:c9:70:84:dc:30:26:0e:57:c6: 73:82:f9:60:bc:72:ca:fc:89:ca:d0:bf:ea:cd:24: 79:c6:e2:56:0a:0a:f8:77:d7:85:75:18:1d:18:ed: d4:2c:e9:1d:cb:91:a9:3c:f4:b8:eb:4e:46:a5:83: 5e:fc:19:00:f2:ac:08:f1:d9:8d:44:8b:59:3f:87: 59:39:98:6e:46:d2:b6:c9:7f:c8:fa:f8:e4:24:88: a6:88:41:03:a2:72:ff:af:50:dc:d7:a1:5a:39:a6: 26:02:1a:af:ed:cc:e1:a3:9b:84:14:81:82:7e:ae: ac:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:37:0A:F2:FD:AF:A5:8F:C5:F4:C7:C9:5D:9B:08:7B:51:E9:2F:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2808ffa8-dd82-3492-9899-bb02a50ff806.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:01:fd:80:58:96:93:69:81:27:8b:6e:26:26:5d:14:c1:8f: ca:14:24:bc:6a:ef:a2:0f:3f:7b:0e:e2:7c:9b:a5:bf:d4:05: 26:64:16:0c:9d:89:a6:8e:d2:8d:4e:10:e5:e8:b1:d3:ca:7b: 59:c5:f9:a6:3a:60:8a:aa:6f:2e:f7:96:35:67:68:25:84:84: 15:c3:23:79:8d:26:14:df:48:2e:aa:c8:dc:26:42:20:74:a5: 04:13:16:1c:31:70:65:f1:ab:80:a0:df:cc:cb:bf:6b:a5:f6: 9d:e9:a7:4f:dc:e5:a4:f9:e7:c5:a0:da:17:23:b3:60:98:ba: 4b:f8:fe:a2:eb:42:cb:e6:ae:ec:73:a9:32:fe:84:52:fe:34: 15:1d:3d:76:72:79:a0:3c:be:3b:b7:35:39:67:40:a9:29:11: 5a:dc:c6:27:5b:c1:ba:60:5e:f3:01:c5:09:1f:ed:6e:40:08: bb:1f:2d:f9:c6:ee:a9:36:b5:3f:3f:c3:9e:40:39:14:97:9a: 35:d7:83:f0:4c:19:04:e5:36:67:29:7d:c7:e0:24:47:cd:ec: 58:5b:5f:96:2a:99:87:4d:68:d5:44:ce:6a:ec:6d:df:fe:c7: 07:87:6a:36:4d:10:b3:7a:48:79:3a:0d:98:f8:44:ed:72:fd: ef:fc:2f:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LV//z1TjmgeE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDlmYTlhMWEtNTJhMy00MTU5LWIxODMtMGQ1MWVhM2Y3ZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyaSSOyyV/3MciUseKghndeaLT4BeYCGFzt/ 0b8SXTKc+FXLSDPeBwhPmJXH9hPrjqsy7IIAwZPUIHcucmGt7QN4eBoxq1l7nIpU J1SYlxWhN9BLiXH4/+yuDc24iUAJS6aq/tG9BtO6+mMsOvxh7zaOFD7WnRPooUnL 31COmIW5iPEpH8zNi9V5OR7JcITcMCYOV8ZzgvlgvHLK/InK0L/qzSR5xuJWCgr4 d9eFdRgdGO3ULOkdy5GpPPS4605GpYNe/BkA8qwI8dmNRItZP4dZOZhuRtK2yX/I +vjkJIimiEEDonL/r1Dc16FaOaYmAhqv7czho5uEFIGCfq6s8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB83CvL9r6WPxfTHyV2bCHtR6S9wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjgwOGZmYTgtZGQ4Mi0z NDkyLTk4OTktYmIwMmE1MGZmODA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8B/YBYlpNpgSeLbiYmXRTBj8oUJLxq76IPP3sO4nybpb/UBSZkFgyd iaaO0o1OEOXosdPKe1nF+aY6YIqqby73ljVnaCWEhBXDI3mNJhTfSC6qyNwmQiB0 pQQTFhwxcGXxq4Cg38zLv2ul9p3pp0/c5aT558Wg2hcjs2CYukv4/qLrQsvmruxz qTL+hFL+NBUdPXZyeaA8vju3NTlnQKkpEVrcxidbwbpgXvMBxQkf7W5ACLsfLfnG 7qk2tT8/w55AORSXmjXXg/BMGQTlNmcpfcfgJEfN7FhbX5YqmYdNaNVEzmrsbd/+ xweHajZNELN6SHk6DZj4RO1y/e/8L58= -----END CERTIFICATE-----Generated at Thu Mar 26 18:21:07 2026 by rpki-client