$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2890d7eb-8eca-325c-932f-7595f681354a.roa File: 2890d7eb-8eca-325c-932f-7595f681354a.roa (raw, json) Hash identifier: L7yx9u/6PpNl0Sor6VXBgSEvcBjJIk1IknW+iufo2ek= Subject key identifier: 9D:E5:62:69:A0:7B:65:34:A2:FE:BE:40:DD:F1:02:05:5C:A5:3A:62 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E058341DA31EA28F243500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2890d7eb-8eca-325c-932f-7595f681354a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 67.54.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:58:34:1d:a3:1e:a2:8f:24:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1db9e15f-8586-4dc4-8840-bf077ed58fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fb:d2:36:7d:9b:d7:3d:1d:54:51:1f:db:14: 51:6c:e5:44:97:cb:89:d8:93:59:fb:20:bd:55:0f: 38:f7:68:80:5e:49:17:33:21:54:b3:fe:35:67:ac: 1c:69:81:45:ce:19:f3:8b:4a:d3:48:01:dd:73:60: 03:28:b1:c8:e3:0a:9b:7d:05:71:e4:f7:34:03:49: b5:44:4f:7f:01:c3:ae:23:1c:b7:bf:6a:5c:21:74: b2:6e:1d:63:c0:9d:f5:d7:16:a5:c5:fd:8a:5e:79: 36:32:c5:89:b0:b2:20:79:e6:2a:c3:a6:24:61:07: ed:40:07:04:7d:bd:29:3f:01:ea:0c:a1:ec:9e:4d: 49:32:65:d9:63:4b:5a:14:fe:43:02:f2:90:98:18: 88:c4:e4:e0:81:2e:71:f0:c8:81:91:8d:3b:da:06: ce:c0:62:8c:84:92:11:23:08:74:36:8b:e7:d5:c1: 57:65:ba:2a:ad:a0:bd:cf:ac:e2:60:a2:94:25:81: 10:9b:25:7b:d6:dc:7a:30:cb:64:72:36:bb:d1:75: c4:4f:d4:04:a1:b5:80:0f:3d:62:b3:24:83:d4:96: 47:97:19:80:4b:39:f2:7a:99:27:1f:11:83:85:0d: aa:e2:75:0b:bf:d5:83:f6:bc:06:da:2c:79:11:23: 67:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E5:62:69:A0:7B:65:34:A2:FE:BE:40:DD:F1:02:05:5C:A5:3A:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2890d7eb-8eca-325c-932f-7595f681354a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:4c:0c:be:1d:80:5d:dd:10:0f:14:2d:2b:08:7e:1a:d1:4a: 12:02:f5:bb:53:70:72:8a:c4:82:0e:e1:74:c7:c7:a0:d0:4b: e4:e6:46:b8:03:67:31:2c:80:0e:72:f5:e6:fd:14:fc:12:82: 24:f8:f0:61:88:a1:d9:7d:f0:77:27:31:78:03:0f:84:68:30: 33:cb:19:e7:66:03:f8:89:0c:91:8b:29:20:ef:8c:6f:18:03: d2:df:74:f8:19:f2:64:80:48:1a:38:cb:c9:67:62:f6:da:13: 64:88:cf:ca:8d:9a:ea:ce:f2:37:da:e3:c1:ff:3f:70:37:e7: da:cb:23:18:d8:01:7e:e1:66:bd:1c:09:61:8c:6d:87:08:f3: 80:5d:bc:8f:14:73:24:e5:a9:b5:b1:b6:60:7e:61:7e:7b:19: 7e:e3:f2:5e:a5:a5:82:db:f0:5c:33:1d:e4:d5:ed:22:9d:a5: fe:09:e1:7e:3f:f3:a8:7d:91:10:43:27:c3:5c:1f:19:3a:0b: d7:1d:8c:8c:62:73:f5:3d:5c:99:2b:43:40:4b:bf:93:71:fe: 71:44:86:c0:f1:45:1d:35:cd:21:34:db:0d:ad:40:4d:b9:a8: a1:05:c3:ac:a5:fa:65:d5:51:dd:e5:90:a2:7d:25:6b:8f:3a: c9:a8:97:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Fg0HaMeoo8kNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MWRiOWUxNWYtODU4Ni00ZGM0LTg4NDAtYmYwNzdlZDU4ZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfvSNn2b1z0dVFEf2xRRbOVEl8uJ2JNZ+yC9 VQ8492iAXkkXMyFUs/41Z6wcaYFFzhnzi0rTSAHdc2ADKLHI4wqbfQVx5Pc0A0m1 RE9/AcOuIxy3v2pcIXSybh1jwJ311xalxf2KXnk2MsWJsLIgeeYqw6YkYQftQAcE fb0pPwHqDKHsnk1JMmXZY0taFP5DAvKQmBiIxOTggS5x8MiBkY072gbOwGKMhJIR Iwh0Novn1cFXZboqraC9z6ziYKKUJYEQmyV71tx6MMtkcja70XXET9QEobWADz1i sySD1JZHlxmASznyepknHxGDhQ2q4nULv9WD9rwG2ix5ESNnKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3lYmmge2U0ov6+QN3xAgVcpTpiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjg5MGQ3ZWItOGVjYS0z MjVjLTkzMmYtNzU5NWY2ODEzNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJMDL4dgF3dEA8ULSsIfhrRShIC9btTcHKKxIIO4XTHx6DQS+TmRrgD ZzEsgA5y9eb9FPwSgiT48GGIodl98HcnMXgDD4RoMDPLGedmA/iJDJGLKSDvjG8Y A9LfdPgZ8mSASBo4y8lnYvbaE2SIz8qNmurO8jfa48H/P3A359rLIxjYAX7hZr0c CWGMbYcI84BdvI8UcyTlqbWxtmB+YX57GX7j8l6lpYLb8FwzHeTV7SKdpf4J4X4/ 86h9kRBDJ8NcHxk6C9cdjIxic/U9XJkrQ0BLv5Nx/nFEhsDxRR01zSE02w2tQE25 qKEFw6yl+mXVUd3lkKJ9JWuPOsmol1M= -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:35 2026 by rpki-client