$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28c3e71e-70ec-3d1d-ae6a-61305e273aa6.roa File: 28c3e71e-70ec-3d1d-ae6a-61305e273aa6.roa (raw, json) Hash identifier: VfA3/If6rM8FYYXTGF1JT5Ij33rVR16nbCAE3KOR0r4= Subject key identifier: C7:D4:BF:70:4D:EF:78:36:C2:33:3D:89:4D:0D:B8:B1:AD:50:4D:D5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B6654DFF53FB8DE18980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28c3e71e-70ec-3d1d-ae6a-61305e273aa6.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b6:65:4d:ff:53:fb:8d:e1:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a8c3e24c-2d95-4a0b-97bb-809d63fe5c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b7:7a:96:1b:e1:f6:ca:2b:1a:28:30:60:b1: 88:78:e3:92:d0:d9:e6:8b:69:64:bf:37:3d:64:ba: 43:05:fa:9d:2e:da:52:69:8e:97:1f:cc:f3:65:50: 65:b2:d6:27:78:d0:07:b2:bd:94:96:21:6d:e8:85: ae:63:49:96:47:0a:41:ff:d5:ab:a8:1b:91:e0:17: d1:2f:2e:04:48:d9:40:87:d6:8b:b8:3e:0c:07:4a: bd:22:26:23:87:ee:1e:c1:3f:e8:4e:cb:f5:12:b4: f4:c4:35:24:00:4a:56:0c:4f:61:fd:4d:e2:8c:65: 38:9c:d8:96:a4:69:9d:a8:d9:a4:fe:7e:2c:27:96: d1:e1:a9:29:b8:88:20:12:29:33:74:f2:59:67:0a: 31:93:33:90:ab:d2:f2:28:39:fa:47:c5:ca:84:f7: c5:0f:82:e4:cb:41:c9:97:be:46:00:e9:c4:3f:68: 03:85:2c:53:5a:37:9c:3e:6c:a8:1f:1a:a2:c8:8e: 45:18:60:3e:22:c4:62:ca:ca:c2:66:99:cc:8e:d7: 82:fb:cf:33:26:a3:a8:91:54:2f:95:d9:0a:b5:a7: 39:b1:df:51:0c:ce:d1:24:f5:5d:60:2f:b8:93:ce: 6c:ff:13:1f:a4:f9:c0:48:76:51:72:21:54:be:cb: 1a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D4:BF:70:4D:EF:78:36:C2:33:3D:89:4D:0D:B8:B1:AD:50:4D:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28c3e71e-70ec-3d1d-ae6a-61305e273aa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:80:a0:c8:f3:eb:a7:4d:06:29:5e:18:7e:a6:06:fe:3e:b7: 72:f7:68:10:c9:19:15:63:ab:45:cf:69:b6:6e:31:b8:d5:69: 4f:09:9b:22:f5:be:d5:92:88:49:2c:9d:f9:df:5d:3f:3d:85: db:7c:34:25:ac:1a:ab:72:bc:0c:73:3c:69:53:4a:f6:52:76: e1:77:33:c7:8e:36:dc:e8:df:2b:11:2b:c3:f7:04:08:3c:4d: 7b:5b:35:0e:a6:e3:7f:83:ab:9d:d2:27:91:06:45:2a:77:6e: 32:8c:8a:c9:fb:73:c9:34:c0:83:a8:fd:14:34:8e:37:cc:96: de:46:82:9b:c2:45:07:e7:b8:f5:08:aa:70:b9:3c:8e:71:fd: ae:f4:c7:b8:00:27:38:ed:27:ea:f6:f4:20:a3:53:1f:2f:35: 96:54:2b:1e:d0:ca:5f:6d:54:14:56:35:7d:08:64:03:a3:69: b5:4e:23:84:d7:c0:89:e7:8b:c2:19:fb:a3:c0:8d:36:d1:2e: 6d:a9:85:fc:16:41:b6:98:e2:f5:9b:22:7e:c2:7f:02:27:8f: 3c:4f:65:79:bd:aa:b6:89:21:df:3c:4f:81:47:42:31:ab:fc: 3b:de:78:9f:3d:aa:20:8b:21:4c:b3:b3:e4:06:1c:47:44:65: 69:35:09:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LZlTf9T+43hiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YThjM2UyNGMtMmQ5NS00YTBiLTk3YmItODA5ZDYzZmU1Yzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbd6lhvh9sorGigwYLGIeOOS0Nnmi2lkvzc9 ZLpDBfqdLtpSaY6XH8zzZVBlstYneNAHsr2UliFt6IWuY0mWRwpB/9WrqBuR4BfR Ly4ESNlAh9aLuD4MB0q9IiYjh+4ewT/oTsv1ErT0xDUkAEpWDE9h/U3ijGU4nNiW pGmdqNmk/n4sJ5bR4akpuIggEikzdPJZZwoxkzOQq9LyKDn6R8XKhPfFD4Lky0HJ l75GAOnEP2gDhSxTWjecPmyoHxqiyI5FGGA+IsRiysrCZpnMjteC+88zJqOokVQv ldkKtac5sd9RDM7RJPVdYC+4k85s/xMfpPnASHZRciFUvssafwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfUv3BN73g2wjM9iU0NuLGtUE3VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjhjM2U3MWUtNzBlYy0z ZDFkLWFlNmEtNjEzMDVlMjczYWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+AoMjz66dNBileGH6mBv4+t3L3aBDJGRVjq0XPabZuMbjVaU8JmyL1 vtWSiEksnfnfXT89hdt8NCWsGqtyvAxzPGlTSvZSduF3M8eONtzo3ysRK8P3BAg8 TXtbNQ6m43+Dq53SJ5EGRSp3bjKMisn7c8k0wIOo/RQ0jjfMlt5GgpvCRQfnuPUI qnC5PI5x/a70x7gAJzjtJ+r29CCjUx8vNZZUKx7Qyl9tVBRWNX0IZAOjabVOI4TX wInni8IZ+6PAjTbRLm2phfwWQbaY4vWbIn7CfwInjzxPZXm9qraJId88T4FHQjGr /DveeJ89qiCLIUyzs+QGHEdEZWk1CYw= -----END CERTIFICATE-----Generated at Thu Mar 26 16:25:23 2026 by rpki-client