$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/290fcfd4-17cb-338a-b652-3cf2305e2aa4.roa File: 290fcfd4-17cb-338a-b652-3cf2305e2aa4.roa (raw, json) Hash identifier: 7vngJoMYFhOjIfyeP25bCS5n3VBVzHGpU8LVLFT4tgI= Subject key identifier: C1:0F:B5:66:09:44:4D:86:AB:62:80:63:C7:50:F4:BB:8D:B1:39:77 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFF60111824E949902080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/290fcfd4-17cb-338a-b652-3cf2305e2aa4.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:ff:60:11:18:24:e9:49:90:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=73a5e29a-4dfb-4252-a2b5-2f7de3d1500c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b2:b3:91:23:dc:e3:68:9e:12:2b:74:02:10: 2d:e3:f6:c6:07:bd:84:19:1a:18:82:6d:05:4f:ff: 2a:f4:ef:bd:ac:45:c4:0d:3d:cc:14:95:6c:71:28: 8d:35:24:c1:9d:49:28:26:ff:2b:c7:83:80:61:4c: 45:55:56:3a:20:e7:1a:87:dc:94:bb:d0:bf:02:a7: a4:5b:d4:ba:5a:98:14:79:3b:3f:b2:ac:22:5f:f7: e4:a7:85:f3:2e:92:2e:85:5e:fd:15:e3:a3:b8:3e: 9d:3b:90:28:80:11:50:06:63:24:82:f4:0d:e4:97: 2b:5e:5c:3a:6c:22:59:7e:a7:c8:d6:9e:6a:e5:ed: 40:60:cc:37:34:65:c7:43:df:21:64:57:57:3d:fb: 30:d9:db:89:91:31:29:69:94:36:27:78:e2:4d:45: 92:d7:d0:e8:12:eb:de:fb:b4:36:53:57:cf:e1:18: 3a:21:e3:37:eb:5f:66:b0:95:ab:65:17:c1:e8:aa: 24:3e:d9:81:35:76:ff:82:c4:4a:1f:11:52:e1:35: e2:ee:5d:57:90:c0:1b:ce:14:7c:45:c6:e6:8b:fd: 34:44:3a:35:6f:f2:99:10:a8:55:ed:4b:a7:bb:8b: 44:85:d8:cf:26:e6:b1:86:5c:c3:6e:fa:93:a8:7d: ef:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0F:B5:66:09:44:4D:86:AB:62:80:63:C7:50:F4:BB:8D:B1:39:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/290fcfd4-17cb-338a-b652-3cf2305e2aa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:08:c2:bd:47:f9:4a:d5:ea:93:d0:e1:2a:57:c4:0a:14:85: 20:65:77:6a:2c:1f:1c:c3:62:aa:48:19:24:05:e4:09:a2:51: c8:c2:d9:97:ed:3b:80:96:f4:d0:bc:f0:9c:38:73:9e:41:55: c5:68:f0:09:6d:23:cb:98:3f:91:a2:76:3e:d6:e5:21:1a:3e: e3:0c:7b:49:38:96:4d:f3:02:72:43:74:0c:8e:1b:5a:35:94: 92:aa:88:11:5d:8e:c2:33:cd:a2:f3:cb:a3:fd:f4:54:89:42: 62:ec:4f:6c:30:fc:20:97:05:93:ef:6e:a9:c8:d6:12:1b:62: c0:b3:4b:ec:5f:84:c5:b1:62:01:b8:bf:c0:e0:2b:9f:09:1e: 26:67:98:ea:8a:f8:06:72:31:fd:c3:0e:e5:4c:fc:3a:66:6a: d5:1d:58:ee:64:fc:85:5c:4b:b0:ad:e8:84:b4:a6:81:88:ab: 1d:3a:fb:39:67:12:90:21:07:31:7b:e6:79:e8:52:f7:dc:e0: 77:ff:a6:a6:cf:7d:2d:24:1d:aa:ef:e9:20:fd:20:1e:1f:1f: 32:98:65:ac:47:fd:75:54:96:ae:44:70:51:e5:50:2c:ec:c2: a8:d5:7b:9e:42:e1:e9:1c:98:49:bf:16:0e:ea:92:17:64:4d: 02:66:64:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/9gERgk6UmQIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NzNhNWUyOWEtNGRmYi00MjUyLWEyYjUtMmY3ZGUzZDE1MDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirKzkSPc42ieEit0AhAt4/bGB72EGRoYgm0F T/8q9O+9rEXEDT3MFJVscSiNNSTBnUkoJv8rx4OAYUxFVVY6IOcah9yUu9C/Aqek W9S6WpgUeTs/sqwiX/fkp4XzLpIuhV79FeOjuD6dO5AogBFQBmMkgvQN5JcrXlw6 bCJZfqfI1p5q5e1AYMw3NGXHQ98hZFdXPfsw2duJkTEpaZQ2J3jiTUWS19DoEuve +7Q2U1fP4Rg6IeM3619msJWrZRfB6KokPtmBNXb/gsRKHxFS4TXi7l1XkMAbzhR8 Rcbmi/00RDo1b/KZEKhV7Uunu4tEhdjPJuaxhlzDbvqTqH3vOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEPtWYJRE2Gq2KAY8dQ9LuNsTl3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjkwZmNmZDQtMTdjYi0z MzhhLWI2NTItM2NmMjMwNWUyYWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoIwr1H+UrV6pPQ4SpXxAoUhSBld2osHxzDYqpIGSQF5AmiUcjC2Zft O4CW9NC88Jw4c55BVcVo8AltI8uYP5Gidj7W5SEaPuMMe0k4lk3zAnJDdAyOG1o1 lJKqiBFdjsIzzaLzy6P99FSJQmLsT2ww/CCXBZPvbqnI1hIbYsCzS+xfhMWxYgG4 v8DgK58JHiZnmOqK+AZyMf3DDuVM/DpmatUdWO5k/IVcS7Ct6IS0poGIqx06+zln EpAhBzF75nnoUvfc4Hf/pqbPfS0kHarv6SD9IB4fHzKYZaxH/XVUlq5EcFHlUCzs wqjVe55C4ekcmEm/Fg7qkhdkTQJmZGY= -----END CERTIFICATE-----Generated at Thu Mar 26 23:49:47 2026 by rpki-client