$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a5bf4e4-ffaa-3a1e-9e0a-73b0eb6d12fb.roa File: 2a5bf4e4-ffaa-3a1e-9e0a-73b0eb6d12fb.roa (raw, json) Hash identifier: Mt3VGew9rEq4Q4Nfp8II0jB03TaWScU8ytAyPhkVOdY= Subject key identifier: 3B:B4:22:DB:64:BE:48:D4:14:DB:F6:57:59:F3:E3:29:3D:09:D0:4F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFEF31E66826C5CF58900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a5bf4e4-ffaa-3a1e-9e0a-73b0eb6d12fb.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fe:f3:1e:66:82:6c:5c:f5:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=beaa2acc-815e-4e0e-ac3f-8867ae5e1b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:da:e7:c3:2c:3f:85:8f:30:06:20:2f:15: 0e:c6:93:b2:92:5c:fd:a6:83:f6:02:71:f2:cc:10: e5:dd:fd:2b:75:3c:a8:00:fb:f0:42:08:53:d5:69: b7:f6:f8:83:90:90:02:70:7a:2d:c1:29:f1:72:37: db:e4:54:9d:3b:c7:ae:8f:73:1b:bb:ab:60:cc:6c: 07:11:55:ec:53:ad:6b:b1:47:15:68:61:64:e8:a8: 8b:68:c0:7a:34:6e:55:21:08:85:d7:67:a5:41:6b: 5f:0e:f9:75:80:62:da:1c:7c:30:cd:f3:06:10:ce: e3:f9:c3:71:1c:5c:7d:b2:44:e9:2b:9d:d1:35:54: a8:95:f4:55:36:09:e7:0f:20:eb:ef:e6:0c:d0:40: 39:f1:8d:57:b4:bc:0e:10:cc:bd:ba:f0:14:8f:68: 4e:53:2a:eb:ab:4a:b8:28:ca:3a:17:a7:f4:f4:a0: 31:e6:d5:ea:bb:74:73:3f:4b:b2:ec:c1:ef:44:60: 72:8b:c0:b7:5c:44:85:eb:32:87:b1:af:e2:77:9c: 9c:0a:c4:29:8f:ad:14:b3:c2:c5:ff:24:cd:5c:8e: d4:c5:3d:05:86:73:5b:e7:59:82:ce:f9:4c:75:42: 7d:a0:24:b5:0f:4f:96:83:b4:d9:78:94:e7:51:4f: 55:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B4:22:DB:64:BE:48:D4:14:DB:F6:57:59:F3:E3:29:3D:09:D0:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a5bf4e4-ffaa-3a1e-9e0a-73b0eb6d12fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:33:20:5d:50:f6:4e:05:e9:c5:bd:00:ee:70:62:ae:76:59: 9d:32:f3:34:59:89:0c:70:dd:66:2f:f3:35:16:81:f6:2d:e4: ee:a0:ca:2d:59:aa:0f:e3:b3:3c:60:f0:32:92:e3:3c:3d:aa: 17:3f:ef:6f:62:4b:6a:60:f2:ff:f7:e1:90:76:75:2b:5b:0e: aa:75:50:93:cd:53:95:45:f6:71:4f:8c:63:5e:33:b0:b5:5f: 8d:0e:76:95:d2:11:a3:ff:69:d1:c0:15:62:3e:d3:7d:a1:7b: b1:78:50:72:ef:df:e4:b0:a0:aa:26:86:6e:e8:a6:10:fd:ca: cd:88:3c:49:18:d0:2b:a7:60:63:bc:7f:7a:7b:73:6f:17:79: f6:22:b4:71:05:96:54:c7:ca:12:34:26:b1:f3:78:fb:28:96: 04:b0:77:0f:b6:61:ad:f3:3c:af:32:1e:ef:37:48:1d:eb:68: 71:97:35:a6:a4:1e:2c:ab:60:04:c3:5e:05:de:6f:3c:fd:40: bc:d9:94:b6:dd:48:d1:3a:16:2d:a6:94:cc:36:2b:1f:ff:bc: 23:16:4f:2b:b9:27:8c:78:47:1d:3e:d5:d5:5a:e8:4f:94:01: 7f:05:bc:4b:14:2e:3f:56:0a:0a:09:de:0a:e5:6e:7b:d5:5c: 6c:e4:51:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/7zHmaCbFz1iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YmVhYTJhY2MtODE1ZS00ZTBlLWFjM2YtODg2N2FlNWUxYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1Xa58MsP4WPMAYgLxUOxpOyklz9poP2AnHy zBDl3f0rdTyoAPvwQghT1Wm39viDkJACcHotwSnxcjfb5FSdO8euj3Mbu6tgzGwH EVXsU61rsUcVaGFk6KiLaMB6NG5VIQiF12elQWtfDvl1gGLaHHwwzfMGEM7j+cNx HFx9skTpK53RNVSolfRVNgnnDyDr7+YM0EA58Y1XtLwOEMy9uvAUj2hOUyrrq0q4 KMo6F6f09KAx5tXqu3RzP0uy7MHvRGByi8C3XESF6zKHsa/id5ycCsQpj60Us8LF /yTNXI7UxT0FhnNb51mCzvlMdUJ9oCS1D0+Wg7TZeJTnUU9VGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDu0IttkvkjUFNv2V1nz4yk9CdBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmE1YmY0ZTQtZmZhYS0z YTFlLTllMGEtNzNiMGViNmQxMmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0zIF1Q9k4F6cW9AO5wYq52WZ0y8zRZiQxw3WYv8zUWgfYt5O6gyi1Z qg/jszxg8DKS4zw9qhc/729iS2pg8v/34ZB2dStbDqp1UJPNU5VF9nFPjGNeM7C1 X40OdpXSEaP/adHAFWI+032he7F4UHLv3+SwoKomhm7ophD9ys2IPEkY0CunYGO8 f3p7c28XefYitHEFllTHyhI0JrHzePsolgSwdw+2Ya3zPK8yHu83SB3raHGXNaak HiyrYATDXgXebzz9QLzZlLbdSNE6Fi2mlMw2Kx//vCMWTyu5J4x4Rx0+1dVa6E+U AX8FvEsULj9WCgoJ3grlbnvVXGzkUas= -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:20 2026 by rpki-client