$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a75357a-d4af-3cf5-9703-5226ae5d9f08.roa File: 2a75357a-d4af-3cf5-9703-5226ae5d9f08.roa (raw, json) Hash identifier: wz+Nedj/vadphSGIttIHEfZmMZ15FIQIa6CJTM7zl3k= Subject key identifier: C3:E4:A5:36:81:86:8A:D4:73:3D:57:47:4E:98:B0:E6:6E:4D:44:19 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B32EF6199BD70B2E6180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a75357a-d4af-3cf5-9703-5226ae5d9f08.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b3:2e:f6:19:9b:d7:0b:2e:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a97af182-4473-48ce-b195-ed4ef3d8ea71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e4:21:1c:3c:4c:85:8d:4e:81:c2:41:62:b4: 8d:77:cb:03:29:3c:dd:af:9d:02:fa:9f:8a:d0:0d: ff:10:24:e0:af:e7:33:30:c1:95:ee:c5:02:15:91: 35:6c:23:5f:04:65:56:a2:ec:5c:02:6e:48:58:db: ae:bb:bd:09:77:f8:2a:1a:93:b0:71:44:5b:e9:a0: 30:9e:10:3f:c7:1a:e3:3d:79:27:c4:9a:16:a8:19: 34:f7:dd:45:c2:0b:50:7e:e2:6d:89:2d:47:a9:75: ad:0c:b1:88:8c:07:3f:97:d8:6d:ea:db:5f:00:9f: ab:b2:74:21:6e:ff:63:b5:a4:44:10:83:f8:fe:ca: 5d:e5:02:c4:56:0b:57:e5:39:72:bc:95:0d:83:10: 30:9c:26:b1:2a:78:9d:1e:ef:47:9e:8f:b3:12:4a: 13:30:16:6e:74:48:1c:1a:95:8c:48:1a:05:c6:3e: b1:d8:6a:c8:f9:98:b3:30:67:95:0b:40:0b:dc:d3: 8b:21:25:9c:71:a4:2c:be:e0:df:ae:c7:02:bd:3a: 3f:ec:e3:75:fe:40:82:85:68:54:c0:80:53:e4:d6: 48:89:e4:ba:f7:a8:c9:43:a9:01:d3:6f:fa:12:dd: a9:76:cd:4d:1e:46:28:ab:f3:5e:a7:f8:d9:0e:05: 65:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E4:A5:36:81:86:8A:D4:73:3D:57:47:4E:98:B0:E6:6E:4D:44:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a75357a-d4af-3cf5-9703-5226ae5d9f08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:9c:4c:fa:3a:b8:92:80:cb:51:10:7d:06:ec:cc:d2:4f:ea: 6b:20:4d:e8:5e:55:55:af:80:c5:5a:5f:47:3d:ee:a5:b6:13: d1:8a:c7:09:ff:03:06:e3:ae:9a:40:18:ee:a2:f8:d6:8d:9f: 1f:3f:a3:b8:c6:68:fb:b7:dc:28:40:63:87:4f:b7:d1:2e:1a: 56:77:fa:e3:fa:69:a7:c7:a0:e4:dc:0a:fb:e0:ed:86:70:41: fb:05:24:02:3f:f1:ae:d6:90:15:50:88:d3:4b:63:5e:2c:ea: 9c:df:77:84:2a:83:79:75:bd:d2:ac:a2:21:17:cc:8a:46:50: 4e:68:d1:9d:cf:b3:62:46:df:a9:5e:19:b5:ea:12:51:82:08: a0:57:cf:12:40:3d:b1:c1:1c:1f:77:e0:47:09:27:a8:17:30: 79:43:bf:9b:27:b8:88:ec:83:c0:73:c2:38:1e:46:76:d6:5e: 09:2e:c3:25:ff:65:ab:13:f5:d6:c7:55:01:7a:a7:00:87:89: ce:c3:66:12:a4:29:fe:e8:74:7f:4c:9b:e9:19:16:89:12:2a: cf:ef:1b:ea:7f:d1:4b:c4:1d:cf:97:25:e8:de:36:64:1f:58: 66:28:1a:d5:8f:b1:ad:1e:a0:47:04:0a:c6:e0:57:4f:7e:b8: 66:fe:74:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LMu9hmb1wsuYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YTk3YWYxODItNDQ3My00OGNlLWIxOTUtZWQ0ZWYzZDhlYTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuQhHDxMhY1OgcJBYrSNd8sDKTzdr50C+p+K 0A3/ECTgr+czMMGV7sUCFZE1bCNfBGVWouxcAm5IWNuuu70Jd/gqGpOwcURb6aAw nhA/xxrjPXknxJoWqBk0991FwgtQfuJtiS1HqXWtDLGIjAc/l9ht6ttfAJ+rsnQh bv9jtaREEIP4/spd5QLEVgtX5TlyvJUNgxAwnCaxKnidHu9Hno+zEkoTMBZudEgc GpWMSBoFxj6x2GrI+ZizMGeVC0AL3NOLISWccaQsvuDfrscCvTo/7ON1/kCChWhU wIBT5NZIieS696jJQ6kB02/6Et2pds1NHkYoq/Nep/jZDgVlJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPkpTaBhorUcz1XR06YsOZuTUQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmE3NTM1N2EtZDRhZi0z Y2Y1LTk3MDMtNTIyNmFlNWQ5ZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL+cTPo6uJKAy1EQfQbszNJP6msgTeheVVWvgMVaX0c97qW2E9GKxwn/ AwbjrppAGO6i+NaNnx8/o7jGaPu33ChAY4dPt9EuGlZ3+uP6aafHoOTcCvvg7YZw QfsFJAI/8a7WkBVQiNNLY14s6pzfd4Qqg3l1vdKsoiEXzIpGUE5o0Z3Ps2JG36le GbXqElGCCKBXzxJAPbHBHB934EcJJ6gXMHlDv5snuIjsg8BzwjgeRnbWXgkuwyX/ ZasT9dbHVQF6pwCHic7DZhKkKf7odH9Mm+kZFokSKs/vG+p/0UvEHc+XJejeNmQf WGYoGtWPsa0eoEcECsbgV09+uGb+dIQ= -----END CERTIFICATE-----Generated at Thu Mar 26 13:42:34 2026 by rpki-client