$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a9afe68-8094-375c-b738-96068d4adc6f.roa File: 2a9afe68-8094-375c-b738-96068d4adc6f.roa (raw, json) Hash identifier: CcAc9dR5irn7Wjm13TrwRy3QEl1K5NuDyQFhbosQHXk= Subject key identifier: CA:77:58:01:FF:67:B6:76:53:0E:C3:02:58:EE:30:90:76:44:A1:79 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFEB6621273B5E8133E40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a9afe68-8094-375c-b738-96068d4adc6f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fe:b6:62:12:73:b5:e8:13:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c12292ce-8386-4a45-b00b-ee883acf8df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:02:b1:0a:f8:65:6e:9f:40:ac:db:4d:ce:77: b2:b0:ac:b6:02:41:8c:2e:ef:7d:5f:f1:ae:6e:20: 6d:31:ec:04:e0:f9:45:23:d7:3a:50:59:9f:86:f7: 16:f4:44:67:3b:5a:9f:b9:a1:ff:44:09:11:a5:70: 3b:8b:2f:50:40:77:64:e6:7f:15:1d:2c:c5:11:a1: e8:cd:73:c1:5f:b0:26:07:f8:f4:2c:c7:1b:0e:9e: b3:9b:4f:9d:3b:86:dc:37:03:75:9b:a9:3b:4b:8d: 36:87:7f:1d:ec:09:e0:d2:99:2e:5a:7c:59:57:fa: c3:9e:0b:5f:29:2f:00:19:cc:ae:f8:76:95:93:9f: e7:81:16:e8:44:49:08:a7:7e:ba:2d:30:e0:93:cc: 85:b3:d4:8f:4a:0a:8e:d8:2f:42:b6:d3:a6:bd:34: 71:22:b1:cd:57:35:0e:5d:12:27:0b:3d:d3:33:ec: 2e:ad:24:0a:4a:e4:79:08:72:2a:5d:f0:f6:3c:79: a6:9e:04:b2:bb:c5:97:ca:7a:da:c2:fc:fe:c9:76: 62:79:00:5d:09:df:cf:49:d1:f1:e0:cb:30:6b:33: ab:e0:2f:8b:0a:eb:de:24:4f:16:1f:7f:61:22:e8: 26:19:e0:ad:2b:28:8a:e6:01:2a:31:df:10:1f:c5: e2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:77:58:01:FF:67:B6:76:53:0E:C3:02:58:EE:30:90:76:44:A1:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a9afe68-8094-375c-b738-96068d4adc6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:75:18:f8:ea:5d:56:e0:64:08:fd:2c:30:13:0a:9d:29:5e: b0:f7:43:64:ca:c9:b9:9e:6c:90:da:7b:bc:e3:02:91:66:e6: 6b:33:1f:ba:e9:14:df:2e:3c:59:1a:ec:b9:c8:c7:aa:8f:63: 6b:7f:e9:21:6a:58:93:b0:ac:52:1d:89:93:1c:f1:27:ed:e2: 82:85:b2:e1:a5:a0:d1:4a:dd:08:3d:0b:57:e7:8b:12:20:9e: e1:c1:cb:3a:d3:14:10:cb:65:1d:30:29:96:7f:5c:1c:5a:41: 3d:b1:72:e0:7c:9b:b5:61:b2:cf:9d:29:07:dd:53:b2:9d:41: 0d:87:ba:3c:41:ef:b3:c5:12:03:da:2c:54:e8:c8:87:ec:4e: 19:a2:a2:50:a5:53:07:93:21:55:70:09:72:da:b9:1f:b8:c0: 57:79:d2:aa:79:d5:e3:ad:a6:47:76:e9:81:ac:c7:b4:db:a4: 99:12:2b:31:69:95:21:36:f6:c3:9b:d5:bb:c2:b8:d7:63:e7: 08:e2:58:58:03:c2:41:d3:ff:df:57:a7:51:54:ae:16:97:de: 3e:a1:10:6e:9d:cc:aa:44:8d:1f:76:fb:55:48:9c:54:e1:b3: 5c:76:e3:35:3c:7b:e7:12:85:03:a9:0d:41:e6:18:c9:28:cc: f6:ce:88:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/62YhJztegTPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YzEyMjkyY2UtODM4Ni00YTQ1LWIwMGItZWU4ODNhY2Y4ZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AKxCvhlbp9ArNtNzneysKy2AkGMLu99X/Gu biBtMewE4PlFI9c6UFmfhvcW9ERnO1qfuaH/RAkRpXA7iy9QQHdk5n8VHSzFEaHo zXPBX7AmB/j0LMcbDp6zm0+dO4bcNwN1m6k7S402h38d7Ang0pkuWnxZV/rDngtf KS8AGcyu+HaVk5/ngRboREkIp366LTDgk8yFs9SPSgqO2C9CttOmvTRxIrHNVzUO XRInCz3TM+wurSQKSuR5CHIqXfD2PHmmngSyu8WXynrawvz+yXZieQBdCd/PSdHx 4MswazOr4C+LCuveJE8WH39hIugmGeCtKyiK5gEqMd8QH8XivQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMp3WAH/Z7Z2Uw7DAljuMJB2RKF5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmE5YWZlNjgtODA5NC0z NzVjLWI3MzgtOTYwNjhkNGFkYzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALt1GPjqXVbgZAj9LDATCp0pXrD3Q2TKybmebJDae7zjApFm5mszH7rp FN8uPFka7LnIx6qPY2t/6SFqWJOwrFIdiZMc8Sft4oKFsuGloNFK3Qg9C1fnixIg nuHByzrTFBDLZR0wKZZ/XBxaQT2xcuB8m7Vhss+dKQfdU7KdQQ2HujxB77PFEgPa LFToyIfsThmiolClUweTIVVwCXLauR+4wFd50qp51eOtpkd26YGsx7TbpJkSKzFp lSE29sOb1bvCuNdj5wjiWFgDwkHT/99Xp1FUrhaX3j6hEG6dzKpEjR92+1VInFTh s1x24zU8e+cShQOpDUHmGMkozPbOiIU= -----END CERTIFICATE-----Generated at Thu Mar 26 20:41:52 2026 by rpki-client