$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b634e53-96be-3da2-a877-7b1f1c5db7bf.roa File: 2b634e53-96be-3da2-a877-7b1f1c5db7bf.roa (raw, json) Hash identifier: 3NC76HJQ0vTGaSg81SDhwakh1PQw6WXs4HOukm2YlZQ= Subject key identifier: 43:32:BC:AF:E4:2A:DE:9D:5C:FB:BC:94:21:D6:D5:3A:D5:98:2E:A9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B79FB56C15A699FC1790 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b634e53-96be-3da2-a877-7b1f1c5db7bf.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b7:9f:b5:6c:15:a6:99:fc:17:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=385ed48b-4b03-459d-8893-7348121ab7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:a4:34:9c:49:63:96:04:6f:e4:c1:f9:15: d2:65:af:f2:14:b2:16:8b:40:53:4b:14:45:e1:b2: b7:4e:cd:b7:ec:19:10:17:c7:bb:25:f5:4a:75:a8: e4:04:f5:47:95:7c:31:5a:f4:91:f2:d3:94:c1:34: c5:09:91:d6:0e:3c:e4:85:2a:3a:83:4f:9b:ef:da: 61:db:ac:35:c5:b0:df:db:1e:0a:30:c6:d0:b1:91: 88:7b:9d:3c:7d:c8:cf:6c:20:a5:a2:70:d2:72:a5: cb:32:78:10:61:74:45:90:bc:20:c2:5d:09:c8:ef: e3:bf:48:9e:2b:aa:ec:92:25:7b:e8:cf:a0:79:83: 48:6e:b1:d3:1b:ee:c2:30:73:63:d7:03:b8:fc:16: 53:dd:59:7b:d6:f6:5a:2a:66:f0:7c:e8:71:b8:39: cd:cf:7a:5d:ef:ee:61:45:fa:f3:8f:50:0a:df:55: 6e:72:75:e5:e7:c4:17:ab:c7:9b:e6:fa:1b:c0:73: b0:47:49:78:f1:91:75:28:34:ad:b2:1a:cc:b0:ec: 46:a5:75:af:13:70:e5:98:7d:20:86:0c:ee:74:5a: c1:4a:99:a6:7b:c8:75:47:63:54:e4:91:63:21:f2: 14:5b:1a:ab:f6:8c:33:ac:13:6f:30:01:da:79:69: 2c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:32:BC:AF:E4:2A:DE:9D:5C:FB:BC:94:21:D6:D5:3A:D5:98:2E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b634e53-96be-3da2-a877-7b1f1c5db7bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:47:cc:01:fc:c5:19:24:54:25:79:49:9f:e2:b0:9d:e7:b3: 5b:da:e7:c2:30:ea:c1:05:06:e6:ca:6e:18:d4:b4:da:23:17: 0e:18:59:4e:78:14:2a:de:3d:b6:4f:47:56:4a:72:2a:33:8c: 21:19:6e:77:80:c0:56:35:07:2b:ce:2c:00:35:fb:c3:41:70: 8e:4c:90:8b:49:f8:3f:1c:ed:ac:3c:73:85:8b:0b:f1:7f:d9: 5b:cf:2c:90:b9:b3:c8:3d:12:c0:32:35:49:a7:b7:4a:00:14: 82:67:2a:d8:6e:6f:91:58:99:f4:d4:f5:fb:a5:f0:cd:15:4a: 65:61:63:a1:d3:9b:f5:17:32:f6:b1:6e:ac:8c:97:df:d1:c0: 11:f1:9e:2f:3a:be:85:61:e0:c1:70:3d:7e:b3:e7:c8:7c:aa: 2c:df:a0:05:44:f2:33:bc:08:58:a1:2c:5e:a7:db:1e:ce:45: 5e:07:78:66:07:8e:51:36:c4:82:8e:df:9a:35:b4:e3:2a:32: 68:1d:07:ea:0d:2b:da:96:db:08:97:96:52:b9:04:8a:11:bf: 51:93:a9:ee:25:a1:17:da:ed:37:27:79:c7:18:73:5c:58:14: a7:af:8c:92:16:72:7c:8b:a3:1b:42:c0:8a:b3:ae:bf:63:c3: 27:e0:8f:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LeftWwVppn8F5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Mzg1ZWQ0OGItNGIwMy00NTlkLTg4OTMtNzM0ODEyMWFiN2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX2kNJxJY5YEb+TB+RXSZa/yFLIWi0BTSxRF 4bK3Ts237BkQF8e7JfVKdajkBPVHlXwxWvSR8tOUwTTFCZHWDjzkhSo6g0+b79ph 26w1xbDf2x4KMMbQsZGIe508fcjPbCClonDScqXLMngQYXRFkLwgwl0JyO/jv0ie K6rskiV76M+geYNIbrHTG+7CMHNj1wO4/BZT3Vl71vZaKmbwfOhxuDnNz3pd7+5h Rfrzj1AK31VucnXl58QXq8eb5vobwHOwR0l48ZF1KDStshrMsOxGpXWvE3DlmH0g hgzudFrBSpmme8h1R2NU5JFjIfIUWxqr9owzrBNvMAHaeWksnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMyvK/kKt6dXPu8lCHW1TrVmC6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmI2MzRlNTMtOTZiZS0z ZGEyLWE4NzctN2IxZjFjNWRiN2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlHzAH8xRkkVCV5SZ/isJ3ns1va58Iw6sEFBubKbhjUtNojFw4YWU54 FCrePbZPR1ZKciozjCEZbneAwFY1ByvOLAA1+8NBcI5MkItJ+D8c7aw8c4WLC/F/ 2VvPLJC5s8g9EsAyNUmnt0oAFIJnKthub5FYmfTU9ful8M0VSmVhY6HTm/UXMvax bqyMl9/RwBHxni86voVh4MFwPX6z58h8qizfoAVE8jO8CFihLF6n2x7ORV4HeGYH jlE2xIKO35o1tOMqMmgdB+oNK9qW2wiXllK5BIoRv1GTqe4loRfa7TcneccYc1xY FKevjJIWcnyLoxtCwIqzrr9jwyfgj2o= -----END CERTIFICATE-----Generated at Thu Mar 26 13:09:46 2026 by rpki-client