$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2cf58f97-9f7a-3605-9479-6caad20a6fb2.roa File: 2cf58f97-9f7a-3605-9479-6caad20a6fb2.roa (raw, json) Hash identifier: N3weEzve9lop7PT0xtOs1FNSBHyH8Ovzrpcot6Ai9yg= Subject key identifier: 65:3E:89:B0:5D:AC:6A:C0:2C:30:77:31:A4:CC:00:94:D1:2C:38:8A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0650B6C0A20E5A17C6B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2cf58f97-9f7a-3605-9479-6caad20a6fb2.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:65:0b:6c:0a:20:e5:a1:7c:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=43619cd0-60b8-4f55-a753-312246b25913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dd:e3:8f:07:22:85:a2:2f:64:0f:46:f3:52: 23:e5:aa:c7:b2:cc:3c:6d:c8:53:85:e8:73:d9:a0: 8f:9f:c6:d3:a2:0c:c9:55:52:6f:9d:bd:78:11:3f: e0:b0:ec:f0:88:19:24:a0:56:c3:88:e1:9b:e1:d8: ca:19:5e:d6:16:24:10:20:a2:42:4a:89:ca:c4:a5: a1:b3:8d:98:51:b2:49:f3:82:36:69:11:b2:54:83: d5:11:c0:30:e9:bd:eb:58:eb:24:96:29:97:e5:1f: d0:34:a8:a2:f5:b2:84:f5:bb:fd:bd:7e:d6:fa:82: db:67:50:ca:88:04:9c:ea:48:dd:fa:05:19:5e:f6: 50:15:dc:b8:3c:a3:bc:0f:c9:71:7f:ad:5c:0b:e8: 08:99:3e:2c:2f:87:6e:08:9d:7a:e8:3e:01:1a:a1: 2e:ab:98:36:32:86:88:4f:f8:a9:d4:c6:5f:ab:10: b2:19:cc:b2:6f:a8:f8:58:fb:d2:e4:6a:b6:73:d5: fd:8a:84:2b:a2:ce:dc:8a:f2:cd:e9:dd:da:e5:99: 49:2f:9b:fc:f0:d3:3a:1e:60:9c:ed:74:50:ce:c3: 7d:37:ee:79:f1:5c:15:47:36:6e:5b:b2:03:e2:b8: ed:5c:5d:fa:d1:5b:a8:af:c1:cf:e5:bd:e2:0c:1f: 58:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3E:89:B0:5D:AC:6A:C0:2C:30:77:31:A4:CC:00:94:D1:2C:38:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2cf58f97-9f7a-3605-9479-6caad20a6fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:f7:2c:5f:ed:80:f6:ad:8a:a2:f9:b8:da:6f:73:e7:42:45: 52:94:d5:63:0b:87:da:db:88:9c:b9:e6:05:02:21:5d:d5:0d: c0:0a:f0:c8:c9:ba:58:db:55:c2:eb:35:92:ce:3e:48:83:78: d7:f4:e3:d8:e0:ef:f7:81:9e:e3:98:b7:c1:9a:37:68:da:9e: 25:98:97:51:4b:f7:93:2e:bb:ee:10:b8:1b:27:2a:dd:70:30: b9:82:fb:5a:31:97:08:07:4d:0b:63:fd:64:0c:78:58:19:ce: d6:88:26:40:17:ad:77:6a:5d:82:04:dc:37:c4:3a:9b:25:06: 28:a4:18:6e:f3:c3:dc:36:6a:d9:ac:81:86:71:be:14:dc:be: a4:9c:72:ff:65:9e:c1:0a:54:25:8d:7f:ee:67:ff:79:b6:1d: b1:7e:55:ef:f3:27:06:f7:64:f9:2e:93:41:72:37:55:eb:91: 71:ee:47:bf:e2:2e:af:28:f3:81:f8:3a:c8:1c:f3:dd:f8:ea: e9:4b:03:b7:a8:e5:78:50:14:97:57:4a:9b:67:e9:24:95:cb: c6:9b:eb:a9:60:1f:21:e6:b6:3f:47:1e:6e:7c:cd:06:a1:34: 10:0a:ca:14:46:bf:5d:a6:a5:c2:cf:18:b0:cb:62:f7:40:a0: bb:0b:fe:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GULbAog5aF8awAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDM2MTljZDAtNjBiOC00ZjU1LWE3NTMtMzEyMjQ2YjI1OTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt3jjwcihaIvZA9G81Ij5arHssw8bchThehz 2aCPn8bTogzJVVJvnb14ET/gsOzwiBkkoFbDiOGb4djKGV7WFiQQIKJCSonKxKWh s42YUbJJ84I2aRGyVIPVEcAw6b3rWOsklimX5R/QNKii9bKE9bv9vX7W+oLbZ1DK iASc6kjd+gUZXvZQFdy4PKO8D8lxf61cC+gImT4sL4duCJ166D4BGqEuq5g2MoaI T/ip1MZfqxCyGcyyb6j4WPvS5Gq2c9X9ioQros7civLN6d3a5ZlJL5v88NM6HmCc 7XRQzsN9N+558VwVRzZuW7ID4rjtXF360Vuor8HP5b3iDB9YhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGU+ibBdrGrALDB3MaTMAJTRLDiKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmNmNThmOTctOWY3YS0z NjA1LTk0NzktNmNhYWQyMGE2ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK02MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJz3LF/tgPatiqL5uNpvc+dCRVKU1WMLh9rbiJy55gUCIV3VDcAK8MjJ uljbVcLrNZLOPkiDeNf049jg7/eBnuOYt8GaN2janiWYl1FL95Muu+4QuBsnKt1w MLmC+1oxlwgHTQtj/WQMeFgZztaIJkAXrXdqXYIE3DfEOpslBiikGG7zw9w2atms gYZxvhTcvqSccv9lnsEKVCWNf+5n/3m2HbF+Ve/zJwb3ZPkuk0FyN1XrkXHuR7/i Lq8o84H4Osgc89346ulLA7eo5XhQFJdXSptn6SSVy8ab66lgHyHmtj9HHm58zQah NBAKyhRGv12mpcLPGLDLYvdAoLsL/is= -----END CERTIFICATE-----Generated at Thu Mar 26 06:06:02 2026 by rpki-client