$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d8621e9-9f84-31cf-9d75-505b44079a2a.roa File: 2d8621e9-9f84-31cf-9d75-505b44079a2a.roa (raw, json) Hash identifier: 2niK0omhQtDXVsDkTCyFm9ENtKRjcNh+LmsyZqx7KDU= Subject key identifier: 20:89:6C:8C:F2:52:58:0D:44:12:14:E4:59:D5:79:1C:45:9F:3E:A0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0AD4AD73FDB4E9A1C6380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d8621e9-9f84-31cf-9d75-505b44079a2a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ad:4a:d7:3f:db:4e:9a:1c:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=fe058f11-a75b-4650-8d2f-c1894b7f9a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e8:0e:7b:60:d2:85:47:cc:28:5d:34:fb:a0: 95:4c:49:74:92:e8:09:13:63:77:9e:9a:d3:24:3e: 17:9e:3e:a3:26:7d:15:00:f9:4a:09:4e:82:0e:d0: 4e:6c:1b:aa:be:e2:ba:d1:44:ec:04:6a:3a:f6:8e: 86:14:16:6a:41:13:23:26:9c:9f:68:fa:22:5c:01: d3:e4:7b:e4:ee:7e:ac:c4:60:25:ea:52:75:1e:09: 4d:39:b0:3c:f5:af:7a:21:84:59:ea:1d:fb:77:55: 2c:f3:eb:c9:89:71:ed:f0:ef:03:57:f9:b2:1b:56: 76:7d:50:30:3d:eb:ed:9f:97:db:5b:73:39:7d:70: 71:39:1c:29:7e:52:f2:7d:ff:69:45:d7:16:15:f1: b0:52:e4:22:ee:4b:68:c3:bd:f8:9c:65:5e:79:56: 51:80:31:4b:67:4e:b6:d8:15:f5:d0:ce:83:3c:cd: ec:f1:fa:37:7a:60:4b:9d:96:1a:16:4e:eb:c5:10: 4e:ea:aa:68:77:46:4c:51:85:d0:00:62:93:26:81: 4f:47:7e:f1:58:1b:6d:ce:81:51:56:f1:89:7b:cb: dc:ef:ab:f2:9b:19:3d:ff:b5:5c:37:40:a7:22:1a: 23:53:2e:bc:ef:4b:f4:f2:60:65:7e:84:4c:00:4c: c7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:89:6C:8C:F2:52:58:0D:44:12:14:E4:59:D5:79:1C:45:9F:3E:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d8621e9-9f84-31cf-9d75-505b44079a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:48:04:2a:de:5c:f7:59:cc:44:4c:7b:47:3d:f8:e8:19:5a: 26:3f:04:a1:4f:4e:9f:30:b2:e4:dd:21:5b:2b:cd:38:a8:b9: 19:56:b7:fc:2c:12:46:6d:a5:a1:ae:c0:3b:66:a8:53:5b:97: 90:e3:f3:97:d2:ec:1c:17:2a:fa:71:6b:7b:58:45:50:b6:ae: 10:4e:e5:4e:6d:c8:50:f6:8d:70:b1:39:a1:71:4d:c6:ab:20: 43:fe:9d:80:d2:ab:89:a3:63:50:b5:1f:b6:25:1c:e6:62:6b: 9a:f5:dc:cd:92:1e:d7:56:8d:27:bb:e3:eb:9e:c5:c5:4f:fb: 0a:a2:ac:15:60:4e:cf:96:4c:4b:60:b2:4e:47:33:8c:23:00: 32:fd:ad:4d:4d:a6:8e:08:ce:af:67:f9:d8:74:da:df:9c:5a: b2:0d:f2:5c:6b:c8:99:41:e5:b4:d3:88:70:dc:85:c6:25:92: ac:78:42:a0:8d:9a:49:ad:d8:e1:95:f1:f9:60:87:44:82:18: 7a:a1:fa:77:10:51:dc:ba:71:b6:b1:32:5d:92:6d:25:21:d5: 77:68:a0:44:57:25:39:90:ee:8a:81:2e:37:0e:ec:71:e8:92: 4e:2d:98:4f:f0:14:ce:0a:ed:1d:03:0b:67:03:e5:a8:64:8a: 74:42:43:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4K1K1z/bTpocY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZmUwNThmMTEtYTc1Yi00NjUwLThkMmYtYzE4OTRiN2Y5YTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOgOe2DShUfMKF00+6CVTEl0kugJE2N3nprT JD4Xnj6jJn0VAPlKCU6CDtBObBuqvuK60UTsBGo69o6GFBZqQRMjJpyfaPoiXAHT 5Hvk7n6sxGAl6lJ1HglNObA89a96IYRZ6h37d1Us8+vJiXHt8O8DV/myG1Z2fVAw Pevtn5fbW3M5fXBxORwpflLyff9pRdcWFfGwUuQi7ktow734nGVeeVZRgDFLZ062 2BX10M6DPM3s8fo3emBLnZYaFk7rxRBO6qpod0ZMUYXQAGKTJoFPR37xWBttzoFR VvGJe8vc76vymxk9/7VcN0CnIhojUy6870v08mBlfoRMAEzHVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCJbIzyUlgNRBIU5FnVeRxFnz6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmQ4NjIxZTktOWY4NC0z MWNmLTlkNzUtNTA1YjQ0MDc5YTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPICMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZIBCreXPdZzERMe0c9+OgZWiY/BKFPTp8wsuTdIVsrzTiouRlWt/ws EkZtpaGuwDtmqFNbl5Dj85fS7BwXKvpxa3tYRVC2rhBO5U5tyFD2jXCxOaFxTcar IEP+nYDSq4mjY1C1H7YlHOZia5r13M2SHtdWjSe74+uexcVP+wqirBVgTs+WTEtg sk5HM4wjADL9rU1Npo4Izq9n+dh02t+cWrIN8lxryJlB5bTTiHDchcYlkqx4QqCN mkmt2OGV8flgh0SCGHqh+ncQUdy6cbaxMl2SbSUh1XdooERXJTmQ7oqBLjcO7HHo kk4tmE/wFM4K7R0DC2cD5ahkinRCQ90= -----END CERTIFICATE-----Generated at Thu Mar 26 06:09:07 2026 by rpki-client