$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f3ad59c-eada-3be0-952f-428ebee1b82d.roa File: 2f3ad59c-eada-3be0-952f-428ebee1b82d.roa (raw, json) Hash identifier: 6q0ixMpPgMNO4V1/z1rpMRVTp+UEGqMn85b9/mMQHuo= Subject key identifier: 01:99:2B:CC:9B:E7:93:7B:21:BC:DB:D0:B2:BD:2F:94:D2:37:2C:D5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFB7CEAA889E75778C4280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f3ad59c-eada-3be0-952f-428ebee1b82d.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:b7:ce:aa:88:9e:75:77:8c:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=7bef6976-7281-481c-b340-343de9b64b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:ad:b9:29:db:f5:d4:f3:15:ca:7d:2a:19: 55:90:e3:ad:a4:1f:29:81:4b:c9:86:da:83:29:67: dc:2c:49:b3:61:9d:5b:0e:e5:e0:3a:e4:24:c8:6e: 41:fc:7f:b4:36:29:7a:f7:51:78:bf:84:2d:f3:39: 0b:86:f6:44:d1:95:f8:94:b9:64:ab:94:b8:ad:49: cd:1b:0f:ec:6d:99:e1:42:a9:d3:a4:64:44:6d:da: 5b:e8:ea:3a:9c:55:a9:be:36:1c:d4:17:64:b3:c0: f0:a3:1b:eb:94:59:74:ea:30:62:ff:de:15:95:d8: 3b:b1:58:7d:ea:b8:07:1b:ad:c8:a7:16:89:e5:61: c1:b2:2d:2d:60:08:2e:cc:c0:d7:54:84:e4:5c:ed: 41:b6:c8:b5:12:21:01:0d:d2:70:16:bc:cc:a9:ea: db:f6:4d:e0:8a:3a:3e:72:df:0a:b8:cc:5d:e6:38: 61:10:a0:37:1e:7b:2c:11:7e:4f:f6:70:0d:59:0e: b3:af:84:5e:19:60:61:af:4c:10:dd:4c:1e:48:39: 9b:7c:6d:73:45:a0:38:8d:74:6d:49:bc:9f:af:9d: ab:54:76:25:1d:b8:61:54:e6:9a:75:dd:75:68:98: 7e:47:f2:87:41:57:0a:43:7f:4b:a6:47:63:a1:a3: e7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:99:2B:CC:9B:E7:93:7B:21:BC:DB:D0:B2:BD:2F:94:D2:37:2C:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f3ad59c-eada-3be0-952f-428ebee1b82d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:65:37:c8:a1:6e:26:87:99:fa:0f:a9:ef:c1:43:93:e1:8c: 81:00:77:da:9d:7f:30:f2:d0:51:d5:94:fe:9a:11:dd:ed:79: 5a:5f:f6:e7:3c:66:24:e2:f6:2a:c2:ec:7d:b6:6c:a7:a2:99: aa:cb:14:97:56:2e:98:71:2e:01:7d:7d:04:fc:34:d4:56:49: d7:40:f6:30:55:39:ae:43:78:9d:d4:19:22:5b:33:2f:ae:4a: 72:86:03:80:c7:c0:12:ae:8b:f6:60:a7:d8:a4:1c:54:e5:e8: a0:1d:8e:f0:31:1d:85:cd:5e:be:4d:f7:c9:c3:74:80:f9:86: da:d1:af:a4:0a:5e:96:67:95:f0:20:2d:45:2a:27:60:f2:ff: 56:b8:b9:35:a2:4d:2f:73:72:32:62:33:20:d7:4b:4d:52:c8: b8:c8:43:2f:a6:af:83:7c:a1:4f:3c:9a:22:51:eb:ba:94:dc: 8d:dd:02:43:dc:2b:a5:3f:4d:75:d6:55:26:2e:3a:6e:0b:d3: 50:61:e0:3b:de:28:34:53:58:8a:1c:cd:a4:b2:25:ba:f3:8e: b9:3e:0a:57:9a:12:38:30:34:c4:72:7d:36:7d:c6:af:fc:4c: da:4b:74:54:e2:3e:f0:7e:7e:da:6b:5d:4a:5b:0e:3b:34:f9: 24:a9:9f:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37fOqoiedXeMQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk N2JlZjY5NzYtNzI4MS00ODFjLWIzNDAtMzQzZGU5YjY0YjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjOtuSnb9dTzFcp9KhlVkOOtpB8pgUvJhtqD KWfcLEmzYZ1bDuXgOuQkyG5B/H+0Nil691F4v4Qt8zkLhvZE0ZX4lLlkq5S4rUnN Gw/sbZnhQqnTpGREbdpb6Oo6nFWpvjYc1Bdks8DwoxvrlFl06jBi/94Vldg7sVh9 6rgHG63IpxaJ5WHBsi0tYAguzMDXVITkXO1Btsi1EiEBDdJwFrzMqerb9k3gijo+ ct8KuMxd5jhhEKA3HnssEX5P9nANWQ6zr4ReGWBhr0wQ3UweSDmbfG1zRaA4jXRt Sbyfr52rVHYlHbhhVOaadd11aJh+R/KHQVcKQ39LpkdjoaPn+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGZK8yb55N7Ibzb0LK9L5TSNyzVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmYzYWQ1OWMtZWFkYS0z YmUwLTk1MmYtNDI4ZWJlZTFiODJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJlN8ihbiaHmfoPqe/BQ5PhjIEAd9qdfzDy0FHVlP6aEd3teVpf9uc8 ZiTi9irC7H22bKeimarLFJdWLphxLgF9fQT8NNRWSddA9jBVOa5DeJ3UGSJbMy+u SnKGA4DHwBKui/Zgp9ikHFTl6KAdjvAxHYXNXr5N98nDdID5htrRr6QKXpZnlfAg LUUqJ2Dy/1a4uTWiTS9zcjJiMyDXS01SyLjIQy+mr4N8oU88miJR67qU3I3dAkPc K6U/TXXWVSYuOm4L01Bh4DveKDRTWIoczaSyJbrzjrk+CleaEjgwNMRyfTZ9xq/8 TNpLdFTiPvB+ftprXUpbDjs0+SSpn5I= -----END CERTIFICATE-----Generated at Thu Mar 26 15:26:53 2026 by rpki-client