$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/321d34a2-ba6d-30ec-8987-e388030f57a3.roa File: 321d34a2-ba6d-30ec-8987-e388030f57a3.roa (raw, json) Hash identifier: c1OmX0gO2GIK/sKowHmUbO736c/hRA1DySL7V2wDElo= Subject key identifier: F8:F8:7B:96:B8:0B:40:90:A2:2D:FA:8D:88:95:B6:82:5B:AB:F2:23 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E004714C7DBB304608C5C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/321d34a2-ba6d-30ec-8987-e388030f57a3.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:04:71:4c:7d:bb:30:46:08:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=8b88a8d0-3eaa-45c0-af83-e2d831e302af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ab:46:f3:64:a3:7d:b5:89:cc:96:a2:5d:1d: 9b:c0:07:e5:ae:1c:8c:18:b2:63:1f:6c:f3:5f:e5: 72:43:fa:43:55:86:6a:f0:12:b6:e6:db:1a:f8:03: 84:12:ff:1e:1e:e8:a8:b8:5f:f6:3f:3f:5c:a4:f0: 29:22:71:54:b5:e5:67:39:67:94:28:8a:e4:4f:f6: 20:e8:ab:a0:77:fd:51:63:2c:06:49:8d:ed:dd:7f: d7:9b:56:87:c0:e8:e3:d2:52:05:70:66:e7:58:00: 35:81:57:18:16:22:60:55:9f:98:99:d9:6a:47:47: 55:a3:b6:8c:0f:41:41:ff:9f:a1:27:c5:d1:14:c4: ab:75:37:15:1c:6f:cc:80:dd:05:6d:de:e4:cc:83: bf:a9:6e:2c:9f:a6:50:46:82:55:dc:e3:b6:6a:71: 83:9d:bb:db:2f:88:3b:28:56:c1:49:dc:0f:a2:e8: ee:41:7e:70:f8:9b:f4:84:55:4e:73:d6:bb:df:12: 78:78:c8:11:10:87:79:38:b8:86:75:18:75:01:62: c6:e1:68:1d:ed:af:80:26:9a:13:ef:f8:a1:a6:4b: 7f:cc:15:55:7f:a6:df:de:f4:06:5d:ba:7c:16:48: 3a:40:cc:45:27:9c:1d:8a:56:ed:bd:9b:d3:74:06: cd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F8:7B:96:B8:0B:40:90:A2:2D:FA:8D:88:95:B6:82:5B:AB:F2:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/321d34a2-ba6d-30ec-8987-e388030f57a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b0:c4:84:af:a3:40:f3:21:f8:3d:78:7d:f0:9d:36:a7:48: 76:6b:a5:67:45:36:09:9f:c3:15:1b:c2:f4:bb:1e:76:e2:62: 44:4c:ba:97:8b:71:3e:12:06:59:ea:71:0a:89:e2:c0:2b:c6: 1d:e3:87:50:13:71:af:66:4b:52:b9:9e:17:e3:57:27:a4:4b: cb:b6:53:e1:f9:b4:eb:6f:a4:7b:0b:72:41:0a:3c:26:57:6a: a7:d2:57:74:ad:7d:b5:98:61:e3:f2:d5:50:70:37:25:78:a3: 03:8b:e4:1b:8e:2a:84:2f:60:b4:a9:c1:6f:27:73:00:64:98: bf:28:e9:b9:c2:85:51:93:6d:0a:13:5e:82:fe:61:9b:45:fe: da:7f:fe:1a:e4:70:8c:01:72:0e:9d:21:d4:76:f8:ff:26:a0: 26:e0:7b:c3:8f:30:55:94:72:db:09:bb:c9:3a:35:b0:5a:45: 11:0d:29:0e:36:6d:e1:c3:db:cf:81:75:a6:fb:60:0f:66:ea: d2:ee:94:84:e5:1b:bc:7c:59:26:65:8c:44:58:ff:8a:97:53: 30:ad:f1:a2:da:4c:10:1d:ac:82:0e:d5:11:03:af:2b:53:07: aa:d3:de:31:62:e5:05:df:02:2f:16:d0:fd:56:75:b9:96:2f: 77:8a:0f:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4ARxTH27MEYIxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OGI4OGE4ZDAtM2VhYS00NWMwLWFmODMtZTJkODMxZTMwMmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6tG82SjfbWJzJaiXR2bwAflrhyMGLJjH2zz X+VyQ/pDVYZq8BK25tsa+AOEEv8eHuiouF/2Pz9cpPApInFUteVnOWeUKIrkT/Yg 6Kugd/1RYywGSY3t3X/Xm1aHwOjj0lIFcGbnWAA1gVcYFiJgVZ+YmdlqR0dVo7aM D0FB/5+hJ8XRFMSrdTcVHG/MgN0Fbd7kzIO/qW4sn6ZQRoJV3OO2anGDnbvbL4g7 KFbBSdwPoujuQX5w+Jv0hFVOc9a73xJ4eMgREId5OLiGdRh1AWLG4Wgd7a+AJpoT 7/ihpkt/zBVVf6bf3vQGXbp8Fkg6QMxFJ5wdilbtvZvTdAbNpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPj4e5a4C0CQoi36jYiVtoJbq/IjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzIxZDM0YTItYmE2ZC0z MGVjLTg5ODctZTM4ODAzMGY1N2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKwxISvo0DzIfg9eH3wnTanSHZrpWdFNgmfwxUbwvS7HnbiYkRMupeL cT4SBlnqcQqJ4sArxh3jh1ATca9mS1K5nhfjVyekS8u2U+H5tOtvpHsLckEKPCZX aqfSV3StfbWYYePy1VBwNyV4owOL5BuOKoQvYLSpwW8ncwBkmL8o6bnChVGTbQoT XoL+YZtF/tp//hrkcIwBcg6dIdR2+P8moCbge8OPMFWUctsJu8k6NbBaRRENKQ42 beHD28+Bdab7YA9m6tLulITlG7x8WSZljERY/4qXUzCt8aLaTBAdrIIO1REDrytT B6rT3jFi5QXfAi8W0P1WdbmWL3eKD0w= -----END CERTIFICATE-----Generated at Thu Mar 26 16:19:39 2026 by rpki-client