$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33a18e58-392b-34fc-8547-54590144d80e.roa File: 33a18e58-392b-34fc-8547-54590144d80e.roa (raw, json) Hash identifier: mfD3q6G3xOuSof5PYyMjYDRuJ5BgmgFLXsnQuwm2gBs= Subject key identifier: E6:BF:05:8A:AC:B3:58:D1:8C:5E:9D:54:08:C6:36:4C:E9:B7:C9:B2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E01883E08D606EDE9C8980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33a18e58-392b-34fc-8547-54590144d80e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 184.62.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:18:83:e0:8d:60:6e:de:9c:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=03533b06-877f-44ea-bf7c-9e3bb2a4e0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e2:66:fd:f9:21:c4:57:e2:ae:8a:90:36:c0: ba:30:db:9b:40:30:7b:f3:22:d9:7e:db:79:02:4d: d8:6c:c5:af:9a:de:f1:72:a1:63:62:ee:ac:04:8d: 07:8b:24:02:6e:9e:c3:6d:a5:64:82:90:49:42:de: 6f:c8:65:da:08:19:25:b3:50:0b:58:92:6d:7a:5b: fa:c7:38:ce:22:1c:8c:2c:41:6a:db:6a:60:eb:62: 76:9b:b6:74:f4:d8:42:5e:74:cd:42:3e:dc:24:80: 7f:30:c8:45:10:13:aa:36:46:a3:e6:1c:83:44:25: 6b:92:0c:68:27:b6:e6:fd:82:da:2a:c3:18:74:79: cb:d7:e9:9a:54:87:83:16:20:5d:02:ce:e5:8e:34: 8c:20:b6:e2:ac:47:9a:f3:57:4a:eb:ec:2d:c8:b2: 09:45:a9:8f:0c:00:04:8e:50:d0:64:52:c7:03:c8: e1:a4:9e:14:50:b0:38:12:71:d7:71:93:fb:75:f7: 60:2f:53:79:6f:23:1a:d5:89:35:c5:94:db:e9:94: e2:54:22:60:e6:b1:47:49:c8:50:92:c8:90:a9:51: e6:a0:53:fa:51:5a:39:05:fb:4c:ca:6a:29:fd:20: 72:9d:ef:e9:99:6a:4a:01:e9:26:92:6d:d3:b3:23: 63:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BF:05:8A:AC:B3:58:D1:8C:5E:9D:54:08:C6:36:4C:E9:B7:C9:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33a18e58-392b-34fc-8547-54590144d80e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.62.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:dc:b0:ed:e7:ca:61:dc:6b:37:bd:72:75:e6:ea:8e:50:f8: c0:43:d1:ec:52:5a:1d:d6:27:aa:b7:3b:c6:07:b6:2b:7c:93: 3c:33:cf:e7:05:58:ac:2b:3c:1c:b8:12:4d:ff:b3:8b:fb:c3: d6:df:a0:d1:80:d3:13:b7:dc:98:93:43:a9:00:13:0e:2e:cb: 66:05:89:f6:c1:32:4e:88:b5:52:01:29:0a:b6:4b:00:a8:c5: 63:93:e1:da:96:b4:ae:91:9f:83:99:66:35:98:46:88:4a:96: 68:57:d7:a5:6f:50:f6:af:e5:0a:b2:71:e4:d1:2b:f0:48:5f: fa:77:41:62:a9:f6:1d:36:d9:38:6e:67:a3:bc:99:3a:0e:bc: 27:41:89:1c:8b:12:f4:a0:41:f1:8f:bf:2c:77:da:a2:25:26: e0:c9:df:5a:6d:95:17:ea:4d:8c:e3:09:23:0d:3b:d8:e3:13: f6:3b:30:32:bc:00:1f:10:4e:57:13:ad:69:ea:c9:52:4d:60: c9:2c:f2:4d:0a:e9:70:a3:67:c8:54:96:31:4b:ff:ff:c5:c0: e5:7b:51:90:57:cd:c0:e5:62:ed:65:ab:17:4a:2f:c0:17:07: 40:e1:43:20:01:c3:97:12:ca:fc:91:45:c4:48:9d:e9:80:d5: 03:8f:71:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4BiD4I1gbt6ciYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDM1MzNiMDYtODc3Zi00NGVhLWJmN2MtOWUzYmIyYTRlMGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruJm/fkhxFfiroqQNsC6MNubQDB78yLZftt5 Ak3YbMWvmt7xcqFjYu6sBI0HiyQCbp7DbaVkgpBJQt5vyGXaCBkls1ALWJJtelv6 xzjOIhyMLEFq22pg62J2m7Z09NhCXnTNQj7cJIB/MMhFEBOqNkaj5hyDRCVrkgxo J7bm/YLaKsMYdHnL1+maVIeDFiBdAs7ljjSMILbirEea81dK6+wtyLIJRamPDAAE jlDQZFLHA8jhpJ4UULA4EnHXcZP7dfdgL1N5byMa1Yk1xZTb6ZTiVCJg5rFHSchQ ksiQqVHmoFP6UVo5BftMymop/SByne/pmWpKAekmkm3TsyNjUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOa/BYqss1jRjF6dVAjGNkzpt8myMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzNhMThlNTgtMzkyYi0z NGZjLTg1NDctNTQ1OTAxNDRkODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD5nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbcsO3nymHcaze9cnXm6o5Q+MBD0exSWh3WJ6q3O8YHtit8kzwzz+cF WKwrPBy4Ek3/s4v7w9bfoNGA0xO33JiTQ6kAEw4uy2YFifbBMk6ItVIBKQq2SwCo xWOT4dqWtK6Rn4OZZjWYRohKlmhX16VvUPav5QqyceTRK/BIX/p3QWKp9h022Thu Z6O8mToOvCdBiRyLEvSgQfGPvyx32qIlJuDJ31ptlRfqTYzjCSMNO9jjE/Y7MDK8 AB8QTlcTrWnqyVJNYMks8k0K6XCjZ8hUljFL///FwOV7UZBXzcDlYu1lqxdKL8AX B0DhQyABw5cSyvyRRcRInemA1QOPce0= -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:32 2026 by rpki-client