$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33d98de7-82e5-3294-87bd-da0c96c9fa35.roa File: 33d98de7-82e5-3294-87bd-da0c96c9fa35.roa (raw, json) Hash identifier: rSA474wdcKBmqIq7kWaCfLA3NIea4sa8M5+6IJAwDPw= Subject key identifier: 42:53:F6:FA:A0:2B:10:80:50:12:BD:CB:FB:6B:8A:12:8A:B8:E6:75 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E002A6B24722961A968C00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33d98de7-82e5-3294-87bd-da0c96c9fa35.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:02:a6:b2:47:22:96:1a:96:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=65814674-d23e-46a0-9e86-0cb9439283ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:35:36:5d:ae:e1:e7:59:73:a7:9d:4b:e6:96: ba:6e:48:49:4b:40:b4:05:3c:4e:7a:c8:e6:5f:40: 95:eb:4e:44:f6:86:52:aa:07:d9:77:49:ec:2a:62: fe:bb:a0:84:59:82:e5:4b:c6:af:04:94:cc:3f:b3: 7f:88:b3:39:4c:eb:fd:b3:1c:4d:3a:d0:50:00:c7: 5d:11:4a:27:3a:8f:e4:ba:b5:e9:3f:42:aa:35:2c: 13:b1:35:4c:54:d2:44:b0:cb:6a:cf:c7:d6:65:ba: 40:18:79:cb:66:db:c2:a5:4b:e3:f9:8e:57:82:84: 74:b0:7c:d0:7d:9c:df:fc:8f:b4:af:1d:ec:2d:d6: 24:3d:cb:f9:da:16:2b:cb:80:e7:be:84:c0:ef:3f: c5:32:3e:04:3b:15:ff:17:56:ca:e6:ab:1d:63:6c: 6b:8f:12:d5:59:af:bc:06:83:c5:a5:5c:28:8a:9c: 87:19:0e:77:17:c1:24:b7:12:6b:b8:2e:43:e1:2d: ea:2a:6e:23:ef:b8:f8:07:2d:a5:f4:fc:4a:b0:35: d4:20:37:78:8f:d8:bc:c4:53:1c:bc:dc:16:38:6d: 8b:7c:1b:39:b9:d2:3b:1e:e2:f7:d2:6a:20:fc:ef: 90:f2:8a:ae:e7:cc:0e:d5:d5:66:44:6e:3f:22:72: a5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:53:F6:FA:A0:2B:10:80:50:12:BD:CB:FB:6B:8A:12:8A:B8:E6:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33d98de7-82e5-3294-87bd-da0c96c9fa35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:55:31:2a:c3:78:31:fe:60:1d:8f:85:c7:c9:06:5c:b4:27: 98:fa:de:79:98:e7:2d:c1:2a:23:80:0b:e2:e8:be:8d:c4:7f: 23:e2:aa:86:3f:1f:46:4b:1b:b1:f9:e3:bf:78:24:a6:6c:75: f2:c1:dd:79:ab:a7:39:46:89:75:e4:d2:79:46:a7:f3:8a:0b: b0:bc:1d:95:7e:b4:45:1f:2c:ef:68:8a:63:87:0c:06:38:59: 78:c9:34:98:90:13:bc:35:69:18:da:4e:88:f9:38:ed:f5:12: 7c:c1:51:ee:de:ea:99:cc:3a:42:5e:00:28:ac:71:8b:21:d6: 2c:49:86:b4:c5:f5:16:c3:b1:33:19:10:88:d9:c7:23:08:6f: 4b:e5:f8:ca:86:a5:28:01:1b:19:b3:13:20:5e:75:0e:34:c7: 9a:69:e3:d8:77:88:0d:6c:3e:81:3b:d8:9a:d3:b2:44:2a:ff: 64:a1:f6:37:6d:3b:1d:75:37:19:21:73:45:24:6d:12:af:c2: 9d:51:38:a1:85:09:7e:86:5e:b2:c6:4f:4f:20:8f:41:3a:ad: 63:fe:97:ad:9f:e6:00:56:a7:82:50:68:da:e7:77:58:0f:78: 82:da:9a:6d:6a:31:14:b1:f5:36:f2:08:a6:0b:80:00:90:3e: da:89:80:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4AKmskcilhqWjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjU4MTQ2NzQtZDIzZS00NmEwLTllODYtMGNiOTQzOTI4M2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszU2Xa7h51lzp51L5pa6bkhJS0C0BTxOesjm X0CV605E9oZSqgfZd0nsKmL+u6CEWYLlS8avBJTMP7N/iLM5TOv9sxxNOtBQAMdd EUonOo/kurXpP0KqNSwTsTVMVNJEsMtqz8fWZbpAGHnLZtvCpUvj+Y5XgoR0sHzQ fZzf/I+0rx3sLdYkPcv52hYry4DnvoTA7z/FMj4EOxX/F1bK5qsdY2xrjxLVWa+8 BoPFpVwoipyHGQ53F8EktxJruC5D4S3qKm4j77j4By2l9PxKsDXUIDd4j9i8xFMc vNwWOG2LfBs5udI7HuL30mog/O+Q8oqu58wO1dVmRG4/InKlLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJT9vqgKxCAUBK9y/trihKKuOZ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzNkOThkZTctODJlNS0z Mjk0LTg3YmQtZGEwYzk2YzlmYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPODMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVVMSrDeDH+YB2PhcfJBly0J5j63nmY5y3BKiOAC+Lovo3EfyPiqoY/ H0ZLG7H54794JKZsdfLB3XmrpzlGiXXk0nlGp/OKC7C8HZV+tEUfLO9oimOHDAY4 WXjJNJiQE7w1aRjaToj5OO31EnzBUe7e6pnMOkJeACiscYsh1ixJhrTF9RbDsTMZ EIjZxyMIb0vl+MqGpSgBGxmzEyBedQ40x5pp49h3iA1sPoE72JrTskQq/2Sh9jdt Ox11Nxkhc0UkbRKvwp1ROKGFCX6GXrLGT08gj0E6rWP+l62f5gBWp4JQaNrnd1gP eILamm1qMRSx9TbyCKYLgACQPtqJgAU= -----END CERTIFICATE-----Generated at Fri Mar 27 00:35:45 2026 by rpki-client