$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33f64eae-d336-3410-8c6a-2de4bf6a4c9e.roa File: 33f64eae-d336-3410-8c6a-2de4bf6a4c9e.roa (raw, json) Hash identifier: fLO6MtHAY8rfg5DDvH5LFHO5HWSEPLIUcDmDPwAPFAw= Subject key identifier: 89:0A:FC:C9:0A:6E:11:10:17:EF:00:F5:5D:A7:E9:3E:C1:53:6E:A0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFF26FD43FE8A0FD8C8E00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33f64eae-d336-3410-8c6a-2de4bf6a4c9e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 162.72.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:f2:6f:d4:3f:e8:a0:fd:8c:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=24fb89b8-522c-4045-b888-f1519ba0ffd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a2:8c:04:87:b4:a2:82:05:ec:3b:e4:84:e0: 26:45:8b:99:7d:51:b3:5f:7c:c9:08:59:25:c5:58: 53:5e:ab:7e:85:f0:4f:92:00:bf:7e:5d:c1:a4:5b: a0:0f:57:a2:57:45:9c:26:5c:91:36:c2:2a:ac:8c: 3d:07:aa:2d:ec:1e:3a:86:30:a1:90:18:64:90:69: ac:b9:34:17:93:f3:d2:67:e4:8f:e9:b2:83:ac:31: 02:2c:11:7c:a5:3e:f1:99:b5:7d:52:95:99:88:8a: ff:a5:b4:11:b2:f8:ba:30:35:56:b0:0a:1b:9f:38: be:74:51:0c:31:67:c9:fe:e4:8e:b4:3a:c2:c0:59: d0:15:1d:26:b6:7a:a7:30:4f:43:46:88:3d:bf:d5: 0c:f2:bb:a6:1c:ab:67:10:46:28:1b:60:3f:5e:89: 33:53:98:07:5e:a6:11:d1:9c:59:a8:c5:e4:6d:b7: eb:79:7d:d9:d0:3f:81:12:6c:5d:6a:3d:b3:63:8b: 44:36:34:8c:0c:c3:64:94:d4:5a:48:73:5b:20:45: 86:dc:a8:c3:af:f0:b7:0f:d1:f9:e9:83:6d:fc:7d: e2:6d:69:50:1c:ce:34:08:f2:d1:80:f5:08:54:4c: 89:77:e5:f7:5d:40:f5:b1:d7:97:ec:b5:fa:aa:e2: e3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0A:FC:C9:0A:6E:11:10:17:EF:00:F5:5D:A7:E9:3E:C1:53:6E:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33f64eae-d336-3410-8c6a-2de4bf6a4c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:04:4d:39:25:69:38:b3:e5:f9:01:61:e5:62:70:e7:de:0c: e8:d2:9f:64:0c:29:2e:88:49:61:75:3d:57:af:63:8a:93:61: 23:02:3d:b5:02:93:ba:a0:11:3f:06:dc:4a:e1:55:2a:97:49: 19:c5:ba:0b:18:c3:72:c5:0a:58:2a:02:44:c2:08:dd:e2:cd: 33:37:74:6e:49:b3:8f:46:e3:a8:20:b2:b4:14:41:be:28:96: 0c:6d:c9:ab:85:d4:de:9e:40:e7:e7:28:37:ed:20:0c:54:88: c2:57:12:1f:15:16:68:eb:e7:58:93:0d:28:3f:d3:3d:0a:f5: 95:00:02:06:a3:71:41:a0:63:55:f8:b3:6a:a1:fa:47:9f:6a: 54:ed:9b:c1:90:74:90:ee:61:5d:41:c9:81:6f:4d:18:53:7a: a3:08:c5:b6:5a:b9:42:c2:69:b0:0c:2e:3c:06:4d:7e:92:6b: 45:ad:94:7a:a6:b7:d8:9c:8d:9f:e5:31:8a:48:2b:6b:0f:39: 30:52:d1:6d:5b:d8:0c:4a:7f:3d:f1:5b:41:a9:e0:2d:9f:6d: e7:fb:e2:6a:1c:ef:6c:23:32:8d:5f:87:95:2a:65:ce:ac:f2: 31:25:86:d9:3c:26:02:ed:47:87:16:6c:7f:16:53:61:af:51: 35:be:c1:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/Jv1D/ooP2MjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjRmYjg5YjgtNTIyYy00MDQ1LWI4ODgtZjE1MTliYTBmZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06KMBIe0ooIF7DvkhOAmRYuZfVGzX3zJCFkl xVhTXqt+hfBPkgC/fl3BpFugD1eiV0WcJlyRNsIqrIw9B6ot7B46hjChkBhkkGms uTQXk/PSZ+SP6bKDrDECLBF8pT7xmbV9UpWZiIr/pbQRsvi6MDVWsAobnzi+dFEM MWfJ/uSOtDrCwFnQFR0mtnqnME9DRog9v9UM8rumHKtnEEYoG2A/XokzU5gHXqYR 0ZxZqMXkbbfreX3Z0D+BEmxdaj2zY4tENjSMDMNklNRaSHNbIEWG3KjDr/C3D9H5 6YNt/H3ibWlQHM40CPLRgPUIVEyJd+X3XUD1sdeX7LX6quLjEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkK/MkKbhEQF+8A9V2n6T7BU26gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzNmNjRlYWUtZDMzNi0z NDEwLThjNmEtMmRlNGJmNmE0YzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokh7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANUETTklaTiz5fkBYeVicOfeDOjSn2QMKS6ISWF1PVevY4qTYSMCPbUC k7qgET8G3ErhVSqXSRnFugsYw3LFClgqAkTCCN3izTM3dG5Js49G46ggsrQUQb4o lgxtyauF1N6eQOfnKDftIAxUiMJXEh8VFmjr51iTDSg/0z0K9ZUAAgajcUGgY1X4 s2qh+kefalTtm8GQdJDuYV1ByYFvTRhTeqMIxbZauULCabAMLjwGTX6Sa0WtlHqm t9icjZ/lMYpIK2sPOTBS0W1b2AxKfz3xW0Gp4C2fbef74moc72wjMo1fh5UqZc6s 8jElhtk8JgLtR4cWbH8WU2GvUTW+wcY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:12:57 2026 by rpki-client