$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a3fae91-4c70-33ae-bea1-7a84b7e61ff0.roa File: 3a3fae91-4c70-33ae-bea1-7a84b7e61ff0.roa (raw, json) Hash identifier: UGCCNYd53kkBwNr/sEiCuQDQKdPhPAZuA7gjUeHFKZ0= Subject key identifier: 59:F1:EC:5B:50:27:12:03:EF:C8:D0:62:90:19:8A:C8:8F:54:B1:20 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E06584D55A019BC96ACF60 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a3fae91-4c70-33ae-bea1-7a84b7e61ff0.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:65:84:d5:5a:01:9b:c9:6a:cf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3a239286-ab6d-4e20-ab94-a126f5342d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:21:87:f8:ea:ab:46:07:91:73:e2:83:bc:b5: 51:81:6b:e1:51:fe:2f:0a:40:51:08:b7:6c:5c:06: ba:45:8d:99:cd:37:38:27:0f:99:ed:6b:8c:91:80: e0:2c:52:3d:1b:7e:c4:58:96:46:6d:ec:96:0d:cd: 71:d2:b3:14:10:b1:c4:06:eb:93:81:74:71:26:7f: f3:3c:66:33:0f:f7:f7:82:be:07:91:a9:82:a5:ee: c6:4c:b5:a4:fc:97:6a:f0:50:5f:5b:12:90:43:c0: 9f:d0:f6:98:56:d9:b2:b5:60:40:99:ab:00:a5:ee: db:34:7d:1d:bc:3a:f9:7e:fb:88:ca:66:e9:58:bc: 24:a0:fa:19:56:41:06:c6:04:2a:b9:af:8b:8a:f6: 1a:3a:08:da:7e:06:2f:19:28:76:03:59:c9:a6:3c: 5e:ce:06:a7:e7:0f:ce:4d:66:71:db:a6:99:be:96: ff:e7:e8:96:84:50:67:f1:eb:6a:ad:32:fc:e4:72: 21:dd:f3:1a:72:dc:b8:3a:c0:b0:74:c0:d4:d4:a3: 93:41:f2:e2:84:ca:cd:11:e6:88:aa:09:7b:9e:8c: 31:a2:c1:22:15:bb:7e:b8:72:5a:4e:c7:d7:2d:ee: 61:e2:c3:52:47:93:64:32:39:f6:89:20:56:60:c3: 01:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F1:EC:5B:50:27:12:03:EF:C8:D0:62:90:19:8A:C8:8F:54:B1:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a3fae91-4c70-33ae-bea1-7a84b7e61ff0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:7c:3a:3a:59:a2:5b:a0:3b:72:15:cd:e2:44:9f:f8:d9:aa: 15:7a:e0:13:7e:52:fd:59:78:56:1b:8e:b1:11:d8:11:49:9a: f9:2c:9a:95:7f:7c:fc:64:ba:d1:7c:d2:e3:e0:f1:33:7c:4d: 8d:ec:b5:14:02:fa:7b:6f:ed:5e:30:81:ee:2b:39:25:d8:6b: f2:6d:b0:e8:3d:6a:22:fb:f1:01:8d:a1:29:c9:e5:6b:6d:80: cc:37:3f:43:82:dc:d1:18:10:e7:32:e8:c9:55:bc:ed:b3:46: d2:3f:13:6e:df:ea:a8:cd:85:8a:37:7a:cd:b8:64:b7:13:54: fb:17:a6:ba:ed:bc:77:c8:87:53:e4:77:d8:d2:59:a9:19:90: 2f:2f:99:61:7b:85:ce:25:70:0e:f0:29:3b:a8:94:0f:45:6e: 40:56:7a:9a:8d:77:32:ee:9d:22:65:9e:00:df:a7:32:22:fb: 2f:35:69:d3:cb:a1:02:24:46:4f:03:fa:79:e2:ef:cc:a8:ea: 57:fe:2a:9e:7d:38:b3:cb:be:ac:0f:8e:95:a6:4e:31:4c:bb: 79:91:3e:f0:56:ec:f0:3f:49:53:9c:e8:3d:42:84:59:5b:d7: 64:b5:8b:bf:e2:64:c1:b5:aa:3e:de:35:8f:1e:b0:37:8d:bd: ad:a5:57:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GWE1VoBm8lqz2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk M2EyMzkyODYtYWI2ZC00ZTIwLWFiOTQtYTEyNmY1MzQyZDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiGH+OqrRgeRc+KDvLVRgWvhUf4vCkBRCLds XAa6RY2ZzTc4Jw+Z7WuMkYDgLFI9G37EWJZGbeyWDc1x0rMUELHEBuuTgXRxJn/z PGYzD/f3gr4HkamCpe7GTLWk/Jdq8FBfWxKQQ8Cf0PaYVtmytWBAmasApe7bNH0d vDr5fvuIymbpWLwkoPoZVkEGxgQqua+LivYaOgjafgYvGSh2A1nJpjxezgan5w/O TWZx26aZvpb/5+iWhFBn8etqrTL85HIh3fMacty4OsCwdMDU1KOTQfLihMrNEeaI qgl7nowxosEiFbt+uHJaTsfXLe5h4sNSR5NkMjn2iSBWYMMBkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnx7FtQJxID78jQYpAZisiPVLEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2EzZmFlOTEtNGM3MC0z M2FlLWJlYTEtN2E4NGI3ZTYxZmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB8OjpZolugO3IVzeJEn/jZqhV64BN+Uv1ZeFYbjrER2BFJmvksmpV/ fPxkutF80uPg8TN8TY3stRQC+ntv7V4wge4rOSXYa/JtsOg9aiL78QGNoSnJ5Wtt gMw3P0OC3NEYEOcy6MlVvO2zRtI/E27f6qjNhYo3es24ZLcTVPsXprrtvHfIh1Pk d9jSWakZkC8vmWF7hc4lcA7wKTuolA9FbkBWepqNdzLunSJlngDfpzIi+y81adPL oQIkRk8D+nni78yo6lf+Kp59OLPLvqwPjpWmTjFMu3mRPvBW7PA/SVOc6D1ChFlb 12S1i7/iZMG1qj7eNY8esDeNva2lV1Q= -----END CERTIFICATE-----Generated at Thu Mar 26 13:34:10 2026 by rpki-client