$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3bcd4283-22e8-3ca4-9237-d770ad701405.roa File: 3bcd4283-22e8-3ca4-9237-d770ad701405.roa (raw, json) Hash identifier: VhFXWF4LNWzXNFlqt9RfbNFkVPS9IyJd40RWgSzftrE= Subject key identifier: 43:39:73:08:64:FF:3B:FE:6E:7C:23:52:FB:A9:FB:5D:51:43:E6:B6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFF734163BC96871065340 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3bcd4283-22e8-3ca4-9237-d770ad701405.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:f7:34:16:3b:c9:68:71:06:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=8257055f-be3e-4413-bfcb-96a754884cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7e:b7:1d:25:b4:6d:37:d3:39:fd:2a:eb:4a: e5:17:5b:7e:52:ad:bc:9d:0f:2b:61:a8:b9:10:f4: 08:78:17:5b:d0:ea:7f:9f:cb:08:fc:ef:19:43:df: 7a:68:78:ca:49:73:3e:02:51:a3:c2:e1:a6:78:0b: 29:e9:38:27:f5:77:7c:d7:f6:b5:e4:03:fc:47:45: 34:96:59:2b:e3:c4:fc:01:ae:21:99:a7:e4:1d:16: 80:8b:19:32:87:68:d3:91:96:94:e9:1e:e5:37:d1: 82:3f:0d:1e:af:9b:23:56:6d:91:a3:49:25:52:ae: f3:a4:dd:a2:b8:c4:30:6a:16:23:08:88:35:6a:ca: bb:6d:fd:da:ed:22:5b:5b:17:a8:2b:ae:f5:3c:6b: cc:4f:86:cb:86:d5:1b:2a:f3:ba:36:d2:d4:9c:c9: 9c:0c:71:21:3b:73:d9:63:a7:d5:b6:c4:d4:71:67: 60:79:5d:1e:d5:b7:c7:6d:12:23:6b:be:80:46:9d: dd:27:e0:a9:df:46:72:ec:88:e5:b8:2a:e3:a4:7a: 6e:ac:7d:ee:76:a2:6b:74:db:bd:5f:8a:43:ab:23: fc:9f:a7:59:5d:17:f1:5a:4c:cd:a5:37:22:27:8b: 41:cd:22:0c:bf:87:16:be:1e:1d:43:0a:36:d3:93: 73:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:39:73:08:64:FF:3B:FE:6E:7C:23:52:FB:A9:FB:5D:51:43:E6:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3bcd4283-22e8-3ca4-9237-d770ad701405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:c9:df:1c:e1:fa:00:c1:b2:2c:33:05:f6:e8:0e:67:8d:f7: 0d:58:3d:1a:44:d0:4f:e1:98:ce:00:1c:04:f1:58:fc:6a:78: c0:9e:89:19:a8:53:82:62:12:ff:a4:28:ac:0a:46:7a:87:c3: 93:33:8f:17:1a:c0:55:1f:5c:cf:f1:41:45:ce:3a:9b:0c:28: d8:3c:ff:25:a0:32:54:b1:e7:af:35:f0:d0:ed:96:4f:5c:72: f3:84:2b:e3:81:1c:8a:f2:1e:44:84:a1:07:03:ea:b8:6a:4b: 6b:60:24:49:a4:aa:c6:aa:85:ab:a0:9e:bb:b7:0b:ce:58:2c: eb:55:67:e9:70:3f:46:5d:dc:bf:03:b9:cf:76:84:8a:42:ab: b2:a9:2e:c4:4f:4d:3f:d5:99:70:e8:da:c6:08:73:e2:7b:84: cc:ab:79:0b:f9:58:68:b2:48:6d:93:33:58:5d:30:46:79:36: a4:13:1b:d8:5d:07:3c:1d:67:ee:05:b8:cd:b1:ef:c7:0c:0c: 86:1b:73:1e:7c:72:ce:81:c1:3f:4a:ce:14:ac:16:d7:af:be: 33:70:71:8a:68:fe:96:bd:02:19:1b:42:3e:5e:4a:1c:86:9e: a2:6d:f2:dd:ef:79:0b:e3:da:9e:35:b7:a5:07:8a:6e:40:40: 8c:fe:25:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/c0FjvJaHEGU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ODI1NzA1NWYtYmUzZS00NDEzLWJmY2ItOTZhNzU0ODg0Y2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n63HSW0bTfTOf0q60rlF1t+Uq28nQ8rYai5 EPQIeBdb0Op/n8sI/O8ZQ996aHjKSXM+AlGjwuGmeAsp6Tgn9Xd81/a15AP8R0U0 llkr48T8Aa4hmafkHRaAixkyh2jTkZaU6R7lN9GCPw0er5sjVm2Ro0klUq7zpN2i uMQwahYjCIg1asq7bf3a7SJbWxeoK671PGvMT4bLhtUbKvO6NtLUnMmcDHEhO3PZ Y6fVtsTUcWdgeV0e1bfHbRIja76ARp3dJ+Cp30Zy7IjluCrjpHpurH3udqJrdNu9 X4pDqyP8n6dZXRfxWkzNpTciJ4tBzSIMv4cWvh4dQwo205Nz5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEM5cwhk/zv+bnwjUvup+11RQ+a2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2JjZDQyODMtMjJlOC0z Y2E0LTkyMzctZDc3MGFkNzAxNDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3J3xzh+gDBsiwzBfboDmeN9w1YPRpE0E/hmM4AHATxWPxqeMCeiRmo U4JiEv+kKKwKRnqHw5MzjxcawFUfXM/xQUXOOpsMKNg8/yWgMlSx56818NDtlk9c cvOEK+OBHIryHkSEoQcD6rhqS2tgJEmkqsaqhaugnru3C85YLOtVZ+lwP0Zd3L8D uc92hIpCq7KpLsRPTT/VmXDo2sYIc+J7hMyreQv5WGiySG2TM1hdMEZ5NqQTG9hd BzwdZ+4FuM2x78cMDIYbcx58cs6BwT9KzhSsFtevvjNwcYpo/pa9AhkbQj5eShyG nqJt8t3veQvj2p41t6UHim5AQIz+JQc= -----END CERTIFICATE-----Generated at Thu Mar 26 15:04:21 2026 by rpki-client