$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa File: 3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa (raw, json) Hash identifier: EQWDL+o+gD0p3Bquk2niSNHkmQ4Nnwugna8+Z6SN5+Y= Subject key identifier: 97:BE:91:A7:10:21:FC:D8:AF:F0:90:A0:30:21:CD:6D:00:D2:35:6C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFA7A9B6ACECA316FD8400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 40306 IP address blocks: 72.173.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:a7:a9:b6:ac:ec:a3:16:fd:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d9bf7256-db6d-424e-917f-ace718ccd63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9a:99:cb:e0:f2:bf:3b:e7:8d:e4:c3:45:b0: 8a:61:a3:da:0d:cf:26:73:d0:2d:d9:1f:83:ca:91: 21:78:57:02:a9:34:55:c2:d2:32:d4:b4:c3:19:a5: 93:03:a6:df:95:d2:94:75:c5:35:ca:a6:79:22:8e: 0f:82:d6:36:16:a1:31:47:76:7d:82:50:51:07:cb: 8d:d9:ef:07:d8:23:15:68:bb:a2:6a:c0:86:99:95: 9b:15:43:b0:0b:f6:ef:3b:e1:65:d2:29:bd:42:ea: b7:10:cc:c7:1f:2e:1e:e5:d8:10:1f:df:20:4c:e4: 52:cd:1c:06:ea:83:f8:29:ca:01:e2:9e:c8:07:8e: a5:0c:43:03:56:eb:81:2b:03:e1:fa:8d:db:79:6f: db:c0:68:8a:33:c7:5c:84:a7:a8:6b:6d:c8:1b:3f: 0c:fe:ec:55:92:15:f4:fb:73:80:29:b7:44:e8:6c: f7:f6:1b:c3:46:a3:63:1d:ce:aa:3d:41:a8:fa:6f: 07:d4:df:df:b2:1c:43:a4:86:9a:7c:af:38:8e:75: ae:15:f4:35:8f:e5:ba:75:90:d2:08:77:c4:87:62: 26:f7:57:e9:4a:d1:24:5c:12:56:7b:e6:87:b9:d2: 41:6d:79:81:4b:06:45:9c:e3:d4:4b:c1:ed:b4:5d: a7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BE:91:A7:10:21:FC:D8:AF:F0:90:A0:30:21:CD:6D:00:D2:35:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:26:22:56:fb:19:f0:bb:28:4c:b1:f6:09:84:d5:33:af:4b: 2f:bb:62:c1:1c:86:9f:74:79:8b:07:0e:a4:73:f3:65:9c:d5: 76:a3:d8:fa:1e:f2:a6:a4:83:6c:17:39:04:b3:ab:b1:93:86: cd:5f:47:53:59:a5:3a:c5:13:c2:9a:5b:94:25:52:0d:13:8c: 79:c9:06:5d:1d:07:85:7f:2a:e6:a8:84:53:63:40:78:f5:a7: 3a:d3:a2:9f:4e:9b:c7:e3:f2:d6:ed:98:53:a7:ac:0a:4b:16: a9:fc:ba:d3:c7:4e:84:78:7d:59:f4:fe:be:c4:ec:4a:b4:7c: 15:40:eb:26:21:55:5b:00:9c:11:2a:21:e4:c9:6d:bc:cc:88: 83:b6:f1:1a:74:a5:46:25:31:c5:d6:00:7b:ff:63:2f:06:c7: ce:e1:eb:18:aa:3d:39:b1:7c:37:ea:08:78:b0:f0:f9:1c:0d: 83:ce:f5:ab:1b:8a:89:97:86:30:01:1b:3f:31:9d:fb:42:6f: 80:3f:1e:6e:78:10:32:bf:e8:4c:38:87:d0:78:92:75:34:2c: 5d:f4:45:06:31:f4:fb:51:fa:46:dc:fb:05:73:1c:6b:92:83: 38:d7:2f:ed:a1:dc:85:60:b4:b1:4d:34:8d:bb:96:af:79:d5: f0:6c:0e:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k36eptqzsoxb9hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDliZjcyNTYtZGI2ZC00MjRlLTkxN2YtYWNlNzE4Y2NkNjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZqZy+DyvzvnjeTDRbCKYaPaDc8mc9At2R+D ypEheFcCqTRVwtIy1LTDGaWTA6bfldKUdcU1yqZ5Io4PgtY2FqExR3Z9glBRB8uN 2e8H2CMVaLuiasCGmZWbFUOwC/bvO+Fl0im9Quq3EMzHHy4e5dgQH98gTORSzRwG 6oP4KcoB4p7IB46lDEMDVuuBKwPh+o3beW/bwGiKM8dchKeoa23IGz8M/uxVkhX0 +3OAKbdE6Gz39hvDRqNjHc6qPUGo+m8H1N/fshxDpIaafK84jnWuFfQ1j+W6dZDS CHfEh2Im91fpStEkXBJWe+aHudJBbXmBSwZFnOPUS8HttF2nWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJe+kacQIfzYr/CQoDAhzW0A0jVsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2M1ZTUwYzYtMWIyMC0z MzUxLTgwZDgtMjY0YjFlM2Y1NDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQmIlb7GfC7KEyx9gmE1TOvSy+7YsEchp90eYsHDqRz82Wc1Xaj2Poe 8qakg2wXOQSzq7GThs1fR1NZpTrFE8KaW5QlUg0TjHnJBl0dB4V/KuaohFNjQHj1 pzrTop9Om8fj8tbtmFOnrApLFqn8utPHToR4fVn0/r7E7Eq0fBVA6yYhVVsAnBEq IeTJbbzMiIO28Rp0pUYlMcXWAHv/Yy8Gx87h6xiqPTmxfDfqCHiw8PkcDYPO9asb iomXhjABGz8xnftCb4A/Hm54EDK/6Ew4h9B4knU0LF30RQYx9PtR+kbc+wVzHGuS gzjXL+2h3IVgtLFNNI27lq951fBsDnI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:44:07 2026 by rpki-client