$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa File: 3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa (raw, json) Hash identifier: aRg5gzP3HNIQR2oVKKODLmFhw+I52C/wbIvUFhgb8D8= Subject key identifier: 04:9A:89:3B:C3:34:76:ED:63:78:B7:93:6B:5B:E8:98:2A:AB:8B:D5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E003705D2770685BEE3A80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:03:70:5d:27:70:68:5b:ee:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=30f20bc5-a4c5-4342-b973-3c3a20aafe1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:35:ef:04:ba:23:c3:76:df:52:3a:ab:6e:62: 66:a6:05:e7:42:2c:67:74:15:19:ba:cd:f8:be:0b: 08:c4:4f:48:f3:40:b4:cc:b9:40:d5:27:f7:56:db: 8b:52:e9:e9:39:87:d8:8d:d6:d2:01:64:0c:3d:ad: 97:ca:e2:8c:db:b4:60:c5:c5:de:9c:24:4c:ae:a4: 47:87:a8:d1:85:1e:5b:54:a9:89:56:f5:7d:89:f2: cc:23:23:a5:09:a4:3c:04:2f:59:59:f1:cf:e4:8c: a4:8b:fa:46:05:59:c6:62:5c:96:83:f6:65:32:d4: f5:8e:82:e0:11:35:18:68:08:e2:3a:c1:14:d6:03: e5:59:33:55:27:a4:7a:7e:37:c5:9c:27:ee:a7:a0: eb:a0:a1:64:f6:ef:a5:f7:d7:fc:80:9e:31:bd:18: e1:85:3b:ef:86:d3:ef:6c:7f:ae:89:63:fc:de:a5: 33:f3:61:cd:ca:b5:a0:4f:33:56:be:1c:68:bd:5d: 3d:d8:5e:f0:94:d0:46:40:b8:87:b8:60:e1:cd:94: d7:e7:5f:e2:9b:fd:aa:7f:88:b3:b2:94:32:8c:32: ae:3a:2e:3a:b6:2c:60:a9:a4:65:86:0e:e6:69:d4: c6:e8:d7:c0:5e:7b:a8:f9:69:32:c0:ac:a2:5d:39: 4d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9A:89:3B:C3:34:76:ED:63:78:B7:93:6B:5B:E8:98:2A:AB:8B:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:d1:21:c8:b3:31:98:d8:b6:6e:b8:1b:6d:d5:63:5d:36:f4: bb:84:05:0f:50:15:22:dd:b3:a2:4e:72:a0:ae:67:21:fe:1a: 54:c6:d3:77:43:04:72:f5:a8:53:68:16:49:8f:89:6d:8d:dc: 77:c2:58:51:6f:f9:f9:5d:ce:d4:0b:89:86:cc:42:fe:03:8f: b4:d7:79:89:cb:27:b2:02:a9:0e:b0:6c:47:af:c9:56:df:c7: 36:97:19:da:60:9d:56:be:85:f6:ce:33:20:bb:7e:06:c1:0d: 59:f5:0c:7e:67:5c:3d:86:10:d2:6d:42:5c:86:f3:65:3b:6b: 8b:fb:67:c3:0a:ca:b7:32:2f:cb:bb:1f:a3:6d:1d:d3:ab:fa: 20:dc:f3:70:35:ea:c2:53:0f:70:33:8f:67:45:59:b0:25:09: d9:2e:9d:0f:38:2b:93:fb:fa:b3:1a:87:d3:f0:90:15:2d:70: 40:f1:6f:8e:60:a4:7f:58:d6:46:a4:08:36:ad:77:da:0d:12: 9f:0b:2a:95:eb:43:fe:04:85:ce:d7:25:6e:ee:5b:6d:7d:12: ec:07:de:8b:2b:32:05:85:73:b6:3c:c9:03:0e:c7:00:43:5e: 56:bb:fc:10:9c:48:5a:76:59:81:ec:93:53:fc:c9:17:45:d7: e3:f8:b3:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4ANwXSdwaFvuOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MzBmMjBiYzUtYTRjNS00MzQyLWI5NzMtM2MzYTIwYWFmZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTXvBLojw3bfUjqrbmJmpgXnQixndBUZus34 vgsIxE9I80C0zLlA1Sf3VtuLUunpOYfYjdbSAWQMPa2XyuKM27RgxcXenCRMrqRH h6jRhR5bVKmJVvV9ifLMIyOlCaQ8BC9ZWfHP5Iyki/pGBVnGYlyWg/ZlMtT1joLg ETUYaAjiOsEU1gPlWTNVJ6R6fjfFnCfup6DroKFk9u+l99f8gJ4xvRjhhTvvhtPv bH+uiWP83qUz82HNyrWgTzNWvhxovV092F7wlNBGQLiHuGDhzZTX51/im/2qf4iz spQyjDKuOi46tixgqaRlhg7madTG6NfAXnuo+WkywKyiXTlNMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASaiTvDNHbtY3i3k2tb6Jgqq4vVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2YzZTBiYmYtNjU4NC0z YTRiLTliNDctOWE0ZGRjMjNiNDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrRIcizMZjYtm64G23VY1029LuEBQ9QFSLds6JOcqCuZyH+GlTG03dD BHL1qFNoFkmPiW2N3HfCWFFv+fldztQLiYbMQv4Dj7TXeYnLJ7ICqQ6wbEevyVbf xzaXGdpgnVa+hfbOMyC7fgbBDVn1DH5nXD2GENJtQlyG82U7a4v7Z8MKyrcyL8u7 H6NtHdOr+iDc83A16sJTD3Azj2dFWbAlCdkunQ84K5P7+rMah9PwkBUtcEDxb45g pH9Y1kakCDatd9oNEp8LKpXrQ/4Ehc7XJW7uW219EuwH3osrMgWFc7Y8yQMOxwBD Xla7/BCcSFp2WYHsk1P8yRdF1+P4s5I= -----END CERTIFICATE-----Generated at Thu Mar 26 06:26:28 2026 by rpki-client