$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/426fc1e1-19ca-3a4c-a464-18b15ae70b77.roa File: 426fc1e1-19ca-3a4c-a464-18b15ae70b77.roa (raw, json) Hash identifier: MFgL6DK8yajlF/RKmyk6YU4wTlvzUukTYUg5EJhOkjc= Subject key identifier: A9:F1:A6:B8:B5:FA:25:57:4C:FD:AA:91:8D:ED:83:4B:75:AB:85:02 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFA74BC52BCA1B4EBC660 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/426fc1e1-19ca-3a4c-a464-18b15ae70b77.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fa:74:bc:52:bc:a1:b4:eb:c6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f06bbf21-116e-4423-953c-a8480912a4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:54:ce:bf:3e:ba:d7:49:66:3b:43:5d:8e:21: ae:83:af:c3:60:f2:84:6b:dc:6e:d2:45:d4:3d:dc: d9:fa:5d:86:1e:4b:00:b1:47:2e:38:62:a0:d7:cd: 19:f0:82:61:ea:15:0f:77:e3:98:14:2b:c6:85:1e: aa:bb:f2:9b:fe:fd:7a:e6:46:d4:70:b4:92:54:04: c2:11:9b:6a:9b:55:63:3c:65:c0:99:7d:ed:35:5c: 24:d1:98:7b:d2:19:b2:65:6a:a4:2e:59:80:ca:5b: c8:56:aa:05:08:ff:00:06:91:9c:4f:91:d0:e7:de: 2a:ab:41:bc:1c:c0:e1:3e:17:9d:d7:f8:ad:c7:eb: ab:da:79:aa:3a:a8:26:55:40:00:2a:3c:a2:cd:d0: 26:44:90:93:4b:73:4e:ea:dc:ca:ce:7b:31:1e:1f: 8f:02:8e:1e:7d:7d:65:93:9c:6b:a2:a6:f5:21:2d: 64:25:2a:de:9c:4e:21:21:5d:a9:cb:d1:dd:bd:a4: aa:cc:f2:f7:43:7b:a9:9b:34:7b:5c:19:e1:02:57: 06:d4:de:a6:fe:20:31:b4:8d:35:98:10:0e:31:d9: 4e:d5:40:ae:bb:92:ee:27:67:5b:3a:42:c6:61:53: df:50:48:a8:6d:59:5d:1d:b9:20:e7:98:2b:38:df: 64:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F1:A6:B8:B5:FA:25:57:4C:FD:AA:91:8D:ED:83:4B:75:AB:85:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/426fc1e1-19ca-3a4c-a464-18b15ae70b77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e1:da:6e:55:50:32:e3:8f:df:c7:47:f2:5b:18:f2:d8:e4: 58:64:98:43:c8:8c:92:1a:d3:09:00:69:6d:e6:3d:6d:93:35: cc:0e:5c:17:41:78:1b:0c:08:77:01:aa:21:2b:b5:d2:2b:d7: 42:60:36:a8:6c:a0:41:62:05:c5:36:11:10:6a:95:4c:06:dc: d7:25:b9:2c:15:8f:c6:62:18:86:00:36:ea:05:42:5a:3b:25: b8:c4:49:a4:bf:a6:e4:0b:c5:e7:98:6c:56:8f:09:bf:76:dd: b7:0e:dc:6f:a2:2f:5b:6e:51:f0:70:97:90:83:1a:4f:62:66: 87:f3:42:1e:fd:04:71:05:52:0e:d8:81:b4:b4:c2:d9:fe:f9: 18:05:4a:d3:78:2b:a7:c7:20:4e:52:d8:7d:96:9a:85:ef:f4: e4:aa:eb:36:0b:b5:d9:c5:6e:44:77:41:8a:a3:1a:79:ec:61: f3:c6:47:c1:a6:93:14:ca:43:d6:97:a6:89:65:b5:5a:c2:1b: 6f:9b:08:c1:0f:16:55:91:e7:7e:92:f5:44:43:df:31:d0:48: a6:7c:52:d7:36:b0:b4:35:4f:a4:ab:8a:21:3b:a7:c4:55:68: 1a:9b:15:c7:60:8b:51:4e:ae:26:33:b6:3b:93:ef:02:18:c3: 9c:98:45:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/p0vFK8obTrxmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjA2YmJmMjEtMTE2ZS00NDIzLTk1M2MtYTg0ODA5MTJhNGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVTOvz6610lmO0NdjiGug6/DYPKEa9xu0kXU PdzZ+l2GHksAsUcuOGKg180Z8IJh6hUPd+OYFCvGhR6qu/Kb/v165kbUcLSSVATC EZtqm1VjPGXAmX3tNVwk0Zh70hmyZWqkLlmAylvIVqoFCP8ABpGcT5HQ594qq0G8 HMDhPhed1/itx+ur2nmqOqgmVUAAKjyizdAmRJCTS3NO6tzKznsxHh+PAo4efX1l k5xroqb1IS1kJSrenE4hIV2py9HdvaSqzPL3Q3upmzR7XBnhAlcG1N6m/iAxtI01 mBAOMdlO1UCuu5LuJ2dbOkLGYVPfUEiobVldHbkg55grON9kgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnxpri1+iVXTP2qkY3tg0t1q4UCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDI2ZmMxZTEtMTljYS0z YTRjLWE0NjQtMThiMTVhZTcwYjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHh2m5VUDLjj9/HR/JbGPLY5FhkmEPIjJIa0wkAaW3mPW2TNcwOXBdB eBsMCHcBqiErtdIr10JgNqhsoEFiBcU2ERBqlUwG3NcluSwVj8ZiGIYANuoFQlo7 JbjESaS/puQLxeeYbFaPCb923bcO3G+iL1tuUfBwl5CDGk9iZofzQh79BHEFUg7Y gbS0wtn++RgFStN4K6fHIE5S2H2WmoXv9OSq6zYLtdnFbkR3QYqjGnnsYfPGR8Gm kxTKQ9aXpolltVrCG2+bCMEPFlWR536S9URD3zHQSKZ8Utc2sLQ1T6SriiE7p8RV aBqbFcdgi1FOriYztjuT7wIYw5yYRdY= -----END CERTIFICATE-----Generated at Thu Mar 26 21:10:34 2026 by rpki-client