$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/43a8379e-6756-31c2-87b8-dbdfc7ad7f0f.roa File: 43a8379e-6756-31c2-87b8-dbdfc7ad7f0f.roa (raw, json) Hash identifier: 0m4KdIq722daPSoHdsoVThEfaGzIhZzicTu8In7NKaM= Subject key identifier: C7:E8:85:CC:F0:1C:03:91:25:8B:40:6E:6F:A3:B1:52:A6:C4:D9:B8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0A9C917BD118CA7818080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/43a8379e-6756-31c2-87b8-dbdfc7ad7f0f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 162.72.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:a9:c9:17:bd:11:8c:a7:81:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=9e7fa7f8-4d69-4e9d-88c5-c0d7fcf6a429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6d:51:0c:4c:74:1c:f1:f3:85:c6:92:36:03: c6:57:57:55:3f:d9:70:6d:38:fb:66:82:f0:7a:b5: 76:f2:09:e8:1e:d5:11:1c:a8:51:c4:4c:7b:f6:45: 4b:a0:8a:79:85:4c:81:c8:d8:e4:c4:9e:a8:7a:6a: 71:2e:5d:81:b2:a1:bb:de:a0:21:7b:6b:12:15:e0: c0:d7:f7:e6:c7:83:e9:7c:34:a3:78:e2:56:80:e4: 72:c5:07:66:a5:67:fe:b7:28:2f:14:28:48:18:1d: d8:d1:8b:f3:4e:6c:d6:86:d1:8d:07:f0:0d:4f:b3: 36:88:9c:31:90:a4:9b:6e:e4:3a:ce:d6:d7:01:d7: 3f:87:94:e5:d7:fa:c1:e2:53:a2:12:7d:9d:ff:ad: ec:4e:0d:0e:d9:27:a5:2e:68:07:a2:be:55:3f:9c: e8:5d:aa:c7:a9:c5:60:73:de:b3:71:88:ff:82:a6: 6c:91:24:36:5c:c4:46:78:f9:68:01:5c:be:ea:b4: 15:c3:1e:68:9c:9a:ec:a3:6b:97:59:75:16:6d:12: 22:a9:52:20:91:39:82:f9:29:fe:6a:90:b7:67:c3: 8d:75:38:e9:48:c0:d9:eb:db:79:85:a8:72:54:3d: 09:ea:d7:e3:86:64:c6:76:ba:14:fb:de:64:4b:16: fa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E8:85:CC:F0:1C:03:91:25:8B:40:6E:6F:A3:B1:52:A6:C4:D9:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/43a8379e-6756-31c2-87b8-dbdfc7ad7f0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:24:da:dd:3f:4d:7f:e4:05:d8:e7:52:77:6a:43:84:b7:28: ef:d0:64:2d:20:bd:17:8b:6c:97:7d:ea:8a:09:86:b9:d4:82: c3:84:6e:2c:db:a7:85:67:d4:36:05:17:ef:b6:4d:be:0c:93: a8:77:84:85:b9:56:fe:8d:1f:96:e7:16:8b:8f:53:f2:8c:fe: 80:70:a5:2a:3b:f1:e6:9a:31:34:1c:ac:78:0d:7f:fd:99:65: cc:bf:8a:50:d6:26:f9:8e:1d:e5:c8:98:17:32:35:67:7b:f7: 38:35:06:2a:c9:e8:a2:28:2e:92:d5:db:68:65:f5:fc:0d:a8: 2b:b8:4c:da:19:7b:f1:ec:96:83:41:e8:7a:d9:2c:9e:c3:ba: 24:a6:13:2b:29:35:67:57:ff:42:53:e7:a1:e6:e0:69:5e:55: 9e:bb:fc:13:0c:01:c3:f9:91:c6:0c:ed:87:b9:ae:6e:7c:52: 57:cc:4f:22:a8:89:a2:c6:b1:e2:d4:77:fd:17:9d:bc:59:16: b9:37:59:9c:da:ae:31:28:e2:4d:cf:75:97:1b:ca:df:66:de: b4:1d:ff:3f:bb:35:dd:57:9d:86:c6:7f:8c:df:17:8c:2f:ad: fd:29:6c:30:b3:c1:c7:30:27:2e:27:08:d9:ce:32:b1:4d:04: f0:dc:a2:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4KnJF70RjKeBgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OWU3ZmE3ZjgtNGQ2OS00ZTlkLTg4YzUtYzBkN2ZjZjZhNDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW1RDEx0HPHzhcaSNgPGV1dVP9lwbTj7ZoLw erV28gnoHtURHKhRxEx79kVLoIp5hUyByNjkxJ6oempxLl2BsqG73qAhe2sSFeDA 1/fmx4PpfDSjeOJWgORyxQdmpWf+tygvFChIGB3Y0YvzTmzWhtGNB/ANT7M2iJwx kKSbbuQ6ztbXAdc/h5Tl1/rB4lOiEn2d/63sTg0O2SelLmgHor5VP5zoXarHqcVg c96zcYj/gqZskSQ2XMRGePloAVy+6rQVwx5onJrso2uXWXUWbRIiqVIgkTmC+Sn+ apC3Z8ONdTjpSMDZ69t5hahyVD0J6tfjhmTGdroU+95kSxb6iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfohczwHAORJYtAbm+jsVKmxNm4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDNhODM3OWUtNjc1Ni0z MWMyLTg3YjgtZGJkZmM3YWQ3ZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGck2t0/TX/kBdjnUndqQ4S3KO/QZC0gvReLbJd96ooJhrnUgsOEbizb p4Vn1DYFF++2Tb4Mk6h3hIW5Vv6NH5bnFouPU/KM/oBwpSo78eaaMTQcrHgNf/2Z Zcy/ilDWJvmOHeXImBcyNWd79zg1BirJ6KIoLpLV22hl9fwNqCu4TNoZe/HsloNB 6HrZLJ7DuiSmEyspNWdX/0JT56Hm4GleVZ67/BMMAcP5kcYM7Ye5rm58UlfMTyKo iaLGseLUd/0XnbxZFrk3WZzarjEo4k3PdZcbyt9m3rQd/z+7Nd1XnYbGf4zfF4wv rf0pbDCzwccwJy4nCNnOMrFNBPDcovc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:28:35 2026 by rpki-client