$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b88fca3-866c-3556-86aa-5a5ec0d904cf.roa File: 4b88fca3-866c-3556-86aa-5a5ec0d904cf.roa (raw, json) Hash identifier: wcjChZzQuTQDv26aQJ5Pk0oupzByQw00qXbvvLN3Ye4= Subject key identifier: 2D:9A:77:5E:E2:1F:ED:86:35:03:12:EE:FD:EF:53:7B:C3:DF:6C:90 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B36C39E68C91A51D0D80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b88fca3-866c-3556-86aa-5a5ec0d904cf.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b3:6c:39:e6:8c:91:a5:1d:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ec4f3cb2-7d09-4ed0-8e8d-f7db10b81b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:49:fe:4e:e7:75:92:da:4a:48:0c:e0:e2:0b: f5:e2:7d:95:25:dc:38:c9:63:02:55:a7:55:ea:80: 4c:11:dd:9f:b0:9c:c5:08:23:37:cb:7e:40:ab:b9: 9d:fe:a0:eb:14:be:ce:92:14:d5:7c:52:41:27:04: 5c:4b:c2:1f:33:56:12:2a:68:c0:66:4a:f3:31:67: 52:6f:d6:f1:04:8a:56:19:61:57:b2:fb:25:8c:68: e5:7a:5c:19:23:e9:3c:fb:fe:b0:bd:21:ad:37:fc: a9:67:6a:78:2b:46:76:68:d7:73:70:51:29:d8:e0: 53:13:5f:0f:91:dd:07:d0:12:c7:3f:22:1b:9a:72: 9e:f5:10:96:82:88:06:d2:82:16:17:5e:75:55:e3: 09:1b:a5:f0:77:9f:a1:16:6d:11:30:2c:4f:11:4b: 2d:b2:3b:21:49:76:d8:3f:b8:6f:5f:2a:47:12:30: e0:24:33:8a:24:33:2b:7b:0f:e2:1a:61:17:0f:bd: a9:11:fb:dd:75:c5:31:20:7c:14:f4:82:6d:4a:d6: 98:2b:2b:69:1a:9b:de:d0:60:e9:44:99:db:b7:85: 75:f2:68:fe:96:9d:be:ad:79:06:14:c7:63:17:cc: 43:3f:86:f1:14:52:ff:98:90:f4:0f:26:51:84:6e: a7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9A:77:5E:E2:1F:ED:86:35:03:12:EE:FD:EF:53:7B:C3:DF:6C:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b88fca3-866c-3556-86aa-5a5ec0d904cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:8d:b7:c5:41:07:a6:88:cc:28:79:45:92:f6:fe:53:64:11: 4c:e5:99:c5:91:bb:9b:37:d3:5a:fd:39:70:6c:7b:9b:85:6e: f6:76:79:03:ea:77:b5:40:97:ab:44:ef:41:32:45:f3:7f:75: 89:ef:35:f3:66:d1:02:bb:91:b7:fa:cc:ab:a9:12:c8:73:50: 5c:2e:a4:9d:f2:2e:48:34:c2:f4:ea:a1:77:4c:3d:13:b4:46: 32:05:9d:a7:3f:85:8c:ec:0b:0f:73:63:be:21:e2:d5:78:b9: 72:47:b5:2d:e8:7c:3c:29:65:76:48:69:a0:84:17:5d:76:da: 0c:da:1b:0c:c7:86:dc:5c:71:b3:50:a9:7a:6f:ac:32:a5:d5: c6:2b:83:84:c7:e5:50:67:4a:2d:0a:f1:02:9c:4b:b0:14:50: ba:1c:22:b9:3b:51:fa:c5:f6:4d:82:29:49:31:84:66:d7:db: 08:74:bf:7b:92:07:c8:d4:40:7a:9e:6d:87:66:9c:81:70:13: 69:f5:1e:b0:b1:27:b7:6b:1c:41:f8:22:05:f0:70:80:5a:5e: 9e:df:96:3d:24:3a:3a:70:2b:78:14:43:07:5a:b3:c5:de:8e: 5b:1d:28:88:91:3b:85:c3:d9:45:59:a0:55:7a:48:38:f1:f5: a3:a3:d7:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LNsOeaMkaUdDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZWM0ZjNjYjItN2QwOS00ZWQwLThlOGQtZjdkYjEwYjgxYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkn+Tud1ktpKSAzg4gv14n2VJdw4yWMCVadV 6oBMEd2fsJzFCCM3y35Aq7md/qDrFL7OkhTVfFJBJwRcS8IfM1YSKmjAZkrzMWdS b9bxBIpWGWFXsvsljGjlelwZI+k8+/6wvSGtN/ypZ2p4K0Z2aNdzcFEp2OBTE18P kd0H0BLHPyIbmnKe9RCWgogG0oIWF151VeMJG6Xwd5+hFm0RMCxPEUstsjshSXbY P7hvXypHEjDgJDOKJDMrew/iGmEXD72pEfvddcUxIHwU9IJtStaYKytpGpve0GDp RJnbt4V18mj+lp2+rXkGFMdjF8xDP4bxFFL/mJD0DyZRhG6ntwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2ad17iH+2GNQMS7v3vU3vD32yQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGI4OGZjYTMtODY2Yy0z NTU2LTg2YWEtNWE1ZWMwZDkwNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmNt8VBB6aIzCh5RZL2/lNkEUzlmcWRu5s301r9OXBse5uFbvZ2eQPq d7VAl6tE70EyRfN/dYnvNfNm0QK7kbf6zKupEshzUFwupJ3yLkg0wvTqoXdMPRO0 RjIFnac/hYzsCw9zY74h4tV4uXJHtS3ofDwpZXZIaaCEF1122gzaGwzHhtxccbNQ qXpvrDKl1cYrg4TH5VBnSi0K8QKcS7AUULocIrk7UfrF9k2CKUkxhGbX2wh0v3uS B8jUQHqebYdmnIFwE2n1HrCxJ7drHEH4IgXwcIBaXp7flj0kOjpwK3gUQwdas8Xe jlsdKIiRO4XD2UVZoFV6SDjx9aOj168= -----END CERTIFICATE-----Generated at Thu Mar 26 16:20:50 2026 by rpki-client