$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50d2c3f0-52cd-340d-bedf-ea1f163bd67b.roa File: 50d2c3f0-52cd-340d-bedf-ea1f163bd67b.roa (raw, json) Hash identifier: gabmsD2x/pwc1ncNDNVr+S1stlmC0U2ZzUKNA22k6zk= Subject key identifier: 8E:D5:31:EC:6F:64:B2:CD:74:4E:8F:02:7F:CC:FA:F9:DD:C5:EB:D4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E001C41388B2895EA3B700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50d2c3f0-52cd-340d-bedf-ea1f163bd67b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:01:c4:13:88:b2:89:5e:a3:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=29d892f6-4f7f-4c51-b6cd-e22a3101bb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:09:a5:66:8e:e6:53:64:4b:e3:de:b4:f0:5b: 8e:15:b2:c0:26:e4:cb:83:e4:4c:8c:06:e3:32:cc: 91:11:7e:0d:48:6b:17:d7:0e:05:64:31:cd:99:50: 02:a0:1c:36:2c:cb:22:01:19:70:54:48:6f:0c:5e: d0:3b:0e:57:19:20:d0:3f:c8:a6:aa:24:b4:a3:40: 22:9a:cc:0e:2a:98:81:85:df:1f:eb:30:4e:b7:1f: ff:4b:e9:14:5f:55:95:65:66:b8:4e:93:25:41:d4: 61:be:ff:b7:9c:50:6c:1a:95:eb:a3:b5:14:84:a5: c4:86:14:0b:1b:bc:b6:9e:26:da:d3:12:7f:c9:0c: 63:69:92:46:f4:9d:14:a1:74:61:78:dd:3c:b9:80: ea:f8:a1:3f:7e:d3:6f:88:42:85:25:f2:26:b9:3d: 8b:2a:1b:d3:2c:a2:e8:03:59:12:42:fb:50:d0:42: 65:07:86:6e:8c:80:07:b0:b9:c7:fc:4f:48:ab:f8: 76:9e:3d:5d:ed:60:e3:45:7d:da:2e:61:de:72:de: 7c:ad:f6:45:71:d2:37:e3:af:70:3d:61:f9:a3:88: 99:7e:ba:d6:2e:60:34:1e:6d:8e:c7:5b:fd:83:2f: d6:dd:f6:1a:ed:ff:44:ce:12:80:2c:4a:31:67:9f: 71:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D5:31:EC:6F:64:B2:CD:74:4E:8F:02:7F:CC:FA:F9:DD:C5:EB:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50d2c3f0-52cd-340d-bedf-ea1f163bd67b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:79:d6:6e:2f:7b:38:7d:cb:9e:76:ec:f9:49:2e:9f:e0:95: 71:e4:5f:99:00:68:21:a7:ac:49:36:f1:36:cf:09:f2:80:30: 1e:24:cd:cf:f6:e2:79:8d:70:27:cb:27:e1:26:cc:9b:90:9c: b5:d4:83:66:cb:9b:a7:16:d6:e9:18:d8:a1:7a:42:85:ae:d8: 8d:e2:49:ce:59:86:a2:4f:17:fb:e5:22:02:22:52:2d:ec:5c: 31:84:34:dd:13:32:a1:ca:9f:3c:20:c6:e9:83:eb:c4:6c:16: 93:0d:a0:6e:5b:fa:3b:d2:75:28:fb:30:96:2f:a3:87:70:b8: 32:f9:a2:b9:28:1c:0f:b0:0b:c3:86:e9:ed:3c:4b:83:72:05: aa:5d:e8:36:04:d1:be:04:e9:78:f1:b7:b2:50:8b:ac:96:6d: 5b:f4:82:6c:47:41:e4:55:08:9e:19:b5:f4:d3:72:93:17:a0: f1:97:49:15:e1:00:43:df:02:af:15:04:c1:a3:e5:cd:72:cb: 91:a6:23:7a:e0:36:b4:5b:82:b0:e6:87:fa:ae:50:3f:2a:4b: 79:82:c9:06:6f:7b:aa:1a:22:60:e3:aa:a1:30:83:d6:9d:9e: 26:29:fa:b3:d8:69:6a:d1:95:9f:e7:16:45:46:52:7b:cd:0a: 15:8b:43:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4AHEE4iyiV6jtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjlkODkyZjYtNGY3Zi00YzUxLWI2Y2QtZTIyYTMxMDFiYjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wmlZo7mU2RL49608FuOFbLAJuTLg+RMjAbj MsyREX4NSGsX1w4FZDHNmVACoBw2LMsiARlwVEhvDF7QOw5XGSDQP8imqiS0o0Ai mswOKpiBhd8f6zBOtx//S+kUX1WVZWa4TpMlQdRhvv+3nFBsGpXro7UUhKXEhhQL G7y2niba0xJ/yQxjaZJG9J0UoXRheN08uYDq+KE/ftNviEKFJfImuT2LKhvTLKLo A1kSQvtQ0EJlB4ZujIAHsLnH/E9Iq/h2nj1d7WDjRX3aLmHect58rfZFcdI3469w PWH5o4iZfrrWLmA0Hm2Ox1v9gy/W3fYa7f9EzhKALEoxZ59x3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7VMexvZLLNdE6PAn/M+vndxevUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTBkMmMzZjAtNTJjZC0z NDBkLWJlZGYtZWExZjE2M2JkNjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALB51m4vezh9y5527PlJLp/glXHkX5kAaCGnrEk28TbPCfKAMB4kzc/2 4nmNcCfLJ+EmzJuQnLXUg2bLm6cW1ukY2KF6QoWu2I3iSc5ZhqJPF/vlIgIiUi3s XDGENN0TMqHKnzwgxumD68RsFpMNoG5b+jvSdSj7MJYvo4dwuDL5orkoHA+wC8OG 6e08S4NyBapd6DYE0b4E6Xjxt7JQi6yWbVv0gmxHQeRVCJ4ZtfTTcpMXoPGXSRXh AEPfAq8VBMGj5c1yy5GmI3rgNrRbgrDmh/quUD8qS3mCyQZve6oaImDjqqEwg9ad niYp+rPYaWrRlZ/nFkVGUnvNChWLQyc= -----END CERTIFICATE-----Generated at Thu Mar 26 13:13:03 2026 by rpki-client