$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5243ddb1-4730-37b2-a1b2-b2ac21c7fa6e.roa File: 5243ddb1-4730-37b2-a1b2-b2ac21c7fa6e.roa (raw, json) Hash identifier: eGVX2T5trcD9C+mPLt5yAgPCta/H+C+xATWRCp/oywo= Subject key identifier: D2:ED:CB:91:D6:09:97:DA:63:96:37:72:C9:F7:B2:83:EA:85:A4:EC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0033A2306A8A23C6DC840 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5243ddb1-4730-37b2-a1b2-b2ac21c7fa6e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:03:3a:23:06:a8:a2:3c:6d:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0f370d09-8f5d-4259-8e5f-770da38e8cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1b:3b:6b:ac:86:58:d7:a0:20:51:f3:48:7d: 82:37:f0:34:b5:52:c9:de:ed:4b:9e:16:9c:53:2c: 60:33:27:0e:70:67:12:1b:ef:fe:ad:d4:47:5f:95: b7:8e:c5:b7:da:a6:75:9f:3b:86:04:53:35:0b:63: be:da:8c:95:b5:e7:23:82:88:19:38:6c:60:3d:df: ee:6a:5c:ff:f6:6d:b5:49:51:81:3f:e9:55:e2:88: 49:dd:88:81:5c:c3:07:8c:f9:a0:9c:7b:62:69:e8: 17:af:fc:f3:35:73:70:91:5c:dd:55:51:8c:42:b7: 59:9d:66:2b:70:49:78:e7:e5:1e:fe:e9:8c:5b:50: 09:2e:25:13:91:46:03:c5:35:7a:6e:3a:8b:ab:04: bb:96:55:05:7f:a5:bb:ae:bc:cd:94:90:ed:40:fc: 1d:5d:d2:a1:8b:6c:a2:ae:86:5a:e6:bc:cc:c0:9a: b1:44:6e:b4:73:d9:03:ae:31:e9:34:a7:76:ca:ab: 28:60:d9:bb:80:e7:17:7a:03:f8:54:df:a4:7c:95: 4b:31:10:2a:8a:bb:dc:6e:d8:a1:2e:8b:9e:f8:5d: 8e:8f:89:ad:1d:01:bf:5f:51:df:75:9c:b7:a3:d7: 50:c3:f7:52:75:28:95:49:67:c2:dd:b6:89:53:01: 78:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:ED:CB:91:D6:09:97:DA:63:96:37:72:C9:F7:B2:83:EA:85:A4:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5243ddb1-4730-37b2-a1b2-b2ac21c7fa6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:df:e4:fd:2b:c7:16:c3:71:d7:d7:fb:d9:46:05:24:e3:ff: 08:3e:f9:5a:3a:df:29:79:6e:4e:29:13:2b:6b:db:fe:0a:be: 3b:51:90:b2:e0:4c:2c:87:5d:53:d3:e8:5e:7f:de:2f:e4:39: a9:07:cb:5e:f2:25:90:30:ce:45:17:e7:90:18:24:25:cd:c5: da:40:d5:0f:7a:4d:bd:9e:31:17:d0:f6:15:d3:0e:c4:54:fd: bd:fc:58:e1:e0:16:b2:d3:aa:fe:a8:a4:75:f2:1e:52:5c:47: 46:5c:a4:8b:a4:a6:4f:8d:a2:84:d3:96:6d:ba:25:a2:9a:47: 67:71:04:40:6c:6f:99:a4:c7:c2:df:4f:00:23:e7:20:7e:f8: bb:f0:60:fd:d7:e7:b7:d0:b2:38:17:b8:b4:23:dd:69:68:3a: e0:ed:01:e2:1a:3e:2d:ae:79:84:6f:9e:67:16:fb:eb:db:7d: fa:d2:c4:60:f5:62:b4:e5:77:c4:9f:a8:51:e8:0d:6b:ee:51: 5a:51:f1:89:6f:4d:e7:44:a3:04:b7:11:90:19:2d:a3:84:91: 9b:f3:fd:5f:bb:99:4a:4b:03:d8:cb:07:da:be:9a:0d:02:7b: eb:5d:87:d0:bb:af:2f:54:b5:f6:40:0a:a5:90:26:58:4c:3b: 4a:aa:00:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4AM6IwaoojxtyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MGYzNzBkMDktOGY1ZC00MjU5LThlNWYtNzcwZGEzOGU4Y2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxs7a6yGWNegIFHzSH2CN/A0tVLJ3u1Lnhac UyxgMycOcGcSG+/+rdRHX5W3jsW32qZ1nzuGBFM1C2O+2oyVtecjgogZOGxgPd/u alz/9m21SVGBP+lV4ohJ3YiBXMMHjPmgnHtiaegXr/zzNXNwkVzdVVGMQrdZnWYr cEl45+Ue/umMW1AJLiUTkUYDxTV6bjqLqwS7llUFf6W7rrzNlJDtQPwdXdKhi2yi roZa5rzMwJqxRG60c9kDrjHpNKd2yqsoYNm7gOcXegP4VN+kfJVLMRAqirvcbtih Loue+F2Oj4mtHQG/X1HfdZy3o9dQw/dSdSiVSWfC3baJUwF4iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLty5HWCZfaY5Y3csn3soPqhaTsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTI0M2RkYjEtNDczMC0z N2IyLWExYjItYjJhYzIxYzdmYTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/f5P0rxxbDcdfX+9lGBSTj/wg++Vo63yl5bk4pEytr2/4KvjtRkLLg TCyHXVPT6F5/3i/kOakHy17yJZAwzkUX55AYJCXNxdpA1Q96Tb2eMRfQ9hXTDsRU /b38WOHgFrLTqv6opHXyHlJcR0ZcpIukpk+NooTTlm26JaKaR2dxBEBsb5mkx8Lf TwAj5yB++LvwYP3X57fQsjgXuLQj3WloOuDtAeIaPi2ueYRvnmcW++vbffrSxGD1 YrTld8SfqFHoDWvuUVpR8YlvTedEowS3EZAZLaOEkZvz/V+7mUpLA9jLB9q+mg0C e+tdh9C7ry9UtfZACqWQJlhMO0qqAGs= -----END CERTIFICATE-----Generated at Thu Mar 26 06:29:36 2026 by rpki-client