$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/538ec252-5641-31cd-9812-16518e8efefb.roa File: 538ec252-5641-31cd-9812-16518e8efefb.roa (raw, json) Hash identifier: NrLWfDzYdc0CVNlFdX1cfHmh+C8wfNcHXzj5fiJ37BU= Subject key identifier: 23:DD:C1:68:33:C2:81:E6:7D:2A:59:9E:38:C5:84:52:DE:82:47:C0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E01E4CE56297CA4B2DE380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/538ec252-5641-31cd-9812-16518e8efefb.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 184.63.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:1e:4c:e5:62:97:ca:4b:2d:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a5d12934-59af-45fb-ab78-5645d7998a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d7:93:6a:1b:dd:01:50:a7:d5:9b:17:76:0c: bc:e6:a1:bb:a2:70:68:d0:55:bd:ac:6d:07:06:f0: 39:66:1b:89:1a:82:7f:68:90:11:9b:30:88:b7:6c: d3:51:61:b8:21:8f:42:c2:f2:d8:a0:08:55:44:93: d7:86:e7:42:0e:33:98:dc:b6:b5:d0:f2:82:ac:d2: 39:6a:11:c7:2e:c3:26:18:17:83:c0:42:18:87:0c: c1:50:61:c1:a6:eb:55:a8:da:6e:67:12:ae:b0:0e: ad:31:d7:bf:29:d8:91:7d:53:43:1d:aa:44:bd:16: f4:13:ef:de:5b:e5:f7:35:97:82:15:ca:0e:e4:8d: 08:70:11:26:71:b8:58:3c:7e:83:33:36:be:39:c5: 3f:d9:2a:7e:3b:c0:c3:23:84:9f:e5:00:60:d9:f3: 1e:1e:3e:1f:03:7d:9b:6e:80:09:e9:85:1d:24:4f: f7:ff:ac:90:cb:f4:f1:1a:88:13:b2:fc:80:46:12: bf:45:29:4d:b0:d2:7d:2d:86:25:79:4c:95:23:de: c4:0e:1e:33:5b:77:a7:3d:dc:e9:c3:22:da:55:4e: e9:91:da:58:61:67:28:17:38:42:02:67:59:76:d5: 7c:a4:14:fb:85:78:01:41:ad:a2:3a:d2:26:cc:61: 96:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DD:C1:68:33:C2:81:E6:7D:2A:59:9E:38:C5:84:52:DE:82:47:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/538ec252-5641-31cd-9812-16518e8efefb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.63.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f1:16:ad:31:d8:cc:ec:dd:2e:59:21:29:66:aa:89:44:91: 21:47:d3:f8:d6:4d:a0:9d:76:9a:4d:42:ac:2f:4e:d1:be:d8: e4:81:a9:ad:06:98:b9:66:55:19:c4:19:44:51:e5:5d:f1:1c: d8:64:54:0a:4c:3c:bb:89:04:fd:24:a7:db:40:c9:af:ff:14: d7:7c:36:ff:8f:36:ab:0b:15:2f:dc:18:39:25:11:fd:1e:47: d8:be:e2:c1:e0:f4:04:e3:5a:ad:0a:a1:80:4f:ff:41:1a:ba: fd:bb:1a:40:00:ac:82:be:45:01:a3:eb:4d:3b:8f:5b:7b:1f: a3:12:97:a2:57:ca:73:3b:76:04:07:53:4d:62:6e:07:06:5e: e2:a2:42:00:60:11:d5:e5:91:b9:28:2a:96:c7:4b:0b:5b:98: d1:5f:e1:cd:3f:06:d5:e2:64:39:90:38:be:48:ad:8c:a2:b7: 38:e0:78:1a:9f:ff:dc:bd:c0:7b:47:ac:9c:2c:c6:35:46:49: e0:c3:5c:a8:03:24:c5:0a:fe:f0:be:60:89:c5:a8:5b:bc:d8: 42:e1:81:21:07:9b:f4:aa:ca:9f:8d:c2:02:a2:48:f7:fb:0a: a2:bf:69:0a:69:8e:27:b7:0e:8b:f9:92:1a:34:ef:87:de:69: e0:1a:58:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4B5M5WKXykst44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YTVkMTI5MzQtNTlhZi00NWZiLWFiNzgtNTY0NWQ3OTk4YTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNeTahvdAVCn1ZsXdgy85qG7onBo0FW9rG0H BvA5ZhuJGoJ/aJARmzCIt2zTUWG4IY9CwvLYoAhVRJPXhudCDjOY3La10PKCrNI5 ahHHLsMmGBeDwEIYhwzBUGHBputVqNpuZxKusA6tMde/KdiRfVNDHapEvRb0E+/e W+X3NZeCFcoO5I0IcBEmcbhYPH6DMza+OcU/2Sp+O8DDI4Sf5QBg2fMeHj4fA32b boAJ6YUdJE/3/6yQy/TxGogTsvyARhK/RSlNsNJ9LYYleUyVI97EDh4zW3enPdzp wyLaVU7pkdpYYWcoFzhCAmdZdtV8pBT7hXgBQa2iOtImzGGWQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPdwWgzwoHmfSpZnjjFhFLegkfAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTM4ZWMyNTItNTY0MS0z MWNkLTk4MTItMTY1MThlOGVmZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD8iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrxFq0x2Mzs3S5ZISlmqolEkSFH0/jWTaCddppNQqwvTtG+2OSBqa0G mLlmVRnEGURR5V3xHNhkVApMPLuJBP0kp9tAya//FNd8Nv+PNqsLFS/cGDklEf0e R9i+4sHg9ATjWq0KoYBP/0Eauv27GkAArIK+RQGj6007j1t7H6MSl6JXynM7dgQH U01ibgcGXuKiQgBgEdXlkbkoKpbHSwtbmNFf4c0/BtXiZDmQOL5IrYyitzjgeBqf /9y9wHtHrJwsxjVGSeDDXKgDJMUK/vC+YInFqFu82ELhgSEHm/Sqyp+NwgKiSPf7 CqK/aQppjie3Dov5kho074feaeAaWM0= -----END CERTIFICATE-----Generated at Thu Mar 26 19:31:11 2026 by rpki-client