$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/545fa2f7-1829-3c6a-a38c-f5fab4789d6f.roa File: 545fa2f7-1829-3c6a-a38c-f5fab4789d6f.roa (raw, json) Hash identifier: UD7TCnxDK49DR2a7rafPspxzvE9NpTNL4evTW5wpL24= Subject key identifier: AA:BF:39:16:E7:73:EA:3B:96:0C:47:C6:E1:FE:A8:A9:7E:04:CA:3F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B96B70EAD0663CCB9B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/545fa2f7-1829-3c6a-a38c-f5fab4789d6f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b9:6b:70:ea:d0:66:3c:cb:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=13d9cb21-cd92-47e2-87b4-d48629070fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c6:fc:90:c7:6e:f0:c0:b3:ea:49:f5:9c:d7: 13:11:9d:a3:7b:eb:97:4b:0e:4a:28:e8:2b:1a:e1: 47:e0:22:ce:b3:7b:63:6f:07:80:ae:96:63:ae:30: b4:a0:f2:50:21:73:9d:ed:db:41:53:25:fd:ef:fa: 62:a4:93:34:cc:a4:25:09:8e:48:98:7a:f9:c1:64: 3c:b5:4c:8c:4a:d8:c4:01:f2:eb:91:e3:93:0c:2e: 8f:64:e5:9f:55:35:21:fa:fb:ec:80:9e:c5:74:35: 54:53:be:10:93:27:1f:86:b2:b4:5b:1f:bf:68:ca: 5b:d2:a4:86:a3:c6:e0:ed:27:c2:24:55:47:7d:e6: ae:59:97:4a:75:15:34:8e:f9:9e:ae:1e:89:72:98: da:fa:25:2d:c2:de:7d:44:4b:16:28:a2:d4:ee:c3: 18:79:8e:98:43:07:02:0e:04:0a:92:a6:71:20:a2: 5a:61:bc:6e:86:e8:35:e1:bb:a1:99:ae:32:72:14: 40:54:0c:d6:a2:33:44:df:81:f5:da:6c:7a:b4:09: 22:99:ae:87:46:c2:13:ae:7c:68:45:9f:12:52:5b: 14:f9:86:83:d3:cb:e8:d1:62:a9:e3:aa:a7:19:b5: 6e:ae:f7:ea:43:44:ec:52:55:cb:23:71:54:a6:ef: da:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BF:39:16:E7:73:EA:3B:96:0C:47:C6:E1:FE:A8:A9:7E:04:CA:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/545fa2f7-1829-3c6a-a38c-f5fab4789d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:31:53:13:cc:06:38:95:2b:a6:2e:23:d9:84:5f:2f:0a:27: b3:33:f2:55:36:15:90:64:96:11:3e:e9:f8:c4:ff:50:e6:b0: 61:b3:4c:bf:c6:20:af:e5:5c:0b:78:c7:5e:e6:b7:c9:a6:63: 29:6e:b0:68:02:83:d1:d4:a8:f5:48:58:62:e7:1a:79:12:ca: e5:07:aa:c6:fb:69:b4:9c:d5:6b:57:6b:67:06:51:f6:ba:49: 27:3f:94:1c:d5:81:c7:b6:8d:58:fe:be:ee:0e:75:5d:09:41: 6f:23:26:93:ec:00:f5:eb:cd:26:a1:5c:70:e5:06:c0:75:67: 88:ba:78:84:be:aa:24:87:25:28:fb:28:8a:d8:76:ad:ab:e9: ef:a0:48:6a:66:87:20:28:3f:a1:d8:ae:0a:07:e9:43:54:03: bd:6e:ac:1c:34:25:8b:ad:eb:5c:0b:62:f7:c1:f7:d6:5e:8b: 53:cf:8e:27:7d:71:83:55:a5:30:31:e4:03:ff:e1:81:6c:cd: d1:1c:fb:c0:ed:60:b0:65:86:48:9b:f6:3a:f9:1b:35:df:84: 67:31:9c:a9:42:83:f9:46:99:f3:72:cd:b5:6b:7d:90:6c:29: 6f:03:e2:7c:09:cb:da:ed:0e:04:3a:ce:81:46:4e:10:42:51: 77:73:85:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LlrcOrQZjzLmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTNkOWNiMjEtY2Q5Mi00N2UyLTg3YjQtZDQ4NjI5MDcwZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcb8kMdu8MCz6kn1nNcTEZ2je+uXSw5KKOgr GuFH4CLOs3tjbweArpZjrjC0oPJQIXOd7dtBUyX97/pipJM0zKQlCY5ImHr5wWQ8 tUyMStjEAfLrkeOTDC6PZOWfVTUh+vvsgJ7FdDVUU74QkycfhrK0Wx+/aMpb0qSG o8bg7SfCJFVHfeauWZdKdRU0jvmerh6Jcpja+iUtwt59REsWKKLU7sMYeY6YQwcC DgQKkqZxIKJaYbxuhug14buhma4ychRAVAzWojNE34H12mx6tAkima6HRsITrnxo RZ8SUlsU+YaD08vo0WKp46qnGbVurvfqQ0TsUlXLI3FUpu/avwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKq/ORbnc+o7lgxHxuH+qKl+BMo/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTQ1ZmEyZjctMTgyOS0z YzZhLWEzOGMtZjVmYWI0Nzg5ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkxUxPMBjiVK6YuI9mEXy8KJ7Mz8lU2FZBklhE+6fjE/1DmsGGzTL/G IK/lXAt4x17mt8mmYylusGgCg9HUqPVIWGLnGnkSyuUHqsb7abSc1WtXa2cGUfa6 SSc/lBzVgce2jVj+vu4OdV0JQW8jJpPsAPXrzSahXHDlBsB1Z4i6eIS+qiSHJSj7 KIrYdq2r6e+gSGpmhyAoP6HYrgoH6UNUA71urBw0JYut61wLYvfB99Zei1PPjid9 cYNVpTAx5AP/4YFszdEc+8DtYLBlhkib9jr5GzXfhGcxnKlCg/lGmfNyzbVrfZBs KW8D4nwJy9rtDgQ6zoFGThBCUXdzhS4= -----END CERTIFICATE-----Generated at Thu Mar 26 17:36:50 2026 by rpki-client