$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b40db24-8ec4-3c0c-8532-bd6a84169001.roa File: 5b40db24-8ec4-3c0c-8532-bd6a84169001.roa (raw, json) Hash identifier: iMMlhl74T0kRSHKT4sVmFvCfj7tT7Ce8ZvCls9EqhKQ= Subject key identifier: 72:F4:ED:25:CD:F6:51:02:F8:10:E1:2E:7A:4F:F7:D2:C3:A4:58:C2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B20ABE447905F47D09C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b40db24-8ec4-3c0c-8532-bd6a84169001.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b2:0a:be:44:79:05:f4:7d:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4d58f341-f79b-424d-a4a1-9df978eb8f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:8d:28:b0:a4:f5:4f:e7:18:79:44:fa:1a: 3b:52:cc:56:58:5c:83:91:47:5d:a3:f1:c8:11:8b: 18:32:22:7b:df:94:cb:d5:bb:f5:dc:76:9d:8b:7f: 20:1f:f7:fb:be:95:20:61:77:3d:4c:92:d8:8b:5f: 2a:45:09:4e:48:7b:b4:58:f5:88:52:18:f7:d6:a1: 2c:37:58:bb:b9:9a:19:90:48:14:71:7a:ac:e9:99: f1:fe:24:07:3e:b1:1d:7b:7a:2d:53:80:a7:87:51: 26:27:9c:7e:0f:8d:a5:61:3c:8b:98:37:31:8e:45: 6f:54:09:06:12:9b:65:47:c8:8f:43:b9:e3:6c:11: b8:02:b4:fb:f0:6b:6b:79:af:57:e2:83:84:07:98: bc:4d:2e:19:9c:8b:8a:55:09:42:62:a8:2c:cf:27: 8c:5c:42:93:7b:9c:e7:28:a5:be:be:8b:06:55:2b: f2:96:50:84:ad:58:4c:38:de:c1:75:be:6d:fc:83: f3:58:b0:98:49:ba:c5:28:26:b5:cd:c6:01:06:e4: 94:cd:71:4b:f4:ca:72:d8:78:e4:0f:32:eb:2a:bd: 3c:04:2e:88:22:b1:f0:53:59:f8:90:32:27:c9:d5: 29:7e:27:10:3a:b7:50:3f:9c:fc:18:f5:5c:a8:2e: cc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F4:ED:25:CD:F6:51:02:F8:10:E1:2E:7A:4F:F7:D2:C3:A4:58:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b40db24-8ec4-3c0c-8532-bd6a84169001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:60:51:ef:dc:6a:0f:9d:f2:ce:11:ab:66:81:20:68:88:0f: b6:52:7c:4b:a4:87:ff:d1:32:23:2d:4c:4c:ca:af:1b:37:01: 66:f0:3d:bc:12:ac:d6:33:3f:09:a7:50:e8:e9:ee:c0:8b:2f: 07:cf:2f:30:c6:7c:d5:9e:1e:b1:c7:af:7c:6e:87:29:ef:0f: 9e:bc:df:ed:f0:1d:36:d2:c1:92:c0:9c:cb:01:69:38:67:da: 77:ec:fe:70:5b:b8:48:f6:5b:5f:31:e8:48:41:04:82:57:7d: d1:c8:ae:a1:83:da:7c:aa:0a:64:2f:e3:a3:2a:9e:fc:a1:49: 0d:b0:0e:78:ca:21:36:69:53:2e:4d:69:5e:a7:0d:5c:cf:61: 33:23:0c:dd:35:6e:96:69:e2:18:6d:b9:8a:c3:01:94:fb:10: bc:34:40:03:d4:a8:42:f0:d6:f3:09:e9:48:eb:71:38:53:e6: ba:c7:e8:ff:f8:e9:31:84:17:19:d5:af:f8:ba:7b:d2:b1:72: 1e:d9:41:21:d3:80:04:0a:1f:df:0f:56:44:17:bf:2f:1e:47: 34:1e:45:bc:e4:41:97:85:a5:d4:4f:91:ca:9a:72:12:7e:13: e0:4f:db:c6:39:8a:89:b8:ee:99:dc:43:d1:4d:79:76:57:a3: 2b:39:bf:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LIKvkR5BfR9CcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NGQ1OGYzNDEtZjc5Yi00MjRkLWE0YTEtOWRmOTc4ZWI4Zjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYGNKLCk9U/nGHlE+ho7UsxWWFyDkUddo/HI EYsYMiJ735TL1bv13Hadi38gH/f7vpUgYXc9TJLYi18qRQlOSHu0WPWIUhj31qEs N1i7uZoZkEgUcXqs6Znx/iQHPrEde3otU4Cnh1EmJ5x+D42lYTyLmDcxjkVvVAkG EptlR8iPQ7njbBG4ArT78Gtrea9X4oOEB5i8TS4ZnIuKVQlCYqgszyeMXEKTe5zn KKW+vosGVSvyllCErVhMON7Bdb5t/IPzWLCYSbrFKCa1zcYBBuSUzXFL9Mpy2Hjk DzLrKr08BC6IIrHwU1n4kDInydUpficQOrdQP5z8GPVcqC7MXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL07SXN9lEC+BDhLnpP99LDpFjCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWI0MGRiMjQtOGVjNC0z YzBjLTg1MzItYmQ2YTg0MTY5MDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZgUe/cag+d8s4Rq2aBIGiID7ZSfEukh//RMiMtTEzKrxs3AWbwPbwS rNYzPwmnUOjp7sCLLwfPLzDGfNWeHrHHr3xuhynvD5683+3wHTbSwZLAnMsBaThn 2nfs/nBbuEj2W18x6EhBBIJXfdHIrqGD2nyqCmQv46MqnvyhSQ2wDnjKITZpUy5N aV6nDVzPYTMjDN01bpZp4hhtuYrDAZT7ELw0QAPUqELw1vMJ6UjrcThT5rrH6P/4 6TGEFxnVr/i6e9Kxch7ZQSHTgAQKH98PVkQXvy8eRzQeRbzkQZeFpdRPkcqachJ+ E+BP28Y5iom47pncQ9FNeXZXoys5vwc= -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:16 2026 by rpki-client