$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f43dc0e-4d35-37ef-9870-3b2729ab6cb8.roa File: 5f43dc0e-4d35-37ef-9870-3b2729ab6cb8.roa (raw, json) Hash identifier: Ev8mm+VdSvo/Djesv5GyNpvhhUbGOy/lWL2mt9sFunw= Subject key identifier: 52:39:44:BF:E0:2B:9F:F1:D7:DC:14:1D:03:97:31:A2:12:16:F4:81 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B5BEE6E601C5DFF35E00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f43dc0e-4d35-37ef-9870-3b2729ab6cb8.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b5:be:e6:e6:01:c5:df:f3:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=96a2cdc5-ac50-4779-83a4-ea10cebc96e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a7:ee:1f:0b:03:3c:84:ea:55:6d:e4:31:cf: 04:2e:fd:0f:a2:86:8b:1f:8a:ef:c8:aa:34:4b:b4: bb:b3:03:b2:7d:a6:8b:00:61:81:37:99:fc:d2:20: 36:ae:13:54:cf:61:72:86:e8:d6:bb:51:35:89:90: 48:7f:19:07:e8:b3:c7:d0:f3:7b:88:26:64:77:37: 46:83:09:11:e3:c6:ed:a9:ee:66:18:a9:84:71:d2: 18:e6:af:de:44:6b:88:92:6d:c7:f1:45:30:d7:63: de:a2:50:ad:c7:21:f4:35:9b:fe:35:d8:61:95:9b: 7e:1d:64:4e:d3:e4:27:27:67:91:5d:9f:55:0b:55: cd:3c:a2:15:e0:be:b9:99:15:7b:d1:cf:7a:0e:0a: bf:f0:c8:65:e3:2f:4a:69:fd:1a:f7:7d:32:61:5e: 26:f3:fa:04:4a:e7:6a:1a:3e:74:14:fd:8a:27:f5: 4a:d1:70:11:49:3c:7d:18:dc:d0:73:86:13:fa:fc: cc:24:3e:b1:fb:55:d6:ed:e7:38:90:04:5c:7b:46: d7:63:10:9c:32:2a:cb:1d:1e:ef:fb:41:98:70:ed: e0:0f:00:d7:27:dd:37:82:66:13:c5:26:0c:1c:79: b4:4d:5f:99:06:54:fd:cd:d4:d7:21:b1:4d:be:6e: 03:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:39:44:BF:E0:2B:9F:F1:D7:DC:14:1D:03:97:31:A2:12:16:F4:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f43dc0e-4d35-37ef-9870-3b2729ab6cb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ce:e9:76:99:a9:d4:36:7b:98:ee:c9:8e:86:d6:bc:c5:91: e2:d0:d7:61:64:7d:b3:d4:6b:c6:36:9f:10:f1:cc:16:23:df: ef:e6:8d:b5:bd:a7:27:77:7e:e6:a9:cb:1d:d5:38:68:d5:a2: 39:5c:4d:e1:c3:9f:ed:e2:c2:e8:a7:98:62:17:d3:ae:5b:f0: 6b:bc:ff:16:de:bd:6c:a4:f1:4e:5c:80:db:30:73:45:3f:e0: 6b:c8:08:68:2a:75:d9:23:8d:ca:fc:11:33:63:be:bd:e4:ac: e2:e4:aa:1e:e9:c8:df:85:c8:e4:4a:9e:f7:60:8e:44:d5:73: f2:74:21:d5:25:f7:2f:de:92:be:8d:a9:a4:9b:fa:60:52:43: e4:f1:27:be:1a:fd:aa:5d:86:c7:87:33:a3:a1:a5:06:52:0a: b7:06:1d:c3:69:8d:43:3f:f7:f6:24:4e:fc:82:05:6d:af:b3: 38:4f:e8:92:8a:9d:e2:de:54:ca:b8:53:64:b6:de:c4:d1:7f: aa:cb:d4:30:b5:21:c4:a2:42:1b:ad:88:52:f8:5d:87:21:12: c3:9a:58:9e:68:3d:d8:94:7f:33:b1:5b:f9:f7:d6:80:c9:91: b7:68:89:3e:9e:34:fe:2c:8e:47:75:f3:89:bb:17:93:35:96: 19:ce:93:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LW+5uYBxd/zXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OTZhMmNkYzUtYWM1MC00Nzc5LTgzYTQtZWExMGNlYmM5NmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkafuHwsDPITqVW3kMc8ELv0PooaLH4rvyKo0 S7S7swOyfaaLAGGBN5n80iA2rhNUz2FyhujWu1E1iZBIfxkH6LPH0PN7iCZkdzdG gwkR48btqe5mGKmEcdIY5q/eRGuIkm3H8UUw12PeolCtxyH0NZv+NdhhlZt+HWRO 0+QnJ2eRXZ9VC1XNPKIV4L65mRV70c96Dgq/8Mhl4y9Kaf0a930yYV4m8/oESudq Gj50FP2KJ/VK0XARSTx9GNzQc4YT+vzMJD6x+1XW7ec4kARce0bXYxCcMirLHR7v +0GYcO3gDwDXJ903gmYTxSYMHHm0TV+ZBlT9zdTXIbFNvm4D+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFI5RL/gK5/x19wUHQOXMaISFvSBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWY0M2RjMGUtNGQzNS0z N2VmLTk4NzAtM2IyNzI5YWI2Y2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXO6XaZqdQ2e5juyY6G1rzFkeLQ12FkfbPUa8Y2nxDxzBYj3+/mjbW9 pyd3fuapyx3VOGjVojlcTeHDn+3iwuinmGIX065b8Gu8/xbevWyk8U5cgNswc0U/ 4GvICGgqddkjjcr8ETNjvr3krOLkqh7pyN+FyORKnvdgjkTVc/J0IdUl9y/ekr6N qaSb+mBSQ+TxJ74a/apdhseHM6OhpQZSCrcGHcNpjUM/9/YkTvyCBW2vszhP6JKK neLeVMq4U2S23sTRf6rL1DC1IcSiQhutiFL4XYchEsOaWJ5oPdiUfzOxW/n31oDJ kbdoiT6eNP4sjkd184m7F5M1lhnOk8I= -----END CERTIFICATE-----Generated at Thu Mar 26 19:29:41 2026 by rpki-client