$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/612d23fb-4960-3992-9900-1108e1d14c07.roa File: 612d23fb-4960-3992-9900-1108e1d14c07.roa (raw, json) Hash identifier: Yr8Br4n5Bctm0XR///th8mCeFyPGEB/HS8uLR5is0J8= Subject key identifier: 7F:20:69:78:AF:1D:14:8F:40:15:C4:BB:CE:92:9B:6D:9E:C4:CF:84 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B15C362C6080065E8280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/612d23fb-4960-3992-9900-1108e1d14c07.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b1:5c:36:2c:60:80:06:5e:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=dc67dc4b-a325-4ced-9150-5472f7a3853b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:64:56:99:ba:73:fb:ab:6a:4e:52:aa:9b:cc: b2:cc:a4:2a:f7:e3:2a:b2:05:7b:dc:16:2a:a5:6a: 4b:97:68:9c:2e:78:42:52:59:3a:a1:6c:87:8d:6e: 6f:60:1c:99:b9:72:70:ce:62:3c:bc:f4:c4:e7:97: 35:2f:b2:a9:b0:7e:2c:01:42:a2:4e:fb:72:af:ee: f2:17:84:63:7a:19:32:60:61:12:ec:77:75:3c:45: 06:7c:b3:25:f6:89:f7:2f:2b:b4:d1:12:32:d9:82: b9:50:b4:f6:19:43:5b:74:4c:8e:06:24:e5:58:52: 32:6c:a7:dd:0c:a2:27:35:11:83:87:87:5e:52:77: 8f:15:b0:03:5b:13:cd:d2:9b:94:9c:39:5f:da:e2: 15:dc:99:df:15:dc:cc:3a:c0:39:61:25:d4:81:39: 3d:33:f8:2b:68:64:0f:3b:61:d1:90:bb:10:33:47: d6:23:5f:62:e4:66:9d:95:7f:7d:ef:6a:18:09:2c: 45:fa:b5:5f:e2:98:05:ad:ea:e7:26:8b:5c:ed:e5: 88:4d:b9:02:ef:6b:f9:51:f7:14:d4:4e:e2:be:31: 4a:fc:db:5e:30:83:aa:63:72:c4:65:fd:f6:ea:0f: 9b:62:be:1a:c3:74:fb:41:14:cb:6b:38:57:1d:b7: 07:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:20:69:78:AF:1D:14:8F:40:15:C4:BB:CE:92:9B:6D:9E:C4:CF:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/612d23fb-4960-3992-9900-1108e1d14c07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:6f:c5:fa:3a:21:4e:39:29:c0:90:e7:0d:36:57:7b:f5:41: 05:25:67:c3:26:90:e8:58:41:50:0a:83:2a:b0:83:d6:7e:ab: c4:62:23:df:21:76:3f:62:e1:78:b8:7c:f0:8d:bb:bb:07:ce: 9f:13:f6:6e:56:d9:5f:c2:32:fc:de:f3:c0:7f:24:06:ff:75: 2c:12:37:20:48:74:7e:8a:0c:70:27:f6:1c:f7:28:81:7d:a2: 25:f2:81:19:ab:05:94:31:83:b0:60:5c:c4:37:5b:09:8c:7b: 4e:39:23:c3:08:99:e9:fd:17:33:84:a5:95:a2:4d:bd:d7:63: 79:1d:2c:b5:b5:fa:0a:44:b7:6d:3a:48:fa:30:57:f3:8a:f9: 97:0b:20:f9:a2:e0:d1:08:c0:35:22:2c:f2:84:b4:f0:77:ff: 49:23:d9:ef:fe:19:e6:42:43:17:16:a2:7e:23:14:46:b3:0b: 8e:c7:16:d8:1b:b5:b1:fe:c0:cf:d5:e4:b6:56:3b:41:64:0a: 71:8f:84:bc:f3:7e:58:dd:20:ff:c6:67:c2:eb:38:17:78:c8: da:c5:58:1b:ef:f0:ba:59:e7:80:d9:9f:47:bd:cf:56:3e:5e: 90:3d:ae:ba:5a:ff:9c:13:94:d1:25:60:e5:15:b0:55:0a:1a: a4:71:07:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LFcNixggAZegoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGM2N2RjNGItYTMyNS00Y2VkLTkxNTAtNTQ3MmY3YTM4NTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmRWmbpz+6tqTlKqm8yyzKQq9+MqsgV73BYq pWpLl2icLnhCUlk6oWyHjW5vYByZuXJwzmI8vPTE55c1L7KpsH4sAUKiTvtyr+7y F4RjehkyYGES7Hd1PEUGfLMl9on3Lyu00RIy2YK5ULT2GUNbdEyOBiTlWFIybKfd DKInNRGDh4deUnePFbADWxPN0puUnDlf2uIV3JnfFdzMOsA5YSXUgTk9M/graGQP O2HRkLsQM0fWI19i5GadlX9972oYCSxF+rVf4pgFrernJotc7eWITbkC72v5UfcU 1E7ivjFK/NteMIOqY3LEZf326g+bYr4aw3T7QRTLazhXHbcH+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8gaXivHRSPQBXEu86Sm22exM+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjEyZDIzZmItNDk2MC0z OTkyLTk5MDAtMTEwOGUxZDE0YzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVvxfo6IU45KcCQ5w02V3v1QQUlZ8MmkOhYQVAKgyqwg9Z+q8RiI98h dj9i4Xi4fPCNu7sHzp8T9m5W2V/CMvze88B/JAb/dSwSNyBIdH6KDHAn9hz3KIF9 oiXygRmrBZQxg7BgXMQ3WwmMe045I8MImen9FzOEpZWiTb3XY3kdLLW1+gpEt206 SPowV/OK+ZcLIPmi4NEIwDUiLPKEtPB3/0kj2e/+GeZCQxcWon4jFEazC47HFtgb tbH+wM/V5LZWO0FkCnGPhLzzfljdIP/GZ8LrOBd4yNrFWBvv8LpZ54DZn0e9z1Y+ XpA9rrpa/5wTlNElYOUVsFUKGqRxB7c= -----END CERTIFICATE-----Generated at Thu Mar 26 19:47:18 2026 by rpki-client