$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/621e8f01-d538-37be-9158-db873dc19707.roa File: 621e8f01-d538-37be-9158-db873dc19707.roa (raw, json) Hash identifier: 0hD6271tyOHKQ9AlB+0EGTHnQ5r+02Gksebk3hkWsPw= Subject key identifier: 1E:58:A1:1F:AF:C7:AA:C1:8E:1F:76:22:0C:AD:EC:B4:B3:6C:E8:61 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E05B2D3BFE4230B0139C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/621e8f01-d538-37be-9158-db873dc19707.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 67.54.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:5b:2d:3b:fe:42:30:b0:13:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6aae0bda-6075-40f0-ad8e-6847e23d782a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b0:c8:99:8b:f2:8f:69:57:21:af:02:c7:81: 42:3d:3d:cf:c8:a7:c5:5a:3e:ec:dc:58:e7:76:fc: db:48:f3:bd:e8:be:5e:3d:0b:54:14:76:4b:c9:6d: c2:54:ce:ba:8b:78:76:32:ef:2d:e3:d1:1d:99:93: b7:c3:e6:77:18:da:64:c7:dc:2e:49:08:79:c7:ff: 17:8f:ac:d8:02:95:62:25:ef:f8:19:e1:58:c0:82: 63:6e:43:46:b9:76:e5:95:b0:0a:35:d6:b5:ea:be: 5a:60:aa:11:5d:63:9a:5d:58:a7:83:dd:cd:74:1f: 80:9e:65:81:21:5b:43:4b:cc:f4:fc:eb:ee:48:74: 17:b7:c5:06:bd:cb:47:9a:21:e1:a5:5b:a9:7e:71: c1:11:82:ca:46:e7:1c:72:eb:19:ee:d8:96:c8:bc: 9e:dd:17:53:ef:74:21:29:72:b9:0e:9d:af:98:c1: f9:98:9b:1d:8d:42:d7:73:cd:ba:d1:b2:09:7e:73: 26:3a:91:7c:e2:3f:21:3c:91:44:f3:d9:3c:d3:f1: 88:66:f7:8e:0c:f8:d4:e3:41:8c:e9:04:1e:dc:df: 78:fc:ba:7a:04:55:47:9c:67:18:49:be:f1:c2:a6: 77:50:4c:0c:f9:4b:e7:84:1b:02:99:f7:b5:83:84: 2c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:58:A1:1F:AF:C7:AA:C1:8E:1F:76:22:0C:AD:EC:B4:B3:6C:E8:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/621e8f01-d538-37be-9158-db873dc19707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:20:33:fc:df:ce:4c:72:fa:71:39:25:dd:f3:97:75:0a:cf: ba:76:42:21:10:bf:02:b3:1d:32:64:d4:f3:07:2d:cf:09:31: 42:fd:2c:8a:cd:26:01:86:f5:6e:16:69:15:46:13:1b:9e:4f: 62:1e:e3:2a:6a:e8:1b:67:05:4c:58:ae:64:d6:85:dd:5e:fd: e1:37:c6:84:f7:e9:66:0c:25:47:03:d4:31:fb:fc:2e:53:03: 4b:a9:41:42:9b:09:bf:91:07:ec:0e:8a:06:ee:d8:72:6d:52: 64:9c:a2:7d:bd:21:d4:e1:14:5b:de:be:4a:62:bf:0f:b7:ba: 91:c7:d2:09:b8:3f:f0:a0:d6:b6:fd:e5:3e:87:ed:06:eb:17: e0:1f:0d:6e:d8:93:5d:50:0e:37:83:bb:21:12:ad:58:0c:c1: b8:3d:46:0d:ca:3b:c2:36:a5:be:8c:65:01:ad:bc:52:85:7f: d6:f5:61:20:0a:f1:f7:04:67:de:27:93:55:23:0b:66:a0:30: 50:42:70:f2:54:4f:ad:ca:8a:f3:a5:b3:76:c9:44:46:e7:ae: 27:1f:33:04:ec:b2:7c:54:5e:38:14:d2:3f:e1:2f:59:72:01: 65:59:bf:0a:98:8a:1c:15:ea:6a:11:62:17:18:c8:4b:25:0e: 4e:25:4b:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4FstO/5CMLATnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NmFhZTBiZGEtNjA3NS00MGYwLWFkOGUtNjg0N2UyM2Q3ODJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLDImYvyj2lXIa8Cx4FCPT3PyKfFWj7s3Fjn dvzbSPO96L5ePQtUFHZLyW3CVM66i3h2Mu8t49EdmZO3w+Z3GNpkx9wuSQh5x/8X j6zYApViJe/4GeFYwIJjbkNGuXbllbAKNda16r5aYKoRXWOaXVing93NdB+AnmWB IVtDS8z0/OvuSHQXt8UGvctHmiHhpVupfnHBEYLKRucccusZ7tiWyLye3RdT73Qh KXK5Dp2vmMH5mJsdjULXc8260bIJfnMmOpF84j8hPJFE89k80/GIZveODPjU40GM 6QQe3N94/Lp6BFVHnGcYSb7xwqZ3UEwM+UvnhBsCmfe1g4QsKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5YoR+vx6rBjh92Igyt7LSzbOhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjIxZThmMDEtZDUzOC0z N2JlLTkxNTgtZGI4NzNkYzE5NzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzb+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQgM/zfzkxy+nE5Jd3zl3UKz7p2QiEQvwKzHTJk1PMHLc8JMUL9LIrN JgGG9W4WaRVGExueT2Ie4ypq6BtnBUxYrmTWhd1e/eE3xoT36WYMJUcD1DH7/C5T A0upQUKbCb+RB+wOigbu2HJtUmScon29IdThFFvevkpivw+3upHH0gm4P/Cg1rb9 5T6H7QbrF+AfDW7Yk11QDjeDuyESrVgMwbg9Rg3KO8I2pb6MZQGtvFKFf9b1YSAK 8fcEZ94nk1UjC2agMFBCcPJUT63KivOls3bJREbnricfMwTssnxUXjgU0j/hL1ly AWVZvwqYihwV6moRYhcYyEslDk4lSww= -----END CERTIFICATE-----Generated at Thu Mar 26 19:10:21 2026 by rpki-client