$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/655d97c6-6897-3bd9-8494-fe2ce108f666.roa File: 655d97c6-6897-3bd9-8494-fe2ce108f666.roa (raw, json) Hash identifier: Pbo5E5nif5YOoNzjnDZNckpL4TuCCJ8IHOfGtRamgSk= Subject key identifier: 80:FF:5F:D6:26:06:A1:FE:0D:F6:F9:0C:47:00:14:4B:B7:3E:22:8E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFA93E1DF28227700A5180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/655d97c6-6897-3bd9-8494-fe2ce108f666.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 40306 IP address blocks: 75.104.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:a9:3e:1d:f2:82:27:70:0a:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5125cb92-f96c-4088-b10f-15058ac35ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c2:87:e6:b6:f3:a1:99:33:fb:1a:34:84:e5: d7:77:0d:38:5b:20:71:ca:15:d2:34:a3:e3:b0:72: 69:57:2e:de:a0:c4:34:b2:c2:f0:b1:ce:97:86:f6: da:e8:24:3f:3b:62:c3:64:4f:05:9a:02:50:ae:67: 27:b6:5a:01:3b:96:21:94:31:c2:10:cd:49:6b:e8: 7e:6f:8c:a7:af:4f:da:f8:4e:0a:f3:9d:d3:0c:6e: 9b:96:6e:83:d5:07:57:10:cf:ae:56:61:58:7a:31: a2:f5:df:13:d8:8d:aa:8a:ad:33:97:21:4f:a9:1b: 85:51:bd:50:72:10:dc:b7:9f:da:26:e3:73:ac:1f: c4:f4:2e:0f:5f:52:11:ef:63:34:56:13:9d:36:42: ee:4e:f0:cd:7e:79:62:37:9d:b4:49:84:92:86:f0: 74:01:16:f2:3f:47:3e:8f:79:39:ae:46:88:b9:03: 7c:6b:2a:88:29:f6:63:8f:42:e7:d9:30:60:b8:57: d5:02:10:63:ce:23:7a:cd:dd:cd:ab:62:5d:ba:af: 95:86:91:ca:a6:f6:be:7f:6f:c3:03:3d:a9:51:c0: b6:d6:5b:50:16:43:c8:12:de:25:69:91:24:3c:d2: 1d:d5:bd:ac:c5:ba:e9:ae:39:f1:44:e4:87:91:7f: f4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FF:5F:D6:26:06:A1:FE:0D:F6:F9:0C:47:00:14:4B:B7:3E:22:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/655d97c6-6897-3bd9-8494-fe2ce108f666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.104.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:a4:66:55:eb:a1:7f:b9:fc:64:e6:fb:83:dc:7b:73:8b:02: e9:4f:00:00:a8:90:26:38:1b:5a:ef:b2:4b:05:e6:58:26:86: 7c:cd:e0:29:6d:8a:4e:ca:30:60:99:d7:07:59:9e:da:2d:f0: 0e:81:73:76:02:b3:d9:5d:43:66:1a:51:eb:ef:ed:6d:66:88: 72:0c:35:72:50:fd:45:1c:0f:21:be:4b:09:1c:54:f4:0f:05: 9c:da:fd:e3:8f:e1:47:47:c4:24:4a:1d:0e:c2:e9:e4:b8:35: f4:fa:40:34:0f:00:d1:07:44:03:a7:ca:16:6c:3c:d9:51:c2: 1a:fc:18:13:89:ef:23:b1:c4:37:e9:86:93:c8:8b:19:73:03: a0:6a:cb:98:84:fa:02:60:d6:50:a9:9b:de:a0:d5:dc:92:e6: 95:98:8a:e4:41:5d:9f:cf:f6:b1:5d:87:9c:3c:53:1f:b2:2b: 94:26:4b:1b:fe:85:af:48:09:50:3d:7d:4b:b2:8a:b2:35:2d: 5b:66:92:9e:1a:2b:66:12:43:c5:4a:6a:95:06:b1:d6:5d:72: 3b:ae:6a:8b:cb:0f:84:55:6b:c9:07:5d:5d:e7:cf:32:9d:22: 74:75:ae:d3:2e:09:5a:d9:d9:a0:7d:5b:3a:1a:01:5d:46:46: 1b:69:49:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k36k+HfKCJ3AKUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTEyNWNiOTItZjk2Yy00MDg4LWIxMGYtMTUwNThhYzM1ZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcKH5rbzoZkz+xo0hOXXdw04WyBxyhXSNKPj sHJpVy7eoMQ0ssLwsc6Xhvba6CQ/O2LDZE8FmgJQrmcntloBO5YhlDHCEM1Ja+h+ b4ynr0/a+E4K853TDG6blm6D1QdXEM+uVmFYejGi9d8T2I2qiq0zlyFPqRuFUb1Q chDct5/aJuNzrB/E9C4PX1IR72M0VhOdNkLuTvDNfnliN520SYSShvB0ARbyP0c+ j3k5rkaIuQN8ayqIKfZjj0Ln2TBguFfVAhBjziN6zd3Nq2Jduq+VhpHKpva+f2/D Az2pUcC21ltQFkPIEt4laZEkPNId1b2sxbrprjnxROSHkX/0UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFID/X9YmBqH+Dfb5DEcAFEu3PiKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjU1ZDk3YzYtNjg5Ny0z YmQ5LTg0OTQtZmUyY2UxMDhmNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2hfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2kZlXroX+5/GTm+4Pce3OLAulPAACokCY4G1rvsksF5lgmhnzN4Clt ik7KMGCZ1wdZntot8A6Bc3YCs9ldQ2YaUevv7W1miHIMNXJQ/UUcDyG+SwkcVPQP BZza/eOP4UdHxCRKHQ7C6eS4NfT6QDQPANEHRAOnyhZsPNlRwhr8GBOJ7yOxxDfp hpPIixlzA6Bqy5iE+gJg1lCpm96g1dyS5pWYiuRBXZ/P9rFdh5w8Ux+yK5QmSxv+ ha9ICVA9fUuyirI1LVtmkp4aK2YSQ8VKapUGsdZdcjuuaovLD4RVa8kHXV3nzzKd InR1rtMuCVrZ2aB9WzoaAV1GRhtpSes= -----END CERTIFICATE-----Generated at Thu Mar 26 16:32:12 2026 by rpki-client