$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/691bed57-da0a-3baf-ad9d-45ddf8c78439.roa File: 691bed57-da0a-3baf-ad9d-45ddf8c78439.roa (raw, json) Hash identifier: Bisa1tZG2fkARdu6xzpE9I6zNfm1rbdSO77K7Ut6jIo= Subject key identifier: CC:E6:6C:C9:6B:79:39:F6:56:08:C3:E0:3E:1F:DA:AE:94:6C:56:59 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFBEA2616EAC4243455E40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/691bed57-da0a-3baf-ad9d-45ddf8c78439.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:be:a2:61:6e:ac:42:43:45:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=955935f5-8d94-46e3-b397-225556947838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:33:32:f2:d2:7d:cb:a8:a7:1c:0c:3b:82:fd: 61:db:4e:83:07:75:f6:8f:8a:fb:8c:ad:07:11:e4: e6:dc:27:47:57:8f:e5:14:03:ca:1e:5b:92:6b:af: b3:4e:e8:80:93:af:fa:d8:62:14:03:9b:ee:19:06: 14:4c:91:c2:fb:85:00:9a:26:99:e7:69:a3:67:0d: 79:60:56:55:af:41:b1:cf:67:56:39:ed:45:da:e3: 4e:a1:8d:b9:d0:0f:ee:e7:01:e2:7b:ad:7c:58:d5: cc:d5:d2:bf:89:5a:79:cc:76:f9:41:31:36:ac:4f: 69:d3:6f:0b:56:8a:f6:57:18:75:c8:e6:d7:0d:f6: e4:65:68:64:04:0e:c8:67:ac:92:c1:b5:54:53:75: f7:1a:86:c6:d6:8a:55:93:9f:c0:8c:42:c2:81:c2: 42:d0:c8:2d:bc:7e:b4:97:fe:5a:38:79:5c:2a:a0: 89:df:ce:2a:1a:ad:67:27:59:59:52:80:98:d2:96: 8e:e7:f4:9d:9f:0e:32:15:45:ea:d7:14:1b:f7:36: 8e:4b:01:54:40:73:56:09:3d:73:8a:fc:94:54:d2: 06:de:3e:b5:87:c5:aa:d8:03:66:77:23:ab:0d:c2: e4:52:d7:2a:3d:f9:ba:c9:30:bb:12:d6:55:30:58: 07:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E6:6C:C9:6B:79:39:F6:56:08:C3:E0:3E:1F:DA:AE:94:6C:56:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/691bed57-da0a-3baf-ad9d-45ddf8c78439.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:c9:64:d2:cd:5c:47:ff:e0:f9:12:34:c2:3c:d8:d3:88:21: 88:0d:f9:e9:7d:ac:df:bf:56:c8:e4:20:de:6c:8b:6b:3f:f2: ba:44:33:7a:92:78:f4:42:4a:4f:bd:72:54:75:a9:1f:a9:2e: be:f1:97:74:32:35:ba:55:76:3a:28:f8:60:ad:be:75:05:ca: fc:fa:1e:31:76:07:03:c1:a4:e6:a6:04:c1:d9:6d:ae:6d:3d: bb:35:ac:4b:6c:49:50:aa:4b:93:5f:fd:e3:a2:ad:2b:63:d5: 2a:6c:31:d2:3b:19:8e:3a:5b:17:22:c9:fe:f0:d0:0e:64:8c: bf:38:03:99:1b:60:1e:7e:d2:59:58:88:c2:35:7d:8e:38:0c: 75:47:62:af:e8:df:4b:9d:71:95:b3:dc:99:75:bc:6b:8d:16: ff:a3:09:27:72:bd:44:4f:11:9a:32:fb:6c:0f:1e:5d:81:53: a5:32:76:b0:cb:e6:99:72:12:af:6e:f6:6f:a7:45:d2:94:24: 80:b1:b5:6f:dd:65:06:fb:e2:57:66:14:1a:27:b9:11:89:8d: 73:b2:39:93:dc:ef:00:70:88:61:9d:43:85:5b:96:c7:1d:b8: e5:94:cb:36:ea:2b:bf:60:84:94:02:ce:4c:be:74:cc:a1:4b: e8:26:db:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k376iYW6sQkNFXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OTU1OTM1ZjUtOGQ5NC00NmUzLWIzOTctMjI1NTU2OTQ3ODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDMy8tJ9y6inHAw7gv1h206DB3X2j4r7jK0H EeTm3CdHV4/lFAPKHluSa6+zTuiAk6/62GIUA5vuGQYUTJHC+4UAmiaZ52mjZw15 YFZVr0Gxz2dWOe1F2uNOoY250A/u5wHie618WNXM1dK/iVp5zHb5QTE2rE9p028L Vor2Vxh1yObXDfbkZWhkBA7IZ6ySwbVUU3X3GobG1opVk5/AjELCgcJC0MgtvH60 l/5aOHlcKqCJ384qGq1nJ1lZUoCY0paO5/Sdnw4yFUXq1xQb9zaOSwFUQHNWCT1z ivyUVNIG3j61h8Wq2ANmdyOrDcLkUtcqPfm6yTC7EtZVMFgHeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzmbMlreTn2VgjD4D4f2q6UbFZZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjkxYmVkNTctZGEwYS0z YmFmLWFkOWQtNDVkZGY4Yzc4NDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTJZNLNXEf/4PkSNMI82NOIIYgN+el9rN+/VsjkIN5si2s/8rpEM3qS ePRCSk+9clR1qR+pLr7xl3QyNbpVdjoo+GCtvnUFyvz6HjF2BwPBpOamBMHZba5t Pbs1rEtsSVCqS5Nf/eOirStj1SpsMdI7GY46Wxciyf7w0A5kjL84A5kbYB5+0llY iMI1fY44DHVHYq/o30udcZWz3Jl1vGuNFv+jCSdyvURPEZoy+2wPHl2BU6UydrDL 5plyEq9u9m+nRdKUJICxtW/dZQb74ldmFBonuRGJjXOyOZPc7wBwiGGdQ4Vblscd uOWUyzbqK79ghJQCzky+dMyhS+gm2zQ= -----END CERTIFICATE-----Generated at Thu Mar 26 22:12:05 2026 by rpki-client