$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6cd8b72e-cf4d-37d8-a1d2-507b4027b7df.roa File: 6cd8b72e-cf4d-37d8-a1d2-507b4027b7df.roa (raw, json) Hash identifier: oBk/XY7UsvGwaU6KQMjn6XGRK7ziFQZH2Gqj/Ie7ACA= Subject key identifier: C0:8D:3C:6D:03:F5:81:F1:48:0E:87:4D:25:5B:4B:0E:8B:2B:9C:1E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFBE907FE16A47C94AE840 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6cd8b72e-cf4d-37d8-a1d2-507b4027b7df.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:be:90:7f:e1:6a:47:c9:4a:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=276a5569-8664-454c-b561-c8a24b3740c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1d:f1:f6:37:4d:07:8f:f6:68:76:6f:90:32: 4d:34:5f:7e:1f:5c:b3:81:e4:64:02:c1:de:7a:68: a2:bf:a3:89:43:93:b7:71:16:c9:fe:2b:48:44:97: bd:68:f1:86:06:e8:f6:aa:f7:15:1a:9b:9c:38:3a: fc:07:8f:43:33:c8:dc:df:2c:42:11:de:09:7e:23: db:ca:83:3a:80:e0:84:09:47:19:9e:7b:93:74:95: 43:d7:7c:9b:ea:52:88:5d:0f:70:50:c1:82:ff:fc: 70:78:bb:22:39:56:7e:e0:e7:d9:18:2e:45:0a:a9: d2:50:ac:ce:ad:e9:ca:7f:e9:c3:09:fa:5e:38:f5: b8:31:33:37:80:9b:d1:38:d1:5a:91:bd:d4:2f:04: 12:d5:20:21:38:a0:5b:73:c4:46:02:ce:c9:3e:3c: d4:2a:11:26:34:a8:f9:c5:b9:14:e3:bc:93:88:72: 2a:16:28:77:4b:c6:cf:b2:18:f3:5f:d9:38:86:8a: 37:bb:bc:64:6d:e7:86:7b:7d:8b:c9:b4:db:0f:f1: 27:56:01:12:a6:7c:a2:01:80:a8:f3:a6:16:88:41: a6:e1:c2:ba:4a:21:6b:dc:87:ad:2e:fc:ad:d6:83: 1b:f1:1f:c0:28:e5:00:59:73:c7:aa:b5:b5:1d:37: 92:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8D:3C:6D:03:F5:81:F1:48:0E:87:4D:25:5B:4B:0E:8B:2B:9C:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6cd8b72e-cf4d-37d8-a1d2-507b4027b7df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:f7:0d:06:f8:37:1d:8a:40:96:ef:84:7e:44:31:16:af:35: de:f4:7c:99:eb:2e:da:18:d0:83:ab:8a:c4:01:b7:7f:d9:42: 1a:8a:33:ac:58:22:e9:75:42:a1:d2:57:64:d8:37:13:ad:bc: cd:67:4f:f1:86:82:63:9b:74:1d:41:58:aa:ae:39:67:c4:70: e2:95:e4:2d:5b:b2:97:f8:17:3c:60:96:30:69:bc:04:09:34: c6:f9:7d:70:19:e6:a8:a0:6a:67:9e:9e:f3:b8:2d:fc:3e:73: ae:8d:a1:9d:4d:a2:0d:74:3c:e5:ba:76:b3:4b:5c:7d:0d:1e: ce:0e:9b:a7:5c:43:c0:b0:c5:b4:76:b3:96:6b:c1:47:b5:a5: 11:60:61:42:fc:04:c2:69:ed:aa:74:ae:0e:28:e4:de:9b:7c: 2d:01:da:70:39:4f:44:60:59:d5:09:55:94:bd:42:47:13:33: 0d:39:9b:bf:a5:dc:10:47:33:70:eb:4c:96:ad:4d:f9:51:be: b9:ae:09:b4:32:f3:4a:e5:2c:af:8c:29:14:74:a3:c0:87:75: a6:9f:10:44:18:c5:89:6e:d7:b3:e1:c2:19:8a:5e:cd:08:8f: a1:1f:b3:77:1f:c1:83:3e:ef:53:5e:7e:c9:f1:93:8a:30:b9: f0:f8:8a:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k376Qf+FqR8lK6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Mjc2YTU1NjktODY2NC00NTRjLWI1NjEtYzhhMjRiMzc0MGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB3x9jdNB4/2aHZvkDJNNF9+H1yzgeRkAsHe emiiv6OJQ5O3cRbJ/itIRJe9aPGGBuj2qvcVGpucODr8B49DM8jc3yxCEd4JfiPb yoM6gOCECUcZnnuTdJVD13yb6lKIXQ9wUMGC//xweLsiOVZ+4OfZGC5FCqnSUKzO renKf+nDCfpeOPW4MTM3gJvRONFakb3ULwQS1SAhOKBbc8RGAs7JPjzUKhEmNKj5 xbkU47yTiHIqFih3S8bPshjzX9k4hoo3u7xkbeeGe32LybTbD/EnVgESpnyiAYCo 86YWiEGm4cK6SiFr3IetLvyt1oMb8R/AKOUAWXPHqrW1HTeS4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCNPG0D9YHxSA6HTSVbSw6LK5weMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmNkOGI3MmUtY2Y0ZC0z N2Q4LWExZDItNTA3YjQwMjdiN2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANb3DQb4Nx2KQJbvhH5EMRavNd70fJnrLtoY0IOrisQBt3/ZQhqKM6xY Iul1QqHSV2TYNxOtvM1nT/GGgmObdB1BWKquOWfEcOKV5C1bspf4FzxgljBpvAQJ NMb5fXAZ5qigameenvO4Lfw+c66NoZ1Nog10POW6drNLXH0NHs4Om6dcQ8CwxbR2 s5ZrwUe1pRFgYUL8BMJp7ap0rg4o5N6bfC0B2nA5T0RgWdUJVZS9QkcTMw05m7+l 3BBHM3DrTJatTflRvrmuCbQy80rlLK+MKRR0o8CHdaafEEQYxYlu17PhwhmKXs0I j6Efs3cfwYM+71Nefsnxk4owufD4iiA= -----END CERTIFICATE-----Generated at Thu Mar 26 07:35:10 2026 by rpki-client