$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa File: 6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa (raw, json) Hash identifier: CI2XM9RRuVjJNfG6KckPTbx11Z4/2iIy3I2gdb1NNec= Subject key identifier: BA:3D:89:6D:83:4C:28:56:36:30:7C:9C:CF:EA:23:1D:34:A4:EC:0D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0ADFECD317746B4625740 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ad:fe:cd:31:77:46:b4:62:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=97cbc3bb-5e9d-4f27-b3cb-f21d65a664af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4a:c9:55:b2:ac:99:ff:91:fb:43:c1:d8:c8: 92:e8:4d:d9:0f:25:2f:4a:fc:69:32:e0:c6:91:fd: ce:48:6e:7d:a3:26:72:78:86:d7:ee:d7:db:f6:57: a7:43:c2:ce:0d:84:b0:dc:af:ce:e6:56:01:f2:cb: 3f:f1:b0:2c:df:6b:dc:08:38:24:8d:92:95:92:31: d2:ed:95:14:2a:c0:93:12:90:52:7c:94:66:4a:be: a5:20:b4:5a:9b:df:ea:26:fb:55:5e:b0:d5:de:46: 44:53:fb:9b:4f:70:13:82:74:0e:e9:50:b3:33:31: d6:d6:11:64:61:ef:13:17:b3:5a:6a:28:8d:65:5f: 87:f6:f6:4c:b4:b0:65:f6:47:b0:37:c0:3f:8c:d8: 91:0a:e7:aa:8b:9c:6a:33:69:ed:bf:7f:43:66:47: f4:6b:ff:3a:ce:9f:79:e0:8d:6e:56:87:64:ba:c7: cc:fe:65:73:75:53:3a:b7:18:c1:fe:f6:0d:89:7e: b5:28:d5:0a:5a:89:68:c9:98:fc:40:e1:3a:b8:a1: 24:28:f5:bc:9f:f1:6d:f4:17:1e:f5:3f:12:05:37: e1:7a:8c:90:e6:8c:8b:88:bc:82:d0:ae:15:b4:19: 56:6b:c0:4a:aa:cf:6b:91:e6:52:93:e3:43:a0:0b: ba:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3D:89:6D:83:4C:28:56:36:30:7C:9C:CF:EA:23:1D:34:A4:EC:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b9:8d:fd:e8:d8:c3:8c:13:da:ae:31:39:af:ee:be:7a:6c: 9f:01:9a:31:04:5d:93:00:98:55:ac:5c:b3:aa:1d:64:d8:94: 89:0b:eb:bd:e1:2e:32:ae:96:8d:7b:3e:7f:37:39:9a:95:03: 03:3c:35:90:ba:ae:da:7e:2d:13:e8:41:fa:42:37:df:43:e4: 81:66:13:c4:ab:aa:ea:7d:a5:8d:aa:3d:a1:ad:f5:43:0c:08: 12:8e:f5:6a:c5:e2:2f:7f:f0:68:a1:41:41:07:21:71:e6:32: a7:12:9e:38:d9:3c:58:49:b5:de:90:51:1c:72:3e:aa:fe:49: e4:f2:af:32:74:81:55:27:be:9e:c6:b1:72:a8:6a:36:e5:e2: 4c:90:59:1f:dc:66:2e:03:20:f8:ad:28:0a:30:23:26:90:27: 28:ff:b1:8c:86:92:48:4e:b2:97:67:0e:5f:9a:3e:8a:c5:e8: 60:89:42:97:f8:e9:f2:90:19:6e:96:53:bf:60:d9:60:b7:55: 2d:0e:e7:76:8f:12:e4:6a:3e:e0:bc:c6:a9:b3:36:ca:ac:52: 4f:24:4f:5b:76:b2:ed:02:e5:fe:a3:1f:c7:3c:f5:96:ef:ff: 31:1d:9c:be:b3:f8:e6:fd:fd:32:9d:95:88:9f:f7:ac:5f:b6: 60:14:2a:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4K3+zTF3RrRiV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OTdjYmMzYmItNWU5ZC00ZjI3LWIzY2ItZjIxZDY1YTY2NGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykrJVbKsmf+R+0PB2MiS6E3ZDyUvSvxpMuDG kf3OSG59oyZyeIbX7tfb9lenQ8LODYSw3K/O5lYB8ss/8bAs32vcCDgkjZKVkjHS 7ZUUKsCTEpBSfJRmSr6lILRam9/qJvtVXrDV3kZEU/ubT3ATgnQO6VCzMzHW1hFk Ye8TF7NaaiiNZV+H9vZMtLBl9kewN8A/jNiRCueqi5xqM2ntv39DZkf0a/86zp95 4I1uVodkusfM/mVzdVM6txjB/vYNiX61KNUKWoloyZj8QOE6uKEkKPW8n/Ft9Bce 9T8SBTfheoyQ5oyLiLyC0K4VtBlWa8BKqs9rkeZSk+NDoAu67QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLo9iW2DTChWNjB8nM/qIx00pOwNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmRkOWMwZjUtNTg0Ny0z YjhmLTkxNmQtM2U5ZWIyMTkwMDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHm5jf3o2MOME9quMTmv7r56bJ8BmjEEXZMAmFWsXLOqHWTYlIkL673h LjKulo17Pn83OZqVAwM8NZC6rtp+LRPoQfpCN99D5IFmE8Srqup9pY2qPaGt9UMM CBKO9WrF4i9/8GihQUEHIXHmMqcSnjjZPFhJtd6QURxyPqr+SeTyrzJ0gVUnvp7G sXKoajbl4kyQWR/cZi4DIPitKAowIyaQJyj/sYyGkkhOspdnDl+aPorF6GCJQpf4 6fKQGW6WU79g2WC3VS0O53aPEuRqPuC8xqmzNsqsUk8kT1t2su0C5f6jH8c89Zbv /zEdnL6z+Ob9/TKdlYif96xftmAUKlo= -----END CERTIFICATE-----Generated at Thu Mar 26 23:46:28 2026 by rpki-client