$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6f6bb8af-9b55-38d0-8c3d-15e6204cb73b.roa File: 6f6bb8af-9b55-38d0-8c3d-15e6204cb73b.roa (raw, json) Hash identifier: R2+409+FfHCZjNcumQgPH02T2uG8eV8kUJJXkxJT8ug= Subject key identifier: 4D:1D:65:6F:95:17:1D:7B:AE:0C:06:79:EE:09:95:91:3E:28:EF:EF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B9C70F517971B8CE5080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6f6bb8af-9b55-38d0-8c3d-15e6204cb73b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b9:c7:0f:51:79:71:b8:ce:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=02b04622-0c95-4bc0-bd7e-39a394a9ce72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4a:98:40:b1:5d:8d:3e:54:c7:0c:61:68:ac: ed:92:d8:4f:5c:91:7f:11:92:d6:b0:e4:0f:c7:5d: 46:da:12:a1:0a:64:b0:57:69:8e:00:87:f4:89:29: 0b:a4:20:23:b9:5f:d7:93:d0:3a:ee:b5:7c:87:6b: 93:4e:ac:c5:5a:0d:ae:a3:7e:6d:02:d6:34:f3:f9: 13:4d:f1:1c:fb:ab:a3:d7:86:91:fe:5e:8a:28:fd: 06:43:f8:9f:28:4d:a5:04:b5:3f:8f:10:31:a9:d2: 6f:74:75:65:41:bc:65:ed:b6:fc:dc:c1:e6:fa:d8: 34:7c:36:5a:cf:5b:a6:90:1d:3d:5f:ce:66:c5:7c: 96:9e:7f:ee:67:b5:a8:8e:54:f5:35:22:1c:b3:a7: e3:f4:fc:4a:8b:3f:ab:6f:c2:c1:2c:8e:5b:77:66: 6f:5a:3e:73:dd:16:f6:64:67:a1:4d:58:0d:6f:4b: 4f:0d:58:5e:a9:a1:82:b6:bc:5f:1b:29:b5:df:d1: e6:85:58:b5:b5:f1:b4:25:dd:9d:2a:17:df:f5:aa: 04:19:81:bd:b0:cf:42:88:61:cb:cc:1b:0a:21:f5: 5d:da:99:23:31:ed:04:92:b2:59:6d:d9:cc:34:f8: e7:4c:c4:3e:1b:b1:11:a8:6c:97:68:d4:dc:8d:fd: c5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1D:65:6F:95:17:1D:7B:AE:0C:06:79:EE:09:95:91:3E:28:EF:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6f6bb8af-9b55-38d0-8c3d-15e6204cb73b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:57:e5:79:1a:f5:e1:7f:b7:65:b6:36:1a:38:57:35:ac:44: 74:9d:a1:37:d5:0e:b2:1e:e2:2d:d1:dc:22:6b:41:da:ee:20: 1f:fc:f2:2f:ad:1e:4a:d6:75:73:5e:cb:c6:6b:d5:3f:7c:12: c8:3c:c7:04:57:dd:1d:c2:e7:be:8d:94:db:e6:a0:36:eb:43: dc:f2:73:fb:40:f1:49:3f:f2:92:c1:d5:1b:5d:d6:35:d1:f9: 24:dc:ca:fa:4d:db:e5:49:9c:65:96:ca:db:91:87:03:f4:d8: 70:55:76:2b:bc:fb:a7:62:e4:2d:ba:6e:80:8d:98:4e:04:83: 74:28:65:46:1e:a5:c8:9e:f0:7e:94:90:a4:f5:47:01:76:a7: 1b:6c:f8:42:ec:52:aa:8c:06:53:fb:db:d6:df:7d:72:32:fb: eb:09:76:ed:73:e1:d5:68:9e:5c:e7:58:ac:29:91:c7:df:1e: 69:1d:92:6a:14:0a:bc:2c:3d:95:08:2c:76:8d:04:c3:d0:a7: a6:a4:ce:37:e3:37:67:e6:6e:ef:ed:f6:70:06:c1:2c:04:ad: 56:c0:e5:69:03:4c:89:e9:33:ca:76:45:3d:97:fc:3f:26:c4: 08:3e:2f:71:30:44:de:22:b4:5a:40:6f:c3:c5:e9:42:2e:fd: a5:55:f2:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LnHD1F5cbjOUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDJiMDQ2MjItMGM5NS00YmMwLWJkN2UtMzlhMzk0YTljZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkqYQLFdjT5UxwxhaKztkthPXJF/EZLWsOQP x11G2hKhCmSwV2mOAIf0iSkLpCAjuV/Xk9A67rV8h2uTTqzFWg2uo35tAtY08/kT TfEc+6uj14aR/l6KKP0GQ/ifKE2lBLU/jxAxqdJvdHVlQbxl7bb83MHm+tg0fDZa z1umkB09X85mxXyWnn/uZ7WojlT1NSIcs6fj9PxKiz+rb8LBLI5bd2ZvWj5z3Rb2 ZGehTVgNb0tPDVheqaGCtrxfGym139HmhVi1tfG0Jd2dKhff9aoEGYG9sM9CiGHL zBsKIfVd2pkjMe0EkrJZbdnMNPjnTMQ+G7ERqGyXaNTcjf3FswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0dZW+VFx17rgwGee4JlZE+KO/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmY2YmI4YWYtOWI1NS0z OGQwLThjM2QtMTVlNjIwNGNiNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJX5Xka9eF/t2W2Nho4VzWsRHSdoTfVDrIe4i3R3CJrQdruIB/88i+t HkrWdXNey8Zr1T98Esg8xwRX3R3C576NlNvmoDbrQ9zyc/tA8Uk/8pLB1Rtd1jXR +STcyvpN2+VJnGWWytuRhwP02HBVdiu8+6di5C26boCNmE4Eg3QoZUYepcie8H6U kKT1RwF2pxts+ELsUqqMBlP729bffXIy++sJdu1z4dVonlznWKwpkcffHmkdkmoU CrwsPZUILHaNBMPQp6akzjfjN2fmbu/t9nAGwSwErVbA5WkDTInpM8p2RT2X/D8m xAg+L3EwRN4itFpAb8PF6UIu/aVV8k0= -----END CERTIFICATE-----Generated at Thu Mar 26 17:11:40 2026 by rpki-client