$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/709022ba-bce3-332b-b27b-e9977a14f24c.roa File: 709022ba-bce3-332b-b27b-e9977a14f24c.roa (raw, json) Hash identifier: QtvyQAqqUhbK8YbmN8k0EnejY3bF+K/lZcDosfGWXk8= Subject key identifier: 96:B0:26:3E:F1:86:94:EF:50:B0:B7:70:48:77:72:78:25:F3:89:71 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFF712772E9441D2F3A7E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/709022ba-bce3-332b-b27b-e9977a14f24c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:f7:12:77:2e:94:41:d2:f3:a7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=dcfdc4ac-88ab-4aba-8896-e2bb80bb8de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:51:68:56:c7:8c:e1:fd:ba:9c:f6:22:af:dc: 3c:f9:58:a6:35:4d:81:e0:d2:57:73:44:40:98:7b: c4:b1:4b:70:9c:b3:f8:70:d5:2d:cb:a4:5d:18:68: 31:ac:9b:b3:76:bc:64:4b:be:d7:88:f1:88:7d:42: df:d1:e4:95:b3:52:a7:b4:f6:4f:ac:ea:2f:1a:7c: ef:4d:f5:b0:22:91:4a:58:fa:31:6f:3a:2e:97:ec: dd:87:46:24:86:dd:bb:44:c8:ac:ce:69:85:3a:16: f9:92:71:53:76:1c:51:16:cf:14:30:4b:59:cb:cb: d0:1e:df:32:78:85:47:05:68:9b:5e:9c:20:74:50: 72:9e:da:91:84:9e:4f:41:a6:f8:ed:4d:d5:cc:ac: 4d:31:e8:62:64:5c:1a:af:d8:6a:41:b3:d1:78:37: 5d:53:89:48:1c:3f:d2:12:5f:b6:72:4a:0c:51:3c: fc:3d:57:78:39:4a:d9:3e:03:f9:cd:50:d3:05:27: e7:b2:94:83:2c:76:c5:89:51:68:ae:0b:b0:c3:41: 92:a4:24:10:d1:bd:ac:75:06:51:99:9c:1c:8b:1a: 22:7a:3f:28:10:bc:95:42:07:c9:9a:84:2b:50:44: d3:80:01:ee:b7:bb:0a:64:3f:8a:20:c0:a5:7a:32: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B0:26:3E:F1:86:94:EF:50:B0:B7:70:48:77:72:78:25:F3:89:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/709022ba-bce3-332b-b27b-e9977a14f24c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:48:ba:3f:e2:3a:48:3b:8a:cf:dd:cc:5a:75:81:da:03:32: 34:3d:14:91:0e:6d:a1:14:58:49:d0:36:49:cd:9b:a8:d3:d0: 0b:aa:45:a9:61:b4:9a:47:f0:ae:84:02:d9:63:93:0a:fe:73: be:9d:33:12:15:ba:2f:00:3e:61:5a:fd:1c:5e:e7:d0:85:b7: a2:8c:56:86:f7:bb:d1:a1:09:f2:7c:6d:a4:02:47:b2:71:b7: 7f:12:c4:c4:4c:e1:bb:c4:6d:fc:96:a6:8b:d9:4d:d6:b0:0e: 13:e6:fe:36:36:e8:f7:ef:c9:71:c4:40:a1:12:61:3e:9b:8b: 9e:ed:75:a9:03:e9:71:54:0a:2e:76:e3:34:21:28:cd:f6:b1: 1a:77:48:d6:64:aa:8e:a6:2d:58:a7:8a:0b:f0:35:df:44:24: 96:37:c2:6d:56:4d:e7:c4:cf:c0:1d:ea:c6:74:42:8c:71:f9: 34:5e:e6:7f:7d:f7:11:eb:01:dd:8e:03:05:31:f4:0f:18:0f: 42:23:7a:fd:35:e5:e2:e0:77:26:20:90:0d:50:80:c6:95:fb: d3:eb:1d:95:3f:c1:00:0a:c1:2c:7a:32:d7:98:be:a3:54:1c: f9:3b:60:8f:3f:de:94:9a:0b:ab:13:94:a9:09:a3:99:f1:da: 47:ad:a9:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/cSdy6UQdLzp+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGNmZGM0YWMtODhhYi00YWJhLTg4OTYtZTJiYjgwYmI4ZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVFoVseM4f26nPYir9w8+VimNU2B4NJXc0RA mHvEsUtwnLP4cNUty6RdGGgxrJuzdrxkS77XiPGIfULf0eSVs1KntPZPrOovGnzv TfWwIpFKWPoxbzoul+zdh0Ykht27RMiszmmFOhb5knFTdhxRFs8UMEtZy8vQHt8y eIVHBWibXpwgdFByntqRhJ5PQab47U3VzKxNMehiZFwar9hqQbPReDddU4lIHD/S El+2ckoMUTz8PVd4OUrZPgP5zVDTBSfnspSDLHbFiVForguww0GSpCQQ0b2sdQZR mZwcixoiej8oELyVQgfJmoQrUETTgAHut7sKZD+KIMClejJ02QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJawJj7xhpTvULC3cEh3cngl84lxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzA5MDIyYmEtYmNlMy0z MzJiLWIyN2ItZTk5NzdhMTRmMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPISMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANFIuj/iOkg7is/dzFp1gdoDMjQ9FJEObaEUWEnQNknNm6jT0AuqRalh tJpH8K6EAtljkwr+c76dMxIVui8APmFa/Rxe59CFt6KMVob3u9GhCfJ8baQCR7Jx t38SxMRM4bvEbfyWpovZTdawDhPm/jY26PfvyXHEQKESYT6bi57tdakD6XFUCi52 4zQhKM32sRp3SNZkqo6mLVinigvwNd9EJJY3wm1WTefEz8Ad6sZ0Qoxx+TRe5n99 9xHrAd2OAwUx9A8YD0Ijev015eLgdyYgkA1QgMaV+9PrHZU/wQAKwSx6MteYvqNU HPk7YI8/3pSaC6sTlKkJo5nx2ketqWQ= -----END CERTIFICATE-----Generated at Thu Mar 26 05:59:15 2026 by rpki-client