$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/760a9684-8eb9-3e5c-a82c-0dcd48db0049.roa File: 760a9684-8eb9-3e5c-a82c-0dcd48db0049.roa (raw, json) Hash identifier: WtpbDdtKO2+t9v6VYmNutfYJJipqHPyjW09G2q98Hk0= Subject key identifier: 3E:73:65:05:66:3B:AB:4C:5F:69:D9:AC:20:26:9A:E5:2C:8D:33:42 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0004190818ABD4127D0C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/760a9684-8eb9-3e5c-a82c-0dcd48db0049.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:00:41:90:81:8a:bd:41:27:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0d1d7886-ec80-4bdf-955c-8d3aeadaa551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:28:c2:d8:f8:55:18:6a:a7:a4:56:24:7b:56: 1f:7a:d6:75:d4:9c:18:0c:7c:ad:8a:ea:dc:02:ae: 14:f6:b2:70:b5:60:6c:7d:1d:06:d2:a1:7e:ce:b4: 03:be:c5:6f:f7:16:8a:01:cd:b6:39:a1:b5:d2:12: 0a:86:76:c0:5d:c2:1b:1a:56:0a:92:ed:33:49:48: 50:b6:e9:1e:90:ed:f3:df:7c:8d:42:04:1e:10:e2: d8:2e:d0:bf:dc:3a:a6:15:7d:3d:35:2e:bd:11:6f: 2f:59:a1:a6:63:fa:e7:99:b4:37:d3:3b:ad:e7:45: 85:f0:54:35:f6:48:41:13:8b:09:2a:1c:f4:c5:59: ea:34:54:b4:44:4b:e9:32:65:8a:89:a4:37:e4:a8: c0:19:aa:f3:ea:bf:15:b9:6a:98:5a:23:61:34:4c: 4e:10:1f:4a:fd:ed:5b:bf:55:68:1e:8e:01:d3:69: f8:7f:95:b0:e3:a8:2a:6c:c1:bc:a5:b3:df:bd:25: 6e:d5:a7:83:5b:98:07:61:03:f3:a5:7e:c5:9a:68: 68:70:14:4e:e7:d3:a3:25:83:37:b3:21:17:8f:3b: 4c:0b:4b:f0:d4:24:24:ea:1b:00:86:c0:87:ac:17: c5:40:64:3e:7d:61:e7:ae:be:3a:e5:2c:45:7e:3d: 63:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:73:65:05:66:3B:AB:4C:5F:69:D9:AC:20:26:9A:E5:2C:8D:33:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/760a9684-8eb9-3e5c-a82c-0dcd48db0049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:07:1a:47:8a:72:18:33:27:fd:97:4d:34:e8:10:b3:5a:78: 64:76:87:b4:31:0e:ab:2c:69:fe:32:2f:02:68:91:02:94:a9: cf:80:c8:66:c7:11:a4:a9:b8:d2:e3:20:91:73:87:e1:52:b8: 43:9e:ac:d9:44:89:d9:4e:9d:03:30:64:f9:ac:ac:c8:24:fe: 35:b3:ba:3a:1e:a9:bb:82:8c:90:21:68:33:85:be:e9:ff:c2: 03:d3:44:b6:8b:94:ab:81:90:f8:f7:e9:bb:7e:c6:74:e6:ef: 42:aa:5e:88:f9:56:6a:52:b1:90:da:a4:76:43:2a:15:c1:88: 0a:78:43:5d:28:d5:c1:ce:fa:b4:7b:16:97:ba:26:07:76:05: 9e:b3:62:34:86:b4:9a:7f:63:87:0f:e9:7b:d4:68:01:ed:e6: 44:cc:f6:b6:2d:85:bf:54:72:f1:37:71:60:93:bd:24:fd:54: a9:e0:f7:17:cc:43:89:54:01:2f:60:55:f9:ec:ce:da:ad:6d: a6:66:c3:bd:e9:db:40:9a:36:90:dc:cc:29:c2:18:36:ed:86: c0:64:a8:0f:ec:ea:90:43:75:1d:fb:2d:0b:8e:a6:08:af:03: 76:b5:1b:8b:58:8d:7f:a9:9d:33:ca:66:08:18:03:ed:aa:33: 39:4b:51:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4ABBkIGKvUEn0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MGQxZDc4ODYtZWM4MC00YmRmLTk1NWMtOGQzYWVhZGFhNTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSjC2PhVGGqnpFYke1YfetZ11JwYDHytiurc Aq4U9rJwtWBsfR0G0qF+zrQDvsVv9xaKAc22OaG10hIKhnbAXcIbGlYKku0zSUhQ tukekO3z33yNQgQeEOLYLtC/3DqmFX09NS69EW8vWaGmY/rnmbQ30zut50WF8FQ1 9khBE4sJKhz0xVnqNFS0REvpMmWKiaQ35KjAGarz6r8VuWqYWiNhNExOEB9K/e1b v1VoHo4B02n4f5Ww46gqbMG8pbPfvSVu1aeDW5gHYQPzpX7FmmhocBRO59OjJYM3 syEXjztMC0vw1CQk6hsAhsCHrBfFQGQ+fWHnrr465SxFfj1jewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5zZQVmO6tMX2nZrCAmmuUsjTNCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzYwYTk2ODQtOGViOS0z ZTVjLWE4MmMtMGRjZDQ4ZGIwMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPM5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQHGkeKchgzJ/2XTTToELNaeGR2h7QxDqssaf4yLwJokQKUqc+AyGbH EaSpuNLjIJFzh+FSuEOerNlEidlOnQMwZPmsrMgk/jWzujoeqbuCjJAhaDOFvun/ wgPTRLaLlKuBkPj36bt+xnTm70KqXoj5VmpSsZDapHZDKhXBiAp4Q10o1cHO+rR7 Fpe6Jgd2BZ6zYjSGtJp/Y4cP6XvUaAHt5kTM9rYthb9UcvE3cWCTvST9VKng9xfM Q4lUAS9gVfnsztqtbaZmw73p20CaNpDczCnCGDbthsBkqA/s6pBDdR37LQuOpgiv A3a1G4tYjX+pnTPKZggYA+2qMzlLUaM= -----END CERTIFICATE-----Generated at Thu Mar 26 06:04:50 2026 by rpki-client