$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7900dca2-6a7a-36cb-9b02-87e7dc9a28ab.roa File: 7900dca2-6a7a-36cb-9b02-87e7dc9a28ab.roa (raw, json) Hash identifier: 3FiHdAwOBA6WXvRVNKlvJLv8jp4d2JzguJlDBgVbeUA= Subject key identifier: BB:B8:AC:6F:90:92:AA:73:7E:E9:B4:32:F5:F9:B2:91:7C:F5:AF:E2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFD1C06DE282C12E43680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7900dca2-6a7a-36cb-9b02-87e7dc9a28ab.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fd:1c:06:de:28:2c:12:e4:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6a60dc98-c903-4bf1-a98a-a144ac218a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:74:90:0e:92:56:ee:b3:10:9f:12:a3:45:7b: 17:14:fd:a4:15:20:5e:6f:12:4b:c1:61:ce:e9:4b: 97:87:33:3f:6d:13:2a:4a:2f:e1:92:3c:1c:a8:4d: a3:c0:8c:e2:ac:5b:29:85:62:40:10:bb:df:82:7c: 20:bb:02:cb:84:84:86:c6:94:1b:ea:b3:d2:18:e1: 32:8c:57:0e:6f:1b:dc:d2:d0:93:12:e6:b4:14:44: df:4e:9c:7f:30:01:1d:98:7f:94:eb:6d:76:96:8f: f7:19:9e:8c:72:c1:83:3c:e3:70:23:e8:a8:0e:ae: 14:39:8e:53:6f:7d:a5:bd:0e:3b:21:fa:68:17:be: 5b:9b:22:87:aa:92:af:73:d7:33:c8:d5:8e:89:1c: c8:a7:0b:6a:fa:ef:7e:5f:0e:93:a2:08:c3:17:77: 61:f7:e3:32:91:ea:98:ee:fc:91:1d:cd:8b:50:76: 6e:70:92:ce:79:44:51:e5:56:51:c1:9b:12:f5:fb: 35:8d:d9:8a:a6:df:92:1c:4b:48:04:58:af:c5:e9: 5b:e1:59:45:29:c9:12:9e:ca:43:e4:43:c7:48:2e: 86:91:75:b9:03:d8:e0:34:d5:13:af:3c:98:89:3b: 2b:52:88:56:89:a4:5c:a4:c0:02:34:bc:5b:6c:8e: 7f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B8:AC:6F:90:92:AA:73:7E:E9:B4:32:F5:F9:B2:91:7C:F5:AF:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7900dca2-6a7a-36cb-9b02-87e7dc9a28ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ad:3f:ff:af:29:26:cb:fb:b4:c9:52:4b:18:66:48:0f:cc: dd:e0:2c:83:50:75:1d:cd:23:23:f3:70:64:03:43:a7:fd:ec: 66:82:71:09:ed:05:c7:c9:e0:dd:07:58:34:ba:e2:5a:81:d8: 2c:ec:f9:ba:cd:a2:17:3c:84:ed:44:ea:48:99:c0:d4:f6:02: b2:31:e8:40:66:fa:54:63:d5:3e:5b:0e:df:e5:84:25:1d:72: 02:0d:5f:19:ae:50:38:df:77:79:6d:b4:0f:02:fb:c0:08:05: cf:93:c5:87:e0:4c:a3:46:b0:4a:a3:18:c9:1c:a5:bb:34:1c: 96:c9:1b:d5:d9:fd:65:fc:5f:cc:2f:20:98:cc:78:48:b4:1a: 8e:05:b6:1d:0e:4d:80:c0:a5:22:08:62:1d:f3:a6:23:a6:2d: f2:57:49:95:56:96:6d:cf:0e:76:0b:ed:71:3e:8a:eb:41:37: 1b:9e:88:14:ca:07:c7:20:7c:09:59:65:3d:13:e5:5d:76:89: 8b:88:4a:4d:40:28:3f:98:90:59:16:38:23:ec:6f:48:2f:be: fe:56:e1:0f:04:c4:c5:cd:8e:e1:5b:03:9b:0b:63:a7:e6:0d: 74:d0:20:2c:8f:b4:e1:be:dc:d1:3f:e9:45:1c:34:74:a6:ca: 51:3d:92:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/0cBt4oLBLkNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NmE2MGRjOTgtYzkwMy00YmYxLWE5OGEtYTE0NGFjMjE4YTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nSQDpJW7rMQnxKjRXsXFP2kFSBebxJLwWHO 6UuXhzM/bRMqSi/hkjwcqE2jwIzirFsphWJAELvfgnwguwLLhISGxpQb6rPSGOEy jFcObxvc0tCTEua0FETfTpx/MAEdmH+U6212lo/3GZ6McsGDPONwI+ioDq4UOY5T b32lvQ47IfpoF75bmyKHqpKvc9czyNWOiRzIpwtq+u9+Xw6TogjDF3dh9+MykeqY 7vyRHc2LUHZucJLOeURR5VZRwZsS9fs1jdmKpt+SHEtIBFivxelb4VlFKckSnspD 5EPHSC6GkXW5A9jgNNUTrzyYiTsrUohWiaRcpMACNLxbbI5/MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLu4rG+Qkqpzfum0MvX5spF89a/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzkwMGRjYTItNmE3YS0z NmNiLTliMDItODdlN2RjOWEyOGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAitP/+vKSbL+7TJUksYZkgPzN3gLINQdR3NIyPzcGQDQ6f97GaCcQnt BcfJ4N0HWDS64lqB2Czs+brNohc8hO1E6kiZwNT2ArIx6EBm+lRj1T5bDt/lhCUd cgINXxmuUDjfd3lttA8C+8AIBc+TxYfgTKNGsEqjGMkcpbs0HJbJG9XZ/WX8X8wv IJjMeEi0Go4Fth0OTYDApSIIYh3zpiOmLfJXSZVWlm3PDnYL7XE+iutBNxueiBTK B8cgfAlZZT0T5V12iYuISk1AKD+YkFkWOCPsb0gvvv5W4Q8ExMXNjuFbA5sLY6fm DXTQICyPtOG+3NE/6UUcNHSmylE9kpk= -----END CERTIFICATE-----Generated at Thu Mar 26 12:42:48 2026 by rpki-client