$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7b7af8b3-c545-330b-b84b-68057ba6e480.roa File: 7b7af8b3-c545-330b-b84b-68057ba6e480.roa (raw, json) Hash identifier: zPsuR0GgsMc1avYbzFKWb9LfwbAdtRYHSxZatQQaGZc= Subject key identifier: 31:6C:0A:B4:95:A8:51:66:55:62:85:CB:DD:A5:74:2F:58:A6:13:36 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E063F436D19F9E2A2E1280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7b7af8b3-c545-330b-b84b-68057ba6e480.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:63:f4:36:d1:9f:9e:2a:2e:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a735a976-51cc-4ab9-aa89-f801d6eb5a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0b:fe:9d:70:da:8f:d5:47:27:b4:a6:87:c6: 48:95:ae:94:f9:d4:d1:76:0e:e1:08:1e:6e:14:8d: 91:ee:e4:d9:95:01:1f:3a:d9:11:65:b8:b5:49:bc: e7:25:71:11:b4:53:8f:bf:2c:5b:a5:d7:7e:a2:0c: 8a:99:d7:34:db:0c:db:30:0b:0d:82:34:fd:65:08: f5:56:22:b3:cc:0e:96:c1:0a:7d:a6:60:75:82:15: 43:43:67:48:b0:b3:e9:47:17:f1:1b:4a:24:f3:6e: 0b:6d:f3:31:79:5f:0b:57:98:3b:89:d9:41:29:df: 42:88:20:80:7b:d1:41:27:f1:f0:b2:db:2e:3f:81: 2f:05:bd:d7:f6:27:53:e2:d8:1b:5e:24:cb:2e:58: 85:b7:a0:66:d3:eb:e8:b6:99:f1:03:5c:ce:35:11: 74:36:49:60:7e:26:9e:9d:ed:f4:5e:ee:0f:a4:0f: bb:27:70:a2:89:6f:e6:89:0f:ec:4a:6d:f3:ae:92: 07:bc:2b:00:6e:9b:98:ba:13:e9:b8:5b:c8:10:89: 11:2e:fc:ec:2e:68:22:86:99:8e:36:c7:cd:14:ed: 35:92:e3:46:a3:18:99:45:f5:de:76:82:bd:87:c9: c9:f3:2e:4b:c9:ac:4b:eb:68:02:20:7b:75:07:6b: f5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6C:0A:B4:95:A8:51:66:55:62:85:CB:DD:A5:74:2F:58:A6:13:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7b7af8b3-c545-330b-b84b-68057ba6e480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:57:0a:ca:de:55:d4:02:e6:6a:49:87:7b:c2:7d:c5:82:e2: 0b:59:90:f7:c1:e1:fc:8a:77:9c:d4:82:d9:fa:e4:52:f6:d7: 6d:d5:6e:84:d9:8d:e2:bb:9f:83:46:70:18:8e:63:99:43:f3: f3:8e:bf:a1:af:6b:17:bd:ce:9d:50:c0:fc:e0:55:3f:0b:3f: 6d:93:64:a2:02:91:e1:70:91:ab:61:08:34:bb:da:17:2f:4c: b1:c9:b3:97:8e:db:a5:c2:9c:17:3c:76:12:b5:24:b2:d8:25: 5c:ed:b7:cd:27:0b:79:be:bd:81:49:b9:ef:79:48:e6:43:41: 3d:c6:17:ea:e3:e2:c2:83:4a:cd:d5:2c:5f:c9:60:8c:9f:3c: 44:03:c0:14:5f:c9:4a:ab:03:e5:d6:3b:16:a6:31:6d:96:94: 7d:dc:c8:4e:45:74:5b:d0:01:dd:fb:77:08:ae:fe:69:94:1f: b3:35:96:af:ee:cd:2a:e3:60:e7:b6:70:c2:39:78:3c:b5:2c: 0f:d7:ec:ae:91:51:8a:64:1d:3f:3c:6b:76:69:ae:f7:9d:36: 09:e7:93:e7:54:b5:42:d8:b9:a1:a2:78:57:59:60:b6:75:64: f8:ac:2c:d0:8c:5c:ba:11:a5:7f:df:6d:38:69:d5:fe:6f:65: 9e:71:19:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GP0NtGfniouEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YTczNWE5NzYtNTFjYy00YWI5LWFhODktZjgwMWQ2ZWI1YTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQv+nXDaj9VHJ7Smh8ZIla6U+dTRdg7hCB5u FI2R7uTZlQEfOtkRZbi1SbznJXERtFOPvyxbpdd+ogyKmdc02wzbMAsNgjT9ZQj1 ViKzzA6WwQp9pmB1ghVDQ2dIsLPpRxfxG0ok824LbfMxeV8LV5g7idlBKd9CiCCA e9FBJ/HwstsuP4EvBb3X9idT4tgbXiTLLliFt6Bm0+votpnxA1zONRF0Nklgfiae ne30Xu4PpA+7J3CiiW/miQ/sSm3zrpIHvCsAbpuYuhPpuFvIEIkRLvzsLmgihpmO NsfNFO01kuNGoxiZRfXedoK9h8nJ8y5LyaxL62gCIHt1B2v1lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFsCrSVqFFmVWKFy92ldC9YphM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2I3YWY4YjMtYzU0NS0z MzBiLWI4NGItNjgwNTdiYTZlNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdXCsreVdQC5mpJh3vCfcWC4gtZkPfB4fyKd5zUgtn65FL2123VboTZ jeK7n4NGcBiOY5lD8/OOv6Gvaxe9zp1QwPzgVT8LP22TZKICkeFwkathCDS72hcv TLHJs5eO26XCnBc8dhK1JLLYJVztt80nC3m+vYFJue95SOZDQT3GF+rj4sKDSs3V LF/JYIyfPEQDwBRfyUqrA+XWOxamMW2WlH3cyE5FdFvQAd37dwiu/mmUH7M1lq/u zSrjYOe2cMI5eDy1LA/X7K6RUYpkHT88a3ZprvedNgnnk+dUtULYuaGieFdZYLZ1 ZPisLNCMXLoRpX/fbThp1f5vZZ5xGe0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:29:46 2026 by rpki-client