$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8013cf9e-5867-39f1-921f-f352a9abcde1.roa File: 8013cf9e-5867-39f1-921f-f352a9abcde1.roa (raw, json) Hash identifier: RGvCeRgbAKywrcTjsB5ir/JQ3HFhCAED1i9uXAFiSUw= Subject key identifier: 61:46:B7:57:EA:E6:EF:E9:FD:F9:05:87:7D:22:6C:85:E3:0A:1B:94 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B400C206ED4D405DFB00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8013cf9e-5867-39f1-921f-f352a9abcde1.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b4:00:c2:06:ed:4d:40:5d:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b6f7ed3a-9310-4b28-a6b3-0eaf16a004bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:24:35:c8:ee:4b:82:5a:6f:04:a1:3d:df:5c: 35:fa:61:ec:5f:d9:c5:6b:b1:9d:4f:b7:9d:40:8d: f7:cf:2e:72:5f:7b:c5:f9:a1:f6:9b:fb:27:06:c4: e6:e8:bf:48:b4:f4:68:12:7d:06:55:bb:38:77:6f: ca:6f:61:f0:5d:db:a6:1d:09:38:87:bf:30:62:6f: ce:0f:ee:8f:f9:91:fd:1f:62:58:6a:2a:1d:ae:82: 78:2d:18:f5:1c:9c:78:43:a9:bd:2e:d0:de:cc:3a: af:ae:a8:01:46:d7:0e:51:32:32:0f:41:89:90:0f: b8:df:b6:e6:dd:10:9a:de:06:5f:d9:eb:d2:82:97: 9f:01:89:d0:42:b9:31:fe:73:7d:01:bf:78:db:7b: 99:32:8f:be:9f:78:e3:ff:cf:d4:4e:3d:20:4d:2e: ef:59:65:27:cd:52:cb:c7:79:2b:48:48:a2:cc:33: f2:d4:48:d5:9e:16:73:29:3a:8f:0e:ad:92:75:b3: 99:1e:ca:a0:c9:da:a0:4d:d1:a0:44:af:30:7d:96: c3:d3:4c:53:ba:3c:f8:54:38:99:32:de:6d:9c:f0: d2:6e:16:c5:2a:89:12:64:4d:ea:45:18:f1:66:c4: ca:3d:06:26:b4:aa:cc:68:c2:1d:79:f8:46:2f:a9: 2b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:46:B7:57:EA:E6:EF:E9:FD:F9:05:87:7D:22:6C:85:E3:0A:1B:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8013cf9e-5867-39f1-921f-f352a9abcde1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e6:59:4a:98:0e:de:3c:ea:27:c8:5e:59:9e:ec:31:df:60: 22:2c:0f:63:97:c8:e6:b5:3b:5f:ff:ac:db:7c:08:ab:08:45: 1b:53:b0:d6:cc:83:09:18:36:84:9e:bf:27:c7:05:de:ec:76: cd:a2:2b:2a:c1:57:98:3c:90:75:a9:ea:3b:b9:ea:6e:ea:51: 52:0d:8e:64:1b:3b:25:f5:0e:ef:06:69:68:25:aa:dc:9a:68: 32:fa:cc:e1:d6:8f:a3:00:9f:94:7d:73:3d:02:de:8d:bc:65: 08:a3:4e:28:82:10:91:5f:94:25:4b:2f:52:03:5d:2f:ce:83: f8:a9:ba:26:7b:e7:d6:6a:96:74:1c:62:bc:b1:a9:55:45:05: eb:b8:73:61:c3:01:4b:3c:76:29:ae:cf:94:00:3e:69:1c:74: ea:23:c0:82:e9:14:da:7f:8a:c9:66:c4:6a:61:cb:32:68:20: fd:7f:f3:c6:30:8c:8a:44:e1:8c:dd:4e:8a:01:ad:27:b5:b8: 6b:c3:79:f7:14:f6:56:f8:d6:ff:be:6b:d6:28:92:2c:29:41: d9:c5:b1:62:0c:c2:a1:30:6d:ab:8f:e1:8f:56:82:9c:36:a7: 14:4c:34:1f:14:2c:9b:d2:bd:95:37:62:5f:1a:cd:b5:a5:39: a4:12:2d:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LQAwgbtTUBd+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjZmN2VkM2EtOTMxMC00YjI4LWE2YjMtMGVhZjE2YTAwNGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyQ1yO5LglpvBKE931w1+mHsX9nFa7GdT7ed QI33zy5yX3vF+aH2m/snBsTm6L9ItPRoEn0GVbs4d2/Kb2HwXdumHQk4h78wYm/O D+6P+ZH9H2JYaiodroJ4LRj1HJx4Q6m9LtDezDqvrqgBRtcOUTIyD0GJkA+437bm 3RCa3gZf2evSgpefAYnQQrkx/nN9Ab9423uZMo++n3jj/8/UTj0gTS7vWWUnzVLL x3krSEiizDPy1EjVnhZzKTqPDq2SdbOZHsqgydqgTdGgRK8wfZbD00xTujz4VDiZ Mt5tnPDSbhbFKokSZE3qRRjxZsTKPQYmtKrMaMIdefhGL6krgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFGt1fq5u/p/fkFh30ibIXjChuUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODAxM2NmOWUtNTg2Ny0z OWYxLTkyMWYtZjM1MmE5YWJjZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7mWUqYDt486ifIXlme7DHfYCIsD2OXyOa1O1//rNt8CKsIRRtTsNbM gwkYNoSevyfHBd7sds2iKyrBV5g8kHWp6ju56m7qUVINjmQbOyX1Du8GaWglqtya aDL6zOHWj6MAn5R9cz0C3o28ZQijTiiCEJFflCVLL1IDXS/Og/ipuiZ759ZqlnQc YryxqVVFBeu4c2HDAUs8dimuz5QAPmkcdOojwILpFNp/islmxGphyzJoIP1/88Yw jIpE4YzdTooBrSe1uGvDefcU9lb41v++a9YokiwpQdnFsWIMwqEwbauP4Y9Wgpw2 pxRMNB8ULJvSvZU3Yl8azbWlOaQSLT0= -----END CERTIFICATE-----Generated at Thu Mar 26 21:36:27 2026 by rpki-client