$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8032edc3-44df-366a-b94d-4ea68636a34b.roa File: 8032edc3-44df-366a-b94d-4ea68636a34b.roa (raw, json) Hash identifier: tuRTp/QfAj5/wC/HAkobkkLGUZ0b2PgHVSpuYbF48+8= Subject key identifier: AF:AD:34:DD:64:2A:DF:B4:43:20:86:E4:6A:5F:FB:B9:58:1C:64:98 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFCCE78E17B873E41D020 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8032edc3-44df-366a-b94d-4ea68636a34b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fc:ce:78:e1:7b:87:3e:41:d0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1c32d3af-7a99-43cc-9acd-161ffd2496f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a9:6c:ea:67:c6:37:7a:ff:f6:24:d3:6c:b2: 0a:cb:91:9d:6c:1a:93:d7:90:4c:5b:16:7b:32:6a: 2d:bf:66:71:52:e1:67:3e:fb:ee:5b:77:02:74:40: d5:dd:c8:2c:80:28:a3:e5:32:8e:04:f5:f8:1d:85: c3:af:a0:85:cf:2e:16:1d:37:bf:32:01:98:14:e2: a3:b3:56:05:3c:9e:10:20:c0:66:ed:4d:49:00:d1: 06:a6:dd:6d:d7:d8:b2:29:96:df:2c:c3:e0:05:f9: a9:cf:1d:e8:99:79:08:54:03:dc:69:38:c1:3b:74: ac:f4:42:d0:a0:7d:03:0e:de:f6:dc:fb:4e:c3:9c: 44:bf:e8:25:71:35:e0:ba:a4:22:c2:32:86:7a:c8: f8:06:9a:8f:5a:07:37:5a:09:c8:b7:cc:c3:c2:12: c3:c3:50:57:b2:cf:1b:35:df:dc:6c:86:4f:6e:94: a7:8a:d2:ae:c5:98:d7:7c:7a:86:ad:3b:d2:2b:38: 61:a3:0c:89:48:ee:57:29:3a:e4:a7:62:37:40:3e: d2:cd:a9:10:a9:63:9f:eb:20:63:63:08:bb:af:8e: f3:96:df:3d:ac:60:44:a0:ff:af:1d:96:7b:50:33: e9:d8:ff:86:8e:b7:ac:9e:26:4c:7b:fa:49:3b:a7: 0d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AD:34:DD:64:2A:DF:B4:43:20:86:E4:6A:5F:FB:B9:58:1C:64:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8032edc3-44df-366a-b94d-4ea68636a34b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:24:29:76:cc:a0:a8:80:f8:16:49:11:12:f3:0b:47:5a:2b: d8:86:3e:a9:43:43:b3:62:55:3f:38:8b:24:31:e2:30:26:0d: a7:fc:72:3a:f9:82:cf:2d:53:61:f3:60:b6:a3:7a:82:4e:b1: 1d:15:b4:4d:fd:a6:e2:45:f8:53:78:8b:60:0d:bc:eb:f0:a5: 54:e1:fc:0b:70:91:c7:45:a2:91:60:79:fb:05:e0:32:e3:41: 5b:e5:5d:5b:77:36:e3:f0:e7:ef:30:ce:fb:e3:71:ba:a9:3b: 75:3a:11:bf:76:3e:6a:ab:14:86:bc:27:35:95:23:08:c8:64: db:9f:32:0f:c9:c8:4a:76:9a:45:1b:2a:25:e7:2f:05:ff:d8: 56:34:a4:64:50:36:e8:bd:4d:32:83:fc:3e:e0:70:21:74:64: 19:e7:5f:f2:fd:1b:7e:ca:fb:51:13:93:c2:2c:2c:88:54:d8: c7:c3:91:32:26:87:fb:3b:e8:17:ed:70:8b:75:79:bf:a3:e9: d0:1f:42:b2:8f:50:d1:1a:b2:e2:14:97:ea:4b:44:f6:3d:40: 69:15:18:83:b5:87:9b:31:38:0f:14:79:5a:8b:5d:17:45:99: a5:87:1d:bc:6d:06:d8:ab:15:8f:8c:5a:5d:64:88:78:ea:04: 8f:b9:87:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/zOeOF7hz5B0CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MWMzMmQzYWYtN2E5OS00M2NjLTlhY2QtMTYxZmZkMjQ5NmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKls6mfGN3r/9iTTbLIKy5GdbBqT15BMWxZ7 Mmotv2ZxUuFnPvvuW3cCdEDV3cgsgCij5TKOBPX4HYXDr6CFzy4WHTe/MgGYFOKj s1YFPJ4QIMBm7U1JANEGpt1t19iyKZbfLMPgBfmpzx3omXkIVAPcaTjBO3Ss9ELQ oH0DDt723PtOw5xEv+glcTXguqQiwjKGesj4BpqPWgc3WgnIt8zDwhLDw1BXss8b Nd/cbIZPbpSnitKuxZjXfHqGrTvSKzhhowyJSO5XKTrkp2I3QD7SzakQqWOf6yBj Ywi7r47zlt89rGBEoP+vHZZ7UDPp2P+GjresniZMe/pJO6cNCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+tNN1kKt+0QyCG5Gpf+7lYHGSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODAzMmVkYzMtNDRkZi0z NjZhLWI5NGQtNGVhNjg2MzZhMzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0kKXbMoKiA+BZJERLzC0daK9iGPqlDQ7NiVT84iyQx4jAmDaf8cjr5 gs8tU2HzYLajeoJOsR0VtE39puJF+FN4i2ANvOvwpVTh/AtwkcdFopFgefsF4DLj QVvlXVt3NuPw5+8wzvvjcbqpO3U6Eb92PmqrFIa8JzWVIwjIZNufMg/JyEp2mkUb KiXnLwX/2FY0pGRQNui9TTKD/D7gcCF0ZBnnX/L9G37K+1ETk8IsLIhU2MfDkTIm h/s76BftcIt1eb+j6dAfQrKPUNEasuIUl+pLRPY9QGkVGIO1h5sxOA8UeVqLXRdF maWHHbxtBtirFY+MWl1kiHjqBI+5h0M= -----END CERTIFICATE-----Generated at Thu Mar 26 13:08:50 2026 by rpki-client