$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/812cf0f3-2130-32e9-8cf0-8004558e3744.roa File: 812cf0f3-2130-32e9-8cf0-8004558e3744.roa (raw, json) Hash identifier: q/Y28yBjDcwkCx33IoBltzhdajb8207Ao2s8HwgnerM= Subject key identifier: 82:C2:EA:3B:A0:96:DA:C8:78:05:EA:55:A0:81:9B:5A:93:BC:A9:94 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0A395DAE02FE8415E9C00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/812cf0f3-2130-32e9-8cf0-8004558e3744.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 162.72.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:a3:95:da:e0:2f:e8:41:5e:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=2fa20a4d-5a65-498c-ae58-be537c03bb3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b8:3c:53:ad:90:24:f1:53:2e:70:0c:da:b4: ce:b3:d5:48:12:c5:7b:85:34:2c:61:18:ec:e7:70: 09:26:b1:06:7a:14:95:26:1a:44:ac:a0:df:60:84: 63:ce:0b:08:d4:57:e5:5e:e9:36:4c:e3:8d:dc:c8: a7:22:39:bc:30:a4:b9:45:a7:2b:f3:4f:20:0e:96: ff:12:fc:4e:74:bd:a7:1d:50:3d:95:3a:be:90:d6: 31:7a:37:d2:73:18:84:b0:a9:15:0b:32:a2:c3:42: 82:0c:8c:6f:3f:0d:dd:24:94:81:18:6d:91:f3:59: 46:af:49:19:fa:a0:6e:91:bb:f6:21:f3:fc:3d:39: 09:bd:0b:5b:5e:6f:57:8d:b7:49:95:a5:07:a0:73: 01:e0:5e:92:03:8e:6c:2a:60:91:a4:94:8a:77:5d: bf:1d:e9:13:8f:d3:d2:a3:09:03:99:f2:50:cc:92: 56:8a:07:17:a2:0e:3f:73:cf:0f:08:da:be:2a:eb: 6c:34:c4:96:0b:79:33:ea:5c:c1:e0:38:03:84:f6: 18:89:a5:8b:1f:e8:3a:84:99:05:2d:21:da:4d:4d: 27:ab:16:83:43:9c:2b:72:8a:cf:72:9a:5b:fc:e1: cb:3d:d3:d0:42:fe:8a:bc:07:36:4c:bb:98:1e:23: 1a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C2:EA:3B:A0:96:DA:C8:78:05:EA:55:A0:81:9B:5A:93:BC:A9:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/812cf0f3-2130-32e9-8cf0-8004558e3744.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:1c:bd:6e:be:a8:96:c6:84:20:ff:7f:d4:a6:86:36:9e:35: c0:c3:0b:6e:fe:58:0b:33:55:89:eb:b1:fd:ab:03:c8:bb:c0: 4a:ff:9e:83:b3:ff:92:e2:8d:9e:74:2b:ce:26:6b:e8:bc:17: 56:8f:5d:25:5f:b7:07:30:1d:46:17:cd:81:b2:e2:bd:59:07: a9:35:b9:e2:16:04:02:aa:9a:4f:b9:6c:12:7d:1e:66:d9:f9: ae:bf:bd:f2:3e:bc:bc:d0:e6:ef:7c:9b:0b:f5:b4:55:e7:8b: 64:57:b1:4a:17:26:95:0c:4d:7d:f3:42:2e:43:b4:ed:eb:41: 7d:ff:fb:35:15:80:00:68:38:ce:1d:9f:11:71:ee:24:d4:5e: 40:e9:6c:41:17:60:6e:48:b3:7e:6e:88:d3:9b:18:d1:37:4a: 4a:50:2c:72:da:b3:ca:0e:f8:67:c0:2c:76:ba:ce:a4:9e:bc: 2c:56:33:61:a8:d5:93:95:60:f4:be:3f:0b:60:f2:a6:d6:0e: 15:13:d3:43:69:21:23:0e:fe:8c:ca:22:d7:aa:88:ae:46:ed: 7c:67:3c:4b:fd:14:5c:f9:dc:51:a0:87:f7:85:05:5b:c2:d2: 39:fb:f0:29:01:9b:fd:e5:39:0d:09:29:96:7e:13:3b:01:db: 9e:6c:82:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4KOV2uAv6EFenAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MmZhMjBhNGQtNWE2NS00OThjLWFlNTgtYmU1MzdjMDNiYjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Lg8U62QJPFTLnAM2rTOs9VIEsV7hTQsYRjs 53AJJrEGehSVJhpErKDfYIRjzgsI1FflXuk2TOON3MinIjm8MKS5Racr808gDpb/ EvxOdL2nHVA9lTq+kNYxejfScxiEsKkVCzKiw0KCDIxvPw3dJJSBGG2R81lGr0kZ +qBukbv2IfP8PTkJvQtbXm9XjbdJlaUHoHMB4F6SA45sKmCRpJSKd12/HekTj9PS owkDmfJQzJJWigcXog4/c88PCNq+KutsNMSWC3kz6lzB4DgDhPYYiaWLH+g6hJkF LSHaTU0nqxaDQ5wrcorPcppb/OHLPdPQQv6KvAc2TLuYHiMaOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILC6jugltrIeAXqVaCBm1qTvKmUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODEyY2YwZjMtMjEzMC0z MmU5LThjZjAtODAwNDU1OGUzNzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokgKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwcvW6+qJbGhCD/f9SmhjaeNcDDC27+WAszVYnrsf2rA8i7wEr/noOz /5LijZ50K84ma+i8F1aPXSVftwcwHUYXzYGy4r1ZB6k1ueIWBAKqmk+5bBJ9HmbZ +a6/vfI+vLzQ5u98mwv1tFXni2RXsUoXJpUMTX3zQi5DtO3rQX3/+zUVgABoOM4d nxFx7iTUXkDpbEEXYG5Is35uiNObGNE3SkpQLHLas8oO+GfALHa6zqSevCxWM2Go 1ZOVYPS+Pwtg8qbWDhUT00NpISMO/ozKIteqiK5G7XxnPEv9FFz53FGgh/eFBVvC 0jn78CkBm/3lOQ0JKZZ+EzsB255sggo= -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:13 2026 by rpki-client