$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82601e6b-430d-31de-9c99-a4a04a886fbe.roa File: 82601e6b-430d-31de-9c99-a4a04a886fbe.roa (raw, json) Hash identifier: VnSj8MSS/vTRgln6VpHQ5TfXQO3OPMDQE8NNxh/bJGo= Subject key identifier: 1F:4C:AF:F1:46:14:16:D6:26:29:2E:F1:55:93:4E:CC:4B:21:14:17 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFBF29EAA2310662FCAE40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82601e6b-430d-31de-9c99-a4a04a886fbe.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:bf:29:ea:a2:31:06:62:fc:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=19a9b315-cd7b-4737-b4ec-68a8f457d7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:90:92:67:66:87:27:af:38:6d:8a:3b:e3:a0: d9:b8:75:f0:58:aa:61:4e:46:29:7b:b9:20:4f:8c: 50:35:c1:c3:86:9a:8e:b3:09:90:2f:15:13:17:85: 82:72:a1:88:f1:be:e8:5a:3c:4f:6e:fb:90:59:dc: 38:27:ff:52:8d:a5:4f:07:5a:ed:a3:1c:98:23:3c: 13:ca:59:bd:d1:3c:93:c6:2c:a1:de:f9:53:64:f5: a8:70:c9:3c:6b:d0:05:33:56:f1:f1:7d:72:ba:28: fe:4e:f6:42:69:05:16:2d:8f:b2:50:db:2d:35:b5: d2:80:09:22:b2:fc:1f:52:83:e5:25:74:75:de:00: 78:eb:0a:e6:cd:92:d4:f4:ab:f0:c2:da:58:dc:4c: e5:0c:03:d5:fe:e2:62:6b:8a:17:44:92:fd:32:78: 65:99:b3:e5:c5:bb:40:75:b7:6b:95:41:1c:57:06: 26:83:4b:63:4a:f7:ea:79:84:72:8e:b7:21:7d:74: 33:a7:19:aa:a5:c7:f0:24:5d:f0:43:bc:9a:83:70: 04:ed:53:89:fe:ae:d7:6c:af:df:97:73:d4:75:57: 8e:9f:7d:bb:8e:da:1c:9a:db:f7:80:cf:7c:bc:5d: c2:94:8f:32:84:63:95:47:e9:d8:d4:a7:ea:76:a1: dd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4C:AF:F1:46:14:16:D6:26:29:2E:F1:55:93:4E:CC:4B:21:14:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82601e6b-430d-31de-9c99-a4a04a886fbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:b7:15:df:3b:91:34:b7:60:37:5a:da:30:67:7b:24:d9:35: 1f:c1:c9:d4:a8:be:36:76:0f:93:83:28:8d:ed:f0:c1:fe:24: fc:7f:24:67:24:54:da:89:09:61:70:af:36:d9:82:a5:f5:3f: 7e:49:df:0e:83:c8:8d:af:46:ca:b5:55:86:37:a2:ad:3f:20: b1:84:15:2d:e9:d9:ab:9e:07:4e:1b:af:40:8f:28:1b:ad:d8: e1:f5:08:c4:c8:58:a7:58:87:6a:52:65:46:f5:dc:35:71:12: 90:a5:d7:10:38:e8:c5:3f:bb:dc:9a:b7:20:f2:a6:62:9b:6b: 51:a1:19:e4:5c:fa:f3:cc:56:c3:58:46:c0:d7:06:ad:da:a1: 57:bb:32:11:ca:7d:20:5a:f8:26:07:8b:83:fd:0f:2b:52:01: b3:4f:81:17:e4:2f:8e:35:36:46:33:4f:ad:81:dc:44:a9:38: 00:f0:c6:7a:30:28:20:09:34:66:0b:4b:e2:73:02:c6:a9:0c: a5:d8:6e:6a:54:c6:36:55:9d:42:78:5e:aa:d7:ea:2b:d3:f8: cd:76:27:c7:da:e0:cb:a6:44:81:0f:1f:5a:26:06:01:e4:38: fd:58:78:ca:60:35:65:1f:64:8c:d1:2e:b3:dd:19:fc:0f:6b: 91:6f:7b:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k378p6qIxBmL8rkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTlhOWIzMTUtY2Q3Yi00NzM3LWI0ZWMtNjhhOGY0NTdkN2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpCSZ2aHJ684bYo746DZuHXwWKphTkYpe7kg T4xQNcHDhpqOswmQLxUTF4WCcqGI8b7oWjxPbvuQWdw4J/9SjaVPB1rtoxyYIzwT ylm90TyTxiyh3vlTZPWocMk8a9AFM1bx8X1yuij+TvZCaQUWLY+yUNstNbXSgAki svwfUoPlJXR13gB46wrmzZLU9KvwwtpY3EzlDAPV/uJia4oXRJL9MnhlmbPlxbtA dbdrlUEcVwYmg0tjSvfqeYRyjrchfXQzpxmqpcfwJF3wQ7yag3AE7VOJ/q7XbK/f l3PUdVeOn327jtocmtv3gM98vF3ClI8yhGOVR+nY1KfqdqHdIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9Mr/FGFBbWJiku8VWTTsxLIRQXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODI2MDFlNmItNDMwZC0z MWRlLTljOTktYTRhMDRhODg2ZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK39MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJW3Fd87kTS3YDda2jBneyTZNR/BydSovjZ2D5ODKI3t8MH+JPx/JGck VNqJCWFwrzbZgqX1P35J3w6DyI2vRsq1VYY3oq0/ILGEFS3p2aueB04br0CPKBut 2OH1CMTIWKdYh2pSZUb13DVxEpCl1xA46MU/u9yatyDypmKba1GhGeRc+vPMVsNY RsDXBq3aoVe7MhHKfSBa+CYHi4P9DytSAbNPgRfkL441NkYzT62B3ESpOADwxnow KCAJNGYLS+JzAsapDKXYbmpUxjZVnUJ4XqrX6ivT+M12J8fa4MumRIEPH1omBgHk OP1YeMpgNWUfZIzRLrPdGfwPa5Fvey8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:21:07 2026 by rpki-client