$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8aa0414c-8126-3e49-be44-eb2af2892430.roa File: 8aa0414c-8126-3e49-be44-eb2af2892430.roa (raw, json) Hash identifier: HYUuP8xfQKqXNEuLxhx7PNHX8XnhB2KLsKe4+8qBNUs= Subject key identifier: D1:20:F4:A9:9D:00:CF:4E:3C:84:CE:7B:A0:65:89:4F:48:49:27:50 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFB80118C342DC09E46780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8aa0414c-8126-3e49-be44-eb2af2892430.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:b8:01:18:c3:42:dc:09:e4:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=517e3ed4-fcc6-4527-b889-b34493c7948c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a0:e2:8e:ec:84:6a:f2:05:16:d4:d5:d9:a2: 40:b5:d2:80:ad:7d:f1:f5:65:36:ed:73:74:d3:c7: f4:29:ce:c5:3c:a9:c0:fc:ba:8f:16:64:1f:5a:14: cd:54:98:08:5c:38:13:fc:c5:0a:a5:d4:80:1b:fe: 64:2c:ce:23:46:a5:8d:ac:6b:59:fd:24:a1:92:af: bf:3d:7d:39:99:2e:7a:95:eb:a4:e6:79:0b:cf:ed: 1c:0b:9c:18:c2:e5:fe:a2:03:fe:32:ab:6f:6d:9a: fb:25:cd:9e:d7:d3:69:25:3c:5c:f8:93:73:ae:58: ca:79:ce:29:70:f8:49:b9:81:5c:4d:cb:7a:87:1d: 0b:9c:51:63:84:4e:d6:6c:d1:18:7b:6d:0a:08:d1: d8:2c:70:98:86:6b:23:a9:f4:2e:37:52:a7:d9:83: 6d:d1:db:ba:d3:3d:61:ff:a1:a6:6a:ec:81:22:bb: a1:15:17:f0:1e:50:38:66:12:58:1f:d8:4c:92:d3: fd:02:98:24:1e:54:cb:71:75:da:14:8e:8e:e2:f0: fd:b1:b0:6a:eb:79:61:61:72:40:ea:0a:bc:66:90: d7:2b:96:9f:29:01:b1:19:c4:11:2a:5d:08:60:e2: 62:49:90:0a:1a:53:77:50:e9:78:ec:7f:51:28:31: 74:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:20:F4:A9:9D:00:CF:4E:3C:84:CE:7B:A0:65:89:4F:48:49:27:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8aa0414c-8126-3e49-be44-eb2af2892430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:93:86:b2:45:61:b0:d4:00:4c:35:2e:ba:18:f8:c4:5c:b1: 92:67:49:c3:6a:95:4c:8f:fe:c0:ad:11:cd:00:46:b4:79:ae: d0:dc:48:9c:4b:53:e8:d1:f0:03:ee:fb:51:d7:41:42:c6:f2: d1:53:99:b9:2f:43:2d:23:dc:89:b9:e4:42:c4:57:c7:56:0e: 09:6c:2c:4c:a9:41:a2:0d:38:f6:6b:17:6e:3a:f7:c6:b7:2d: e7:ef:d6:96:59:88:9b:25:9e:2d:ad:99:cf:f7:de:61:65:f6: 2a:d7:66:31:4e:b4:ce:b1:61:43:01:00:38:39:4e:d6:a5:79: 47:e2:ab:1a:8f:75:88:b6:aa:09:18:30:03:08:71:f1:6a:36: 8a:e7:cb:3e:3a:9a:02:7b:c8:ca:29:45:33:a0:ee:9b:b8:39: 20:41:42:82:9a:46:54:0f:6c:63:3b:f5:24:f5:18:12:59:f1: ef:ab:b9:a5:02:93:b0:81:0f:84:68:dd:fd:62:9e:97:b5:01: 67:4d:1d:5a:ce:19:16:1a:7d:b3:8e:1f:70:9f:03:0b:fe:2f: 95:37:f7:e4:8f:1f:4f:1e:4d:5f:f1:a8:f0:12:91:58:a5:2d: 6c:ec:70:c6:fa:45:98:24:a5:b9:71:c6:2b:2f:95:68:99:4f: 60:23:0d:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37gBGMNC3AnkZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTE3ZTNlZDQtZmNjNi00NTI3LWI4ODktYjM0NDkzYzc5NDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aDijuyEavIFFtTV2aJAtdKArX3x9WU27XN0 08f0Kc7FPKnA/LqPFmQfWhTNVJgIXDgT/MUKpdSAG/5kLM4jRqWNrGtZ/SShkq+/ PX05mS56leuk5nkLz+0cC5wYwuX+ogP+MqtvbZr7Jc2e19NpJTxc+JNzrljKec4p cPhJuYFcTct6hx0LnFFjhE7WbNEYe20KCNHYLHCYhmsjqfQuN1Kn2YNt0du60z1h /6GmauyBIruhFRfwHlA4ZhJYH9hMktP9ApgkHlTLcXXaFI6O4vD9sbBq63lhYXJA 6gq8ZpDXK5afKQGxGcQRKl0IYOJiSZAKGlN3UOl47H9RKDF0wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEg9KmdAM9OPITOe6BliU9ISSdQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGFhMDQxNGMtODEyNi0z ZTQ5LWJlNDQtZWIyYWYyODkyNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANCThrJFYbDUAEw1LroY+MRcsZJnScNqlUyP/sCtEc0ARrR5rtDcSJxL U+jR8APu+1HXQULG8tFTmbkvQy0j3Im55ELEV8dWDglsLEypQaINOPZrF24698a3 Lefv1pZZiJslni2tmc/33mFl9irXZjFOtM6xYUMBADg5TtaleUfiqxqPdYi2qgkY MAMIcfFqNornyz46mgJ7yMopRTOg7pu4OSBBQoKaRlQPbGM79ST1GBJZ8e+ruaUC k7CBD4Ro3f1inpe1AWdNHVrOGRYafbOOH3CfAwv+L5U39+SPH08eTV/xqPASkVil LWzscMb6RZgkpblxxisvlWiZT2AjDWU= -----END CERTIFICATE-----Generated at Thu Mar 26 17:43:43 2026 by rpki-client