$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b4de3df-8b2e-3f11-838f-cc4776dec817.roa File: 8b4de3df-8b2e-3f11-838f-cc4776dec817.roa (raw, json) Hash identifier: lEXwncJzH1IFGmFR+i5RvAN5MdtqnrT/XV4hxqW61pE= Subject key identifier: 8B:76:D0:F5:45:B7:28:D2:7A:5D:3E:4C:D4:CB:6C:05:78:E8:0A:F7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B23B8484B54C52B819C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b4de3df-8b2e-3f11-838f-cc4776dec817.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b2:3b:84:84:b5:4c:52:b8:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6839142c-d835-49dd-a8d1-86df0b6084d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f3:f3:af:e3:d8:ec:5e:8b:97:0e:99:4d:ff: 78:6a:88:f6:3b:a9:2d:8e:43:90:14:07:bf:45:1c: a7:b1:b6:81:4e:55:ff:72:f8:6e:4b:8b:03:a3:7c: 67:28:08:87:a7:dc:9a:0e:c5:11:a5:9b:ce:37:28: 6b:50:dc:c6:76:e5:75:37:9f:24:60:7c:17:5f:65: b7:f8:8e:36:86:4f:aa:6e:e0:88:4f:06:8a:2d:1c: 96:4e:bc:d4:24:25:0a:81:5e:07:46:e3:39:54:6a: ba:67:9b:e2:e2:6a:63:e9:4a:49:48:b6:ab:36:2b: bc:ae:2c:c2:20:ce:cb:57:ab:d2:fe:5b:d3:38:21: 80:db:11:cb:90:1b:eb:7e:72:7e:f1:3f:45:e9:58: cb:85:fb:ff:31:32:e9:23:d3:82:44:7f:8e:e4:3b: 37:ba:90:c0:83:c8:e1:99:50:9c:bd:77:08:7a:70: 78:26:34:d7:59:ab:b2:3f:25:49:8a:8e:77:42:cd: b8:5b:4b:d2:ec:b9:58:cb:b9:c5:1d:fa:fe:96:c5: 6a:7e:f4:d0:65:43:94:1a:37:39:1f:b8:43:d1:84: bd:18:e8:a6:a8:d7:2c:6d:8a:5d:81:66:58:89:ff: c8:9c:26:71:63:7e:d2:05:5c:98:95:fe:bd:2f:4f: da:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:76:D0:F5:45:B7:28:D2:7A:5D:3E:4C:D4:CB:6C:05:78:E8:0A:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b4de3df-8b2e-3f11-838f-cc4776dec817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:6b:1d:17:24:e3:ca:3b:01:80:06:b4:6b:95:3a:06:96:c0: 1e:e3:7c:be:f0:43:be:6a:59:43:5b:59:01:30:4e:ca:75:4c: 63:dc:1c:67:0a:00:e6:ec:d3:c0:f8:bf:59:32:a3:bb:17:45: cc:bc:80:08:47:6f:77:e3:a2:0a:4d:bc:e0:ad:5a:06:cd:8b: 79:39:2d:eb:1f:fa:06:85:cf:7e:97:95:8c:ac:ef:e5:e7:c1: 3a:8b:6d:66:0d:14:e0:9a:eb:36:fc:56:26:fe:79:55:c7:c8: 23:6e:51:82:8c:e2:65:15:ff:57:bc:15:2d:30:31:98:10:22: 34:af:b8:94:8f:d6:2f:65:a9:1d:f3:e9:7e:4d:8a:ca:93:4f: f4:cf:be:1a:b2:a6:ba:70:e2:45:3e:5a:93:f5:5f:83:2c:46: b5:00:b6:bb:b5:7b:cc:57:e3:c4:4e:af:f3:f3:6d:0b:c8:43: 65:33:3b:f3:2c:31:d6:27:eb:d2:ec:e5:e5:5d:ba:aa:43:ce: 0c:2a:d0:81:f0:bd:9d:cf:cf:8f:1c:89:3b:25:88:55:78:ec: 70:83:46:02:73:0d:d8:3c:5a:79:91:fa:4a:6c:3e:a0:98:4f: c2:96:33:5c:16:b8:52:28:d3:1a:89:de:69:97:83:9c:92:24: df:74:2a:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LI7hIS1TFK4GcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjgzOTE0MmMtZDgzNS00OWRkLWE4ZDEtODZkZjBiNjA4NGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/Pzr+PY7F6Llw6ZTf94aoj2O6ktjkOQFAe/ RRynsbaBTlX/cvhuS4sDo3xnKAiHp9yaDsURpZvONyhrUNzGduV1N58kYHwXX2W3 +I42hk+qbuCITwaKLRyWTrzUJCUKgV4HRuM5VGq6Z5vi4mpj6UpJSLarNiu8rizC IM7LV6vS/lvTOCGA2xHLkBvrfnJ+8T9F6VjLhfv/MTLpI9OCRH+O5Ds3upDAg8jh mVCcvXcIenB4JjTXWauyPyVJio53Qs24W0vS7LlYy7nFHfr+lsVqfvTQZUOUGjc5 H7hD0YS9GOimqNcsbYpdgWZYif/InCZxY37SBVyYlf69L0/aOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIt20PVFtyjSel0+TNTLbAV46Ar3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGI0ZGUzZGYtOGIyZS0z ZjExLTgzOGYtY2M0Nzc2ZGVjODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1rHRck48o7AYAGtGuVOgaWwB7jfL7wQ75qWUNbWQEwTsp1TGPcHGcK AObs08D4v1kyo7sXRcy8gAhHb3fjogpNvOCtWgbNi3k5Lesf+gaFz36XlYys7+Xn wTqLbWYNFOCa6zb8Vib+eVXHyCNuUYKM4mUV/1e8FS0wMZgQIjSvuJSP1i9lqR3z 6X5NisqTT/TPvhqyprpw4kU+WpP1X4MsRrUAtru1e8xX48ROr/PzbQvIQ2UzO/Ms MdYn69Ls5eVduqpDzgwq0IHwvZ3Pz48ciTsliFV47HCDRgJzDdg8WnmR+kpsPqCY T8KWM1wWuFIo0xqJ3mmXg5ySJN90KoA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:57:55 2026 by rpki-client