$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e2afea8-aee2-3ca8-b8b9-92a361df2fd6.roa File: 8e2afea8-aee2-3ca8-b8b9-92a361df2fd6.roa (raw, json) Hash identifier: sXs36ZMOBXB+p5w5k0QWy/zpKtHkXu9mzwXeicS4fnw= Subject key identifier: 63:98:CE:C4:1D:DF:D8:FC:EF:C5:B7:09:37:45:46:D2:0D:4C:17:B5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0BA49AEC31AA677E10660 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e2afea8-aee2-3ca8-b8b9-92a361df2fd6.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ba:49:ae:c3:1a:a6:77:e1:06:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=67056f33-4956-4944-bbda-2c5f8bbac51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4d:97:21:75:7d:4e:f7:10:7f:62:7e:d8:76: 53:6f:6a:44:bb:55:70:b3:00:1d:c9:5b:e8:92:49: 61:3e:4c:6d:06:e1:78:38:a9:60:de:4a:e3:3c:ff: 26:c4:50:a5:e7:de:39:55:92:76:ae:3a:0b:02:cd: 45:e4:cd:21:87:ee:2c:e9:0c:4b:ad:94:21:e2:f1: c2:09:52:2e:95:0e:7b:26:75:72:0d:a8:8a:39:2d: 7f:c1:cb:43:7a:cf:5b:3a:c9:78:c6:ca:5e:78:17: ac:e1:fa:fc:c4:07:c2:7b:2e:4f:3a:ff:f6:10:99: d5:a5:8c:f8:ce:a9:82:0d:ab:64:ed:05:25:36:e3: 6e:ba:7a:8e:c2:fa:54:45:57:7b:1b:fd:5f:dc:81: 32:09:59:58:c3:ca:aa:4f:22:13:60:6e:24:a0:ca: 62:9d:0f:b5:fb:8d:11:72:27:5c:de:89:2c:f9:7b: dc:fa:8c:9a:c9:7a:58:bb:ea:31:a7:09:8c:82:1e: b2:d6:d4:d5:02:26:03:8c:ad:dd:40:df:b7:a0:f5: 5a:ab:a9:73:f4:32:19:55:eb:db:90:40:43:24:8a: bf:ae:1c:b1:04:92:6c:bc:07:6d:d7:ae:0b:eb:47: b5:e0:77:4d:34:c8:bd:89:ca:29:95:eb:41:fc:95: 29:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:98:CE:C4:1D:DF:D8:FC:EF:C5:B7:09:37:45:46:D2:0D:4C:17:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e2afea8-aee2-3ca8-b8b9-92a361df2fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b3:d7:90:5a:d7:c0:29:5a:1d:32:53:e9:5c:90:2e:7a:f3: 3b:47:43:67:c4:94:12:07:30:12:47:43:a8:38:62:c7:03:dd: c4:42:5b:16:12:e1:8b:2c:e3:50:47:20:ae:bf:d0:77:77:c4: b6:c4:8d:75:bc:c8:c2:d4:79:24:af:37:44:a8:46:67:19:f6: 7e:56:a3:ad:bd:b0:45:71:e1:0e:51:0c:15:65:0e:fe:38:e1: eb:2d:78:bc:cb:96:e5:58:c0:e5:44:6f:57:c6:7e:2d:91:74: bb:b2:8b:7e:78:2c:6f:1d:64:8b:c4:2f:a6:05:54:90:b6:6f: 6f:97:3d:88:54:01:d1:7c:2c:42:b1:c5:31:82:97:93:ce:9a: 09:5e:9b:b8:51:3b:e7:ea:1e:c0:17:8f:57:85:b2:85:17:b1: 70:2a:45:f5:9d:ed:4b:7b:3b:23:b1:68:56:5e:b1:5f:0a:d8: 20:aa:ea:23:42:4d:35:31:88:70:5b:83:d6:5b:63:21:74:94: 4a:c1:fa:69:7e:da:77:ef:70:ba:d7:1b:04:57:0f:f4:18:d2: 1f:4f:29:fd:69:04:68:0c:3a:cc:ee:4e:2a:c7:d9:f4:21:29: 09:f9:81:e2:c0:7d:43:d1:38:fd:7d:98:22:ea:26:28:2a:d2: 5e:5d:7f:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LpJrsMapnfhBmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjcwNTZmMzMtNDk1Ni00OTQ0LWJiZGEtMmM1ZjhiYmFjNTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk2XIXV9TvcQf2J+2HZTb2pEu1VwswAdyVvo kklhPkxtBuF4OKlg3krjPP8mxFCl5945VZJ2rjoLAs1F5M0hh+4s6QxLrZQh4vHC CVIulQ57JnVyDaiKOS1/wctDes9bOsl4xspeeBes4fr8xAfCey5POv/2EJnVpYz4 zqmCDatk7QUlNuNuunqOwvpURVd7G/1f3IEyCVlYw8qqTyITYG4koMpinQ+1+40R cidc3oks+Xvc+oyayXpYu+oxpwmMgh6y1tTVAiYDjK3dQN+3oPVaq6lz9DIZVevb kEBDJIq/rhyxBJJsvAdt164L60e14HdNNMi9icopletB/JUp4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOYzsQd39j878W3CTdFRtINTBe1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGUyYWZlYTgtYWVlMi0z Y2E4LWI4YjktOTJhMzYxZGYyZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWz15Ba18ApWh0yU+lckC568ztHQ2fElBIHMBJHQ6g4YscD3cRCWxYS 4Yss41BHIK6/0Hd3xLbEjXW8yMLUeSSvN0SoRmcZ9n5Wo629sEVx4Q5RDBVlDv44 4esteLzLluVYwOVEb1fGfi2RdLuyi354LG8dZIvEL6YFVJC2b2+XPYhUAdF8LEKx xTGCl5POmglem7hRO+fqHsAXj1eFsoUXsXAqRfWd7Ut7OyOxaFZesV8K2CCq6iNC TTUxiHBbg9ZbYyF0lErB+ml+2nfvcLrXGwRXD/QY0h9PKf1pBGgMOszuTirH2fQh KQn5geLAfUPROP19mCLqJigq0l5df6M= -----END CERTIFICATE-----Generated at Thu Mar 26 04:19:14 2026 by rpki-client