$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e5f4a44-d5ff-3f43-9eea-e2712b9f6c27.roa File: 8e5f4a44-d5ff-3f43-9eea-e2712b9f6c27.roa (raw, json) Hash identifier: jnIunZkLxXRKhjrTVz79m1JYDNhM8VjUikR1K0QYePg= Subject key identifier: 9D:DC:FD:3F:72:50:E3:31:22:02:A9:32:CC:EA:32:41:17:26:A6:30 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFF83E4508A96DE31C4F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e5f4a44-d5ff-3f43-9eea-e2712b9f6c27.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:f8:3e:45:08:a9:6d:e3:1c:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b9adc49a-4838-4b2a-8673-591d9abf4e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:95:d1:70:e7:f9:02:fa:48:69:62:ad:5e:aa: 6b:2f:a2:56:43:61:9c:4b:6d:19:4d:5f:7d:6b:1a: 2e:32:68:3b:99:1a:db:e3:89:27:b1:de:c7:42:0f: c6:fb:00:4a:5b:2e:02:de:92:ae:51:45:2a:d0:b2: 06:2a:2e:65:1a:5b:56:9a:18:b1:48:b1:62:76:11: e0:ab:8c:87:c2:23:00:e4:be:3c:a9:10:e5:29:d8: f2:3d:2c:31:d5:c8:cc:b8:1d:a7:d9:89:b6:0c:c0: 78:fa:e6:d5:dd:33:42:2b:1f:63:59:a6:42:92:f2: 38:f5:5a:e4:5f:b0:5b:22:51:84:b6:99:d6:dd:be: 43:33:66:a8:82:2d:bb:9a:9b:01:8a:2f:c1:77:c4: 59:72:0a:70:32:bb:5f:32:ae:db:96:1d:15:c4:53: 53:a2:fd:e3:eb:68:2a:4b:e7:33:f0:b2:cc:c6:80: f4:ad:cb:5f:83:dc:1a:8d:c6:66:3a:97:25:48:1c: f8:19:d2:18:66:5a:9d:c4:91:83:1f:5c:ef:4e:d6: b6:9f:18:e3:da:0a:8b:f2:58:49:d5:f1:47:ad:40: be:21:fd:c2:09:34:c0:84:fb:54:2f:8d:3b:94:54: db:b0:54:c1:78:4c:98:11:16:38:6a:f4:f7:d7:53: a2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DC:FD:3F:72:50:E3:31:22:02:A9:32:CC:EA:32:41:17:26:A6:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e5f4a44-d5ff-3f43-9eea-e2712b9f6c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:16:ab:23:b0:ee:20:9b:c8:20:d6:a3:4c:e3:a3:18:3a:d0: 35:66:34:19:a6:22:b6:f4:e0:0e:97:cc:8b:3c:38:7d:34:66: a8:40:e7:a0:44:76:c9:c9:28:5a:c3:2c:0e:42:12:3a:89:a3: 13:c5:54:65:89:3a:2e:76:3a:b7:35:fa:31:67:40:16:a0:75: fc:bd:41:0e:fb:8e:f0:fc:36:26:18:9e:8f:f5:23:f5:d3:33: f6:74:fd:97:8f:f1:96:59:a0:5e:cf:33:22:35:c3:67:05:db: 25:af:12:eb:8a:0a:18:6d:02:76:7c:af:94:d0:9b:a4:32:5a: a5:db:d2:33:6b:ff:6c:8b:5d:57:22:13:dc:89:d2:f5:54:95: b4:ab:5f:0b:33:a9:f0:cf:91:91:d1:52:64:aa:07:a9:75:16: 57:3f:d6:51:44:6f:d8:6b:83:a4:14:66:ac:da:12:07:b4:a7: 4d:c0:1b:3f:ea:5a:9f:36:3f:b8:57:d2:5d:7b:90:48:41:24: 7d:51:a2:1d:80:c1:26:29:d0:c5:4c:06:3d:0b:b4:28:a5:66: 6b:81:1d:03:c9:c0:47:7b:02:fb:e0:84:dc:6e:66:26:70:22: 19:90:ac:24:2e:3e:b5:7e:bd:5c:4d:0d:c2:ab:2c:45:ab:8d: 65:5b:4a:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/g+RQipbeMcTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjlhZGM0OWEtNDgzOC00YjJhLTg2NzMtNTkxZDlhYmY0ZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJXRcOf5AvpIaWKtXqprL6JWQ2GcS20ZTV99 axouMmg7mRrb44knsd7HQg/G+wBKWy4C3pKuUUUq0LIGKi5lGltWmhixSLFidhHg q4yHwiMA5L48qRDlKdjyPSwx1cjMuB2n2Ym2DMB4+ubV3TNCKx9jWaZCkvI49Vrk X7BbIlGEtpnW3b5DM2aogi27mpsBii/Bd8RZcgpwMrtfMq7blh0VxFNTov3j62gq S+cz8LLMxoD0rctfg9wajcZmOpclSBz4GdIYZlqdxJGDH1zvTta2nxjj2gqL8lhJ 1fFHrUC+If3CCTTAhPtUL407lFTbsFTBeEyYERY4avT311OifQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3c/T9yUOMxIgKpMszqMkEXJqYwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGU1ZjRhNDQtZDVmZi0z ZjQzLTllZWEtZTI3MTJiOWY2YzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4WqyOw7iCbyCDWo0zjoxg60DVmNBmmIrb04A6XzIs8OH00ZqhA56BE dsnJKFrDLA5CEjqJoxPFVGWJOi52Orc1+jFnQBagdfy9QQ77jvD8NiYYno/1I/XT M/Z0/ZeP8ZZZoF7PMyI1w2cF2yWvEuuKChhtAnZ8r5TQm6QyWqXb0jNr/2yLXVci E9yJ0vVUlbSrXwszqfDPkZHRUmSqB6l1Flc/1lFEb9hrg6QUZqzaEge0p03AGz/q Wp82P7hX0l17kEhBJH1Roh2AwSYp0MVMBj0LtCilZmuBHQPJwEd7AvvghNxuZiZw IhmQrCQuPrV+vVxNDcKrLEWrjWVbSiY= -----END CERTIFICATE-----Generated at Thu Mar 26 04:19:14 2026 by rpki-client