$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa File: 8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa (raw, json) Hash identifier: yRT/1c5Vlz9L5Wgbk1NJfoNSGCYBqT0DiMs1dNx1DCU= Subject key identifier: 18:D8:D3:17:D4:7B:08:2E:C6:54:8D:34:F3:5A:7C:1F:DE:38:33:71 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B9EACEB1400C4DC20470 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b9:ea:ce:b1:40:0c:4d:c2:04:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=403b7ec3-f67a-418e-8e21-b9f9cb86e93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:03:88:c7:0b:49:86:44:58:f4:d6:0e:64: d0:76:d4:b1:39:47:bf:00:fc:a6:3b:79:61:0a:e9: cd:af:7b:d0:9c:86:0c:2d:ae:91:df:b0:fa:d0:f1: 3b:18:b2:d0:8c:53:59:17:4c:c5:a9:d7:95:8c:d2: 27:d1:38:71:9b:92:87:50:04:d5:16:63:4b:a4:17: 2f:ab:ae:d6:ad:b1:db:40:16:b5:9d:f4:86:0c:ca: cb:05:01:fa:5a:2b:f8:c7:e2:c2:0a:b0:0c:c4:b5: 91:0c:a0:99:d3:45:9d:63:d7:ac:55:a2:74:51:9b: fc:37:bd:06:44:2e:e9:a5:ac:0a:27:50:ed:d2:6a: d1:6e:c7:ea:95:b5:b3:83:9e:2f:d8:c4:eb:11:18: 55:9f:5a:19:f3:f5:e2:95:93:64:fb:7b:bc:4b:24: 08:e4:0f:76:13:35:17:e3:22:14:c4:30:e3:fb:73: 3b:a3:bf:29:be:f7:f0:c4:d4:ad:5c:6a:43:29:22: e0:26:2f:05:6a:bd:8e:99:97:95:bd:f6:67:1d:8d: 42:a9:16:5f:ae:14:fe:55:81:52:bc:f4:cc:ea:27: 50:6b:ea:31:82:6d:92:8a:7a:ff:69:37:e5:fb:55: a7:76:ce:f5:80:e2:27:08:5e:e1:ab:c9:eb:fe:a8: 42:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D8:D3:17:D4:7B:08:2E:C6:54:8D:34:F3:5A:7C:1F:DE:38:33:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:d6:8e:c3:0a:4f:4c:3a:74:ec:e7:21:8e:21:15:d7:14:0c: f9:f1:1b:e0:74:8d:88:6c:42:0e:90:34:77:fc:94:83:1f:6a: 5d:be:90:79:c8:fd:62:5b:16:f7:a4:c4:2d:0b:7b:d2:29:ad: 71:2d:1b:88:87:b6:29:51:9a:a6:3d:d0:e6:59:32:f7:55:b0: aa:da:3c:64:45:c4:98:1e:e6:5a:7d:e6:06:02:66:e5:77:e2: d0:68:46:0d:72:67:1f:4a:43:97:1b:f7:53:60:11:68:07:59: 0d:e1:13:68:f4:51:b2:99:c6:48:ad:a8:c3:e5:eb:8c:a6:f3: 56:72:e3:5c:66:e3:7a:37:0a:27:64:db:b0:2a:0d:2c:4a:78: 41:59:9b:54:82:31:a8:9a:cc:28:9d:af:8e:dd:50:a3:b1:58: 1c:05:9f:31:51:af:2e:db:35:c2:af:79:8a:19:fb:5c:e9:46: a8:82:25:a1:9d:e0:34:19:32:41:06:3e:55:20:b3:19:0d:eb: 40:b0:34:d9:ad:e8:48:b2:7c:56:1a:46:15:f9:5c:fd:d7:35: 43:78:4f:70:10:6c:ac:e4:d5:84:37:16:da:c2:1f:27:82:4e: 25:7a:92:13:b4:6c:41:ca:6d:b7:37:27:2c:f7:18:15:a4:04: 41:99:1b:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LnqzrFADE3CBHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDAzYjdlYzMtZjY3YS00MThlLThlMjEtYjlmOWNiODZlOTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNIDiMcLSYZEWPTWDmTQdtSxOUe/APymO3lh CunNr3vQnIYMLa6R37D60PE7GLLQjFNZF0zFqdeVjNIn0Thxm5KHUATVFmNLpBcv q67WrbHbQBa1nfSGDMrLBQH6Wiv4x+LCCrAMxLWRDKCZ00WdY9esVaJ0UZv8N70G RC7ppawKJ1Dt0mrRbsfqlbWzg54v2MTrERhVn1oZ8/XilZNk+3u8SyQI5A92EzUX 4yIUxDDj+3M7o78pvvfwxNStXGpDKSLgJi8Far2OmZeVvfZnHY1CqRZfrhT+VYFS vPTM6idQa+oxgm2Sinr/aTfl+1Wnds71gOInCF7hq8nr/qhCzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjY0xfUewguxlSNNPNafB/eODNxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGZmYTViNjctM2Q2ZC0z OWNiLTg3YzItMDI3ZTk5OGRiZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTWjsMKT0w6dOznIY4hFdcUDPnxG+B0jYhsQg6QNHf8lIMfal2+kHnI /WJbFvekxC0Le9IprXEtG4iHtilRmqY90OZZMvdVsKraPGRFxJge5lp95gYCZuV3 4tBoRg1yZx9KQ5cb91NgEWgHWQ3hE2j0UbKZxkitqMPl64ym81Zy41xm43o3Cidk 27AqDSxKeEFZm1SCMaiazCidr47dUKOxWBwFnzFRry7bNcKveYoZ+1zpRqiCJaGd 4DQZMkEGPlUgsxkN60CwNNmt6EiyfFYaRhX5XP3XNUN4T3AQbKzk1YQ3FtrCHyeC TiV6khO0bEHKbbc3Jyz3GBWkBEGZG0Q= -----END CERTIFICATE-----Generated at Thu Mar 26 08:31:03 2026 by rpki-client