$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/908acec5-dff3-31a9-9913-a2e2cc620be8.roa File: 908acec5-dff3-31a9-9913-a2e2cc620be8.roa (raw, json) Hash identifier: py93DzjooAiFukOr8sntOyAy0xqTJqY1ZviqA1u+0KI= Subject key identifier: F9:B3:10:F7:E1:74:29:4A:1F:7A:1D:37:09:52:62:82:D4:5F:F8:05 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0AE72CA03940C375E9DA0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/908acec5-dff3-31a9-9913-a2e2cc620be8.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ae:72:ca:03:94:0c:37:5e:9d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=226f9986-6303-4ba9-a195-affaf63df01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:30:0d:aa:59:d0:6d:a5:fb:6e:cd:ba:55: fc:d8:c5:af:d1:1e:a2:08:54:ba:6f:8f:ad:f0:34: 0d:1a:3e:8c:75:d3:77:cf:32:48:da:28:e8:5a:f9: 52:32:75:c3:f2:49:3d:3a:cd:0f:94:b1:d3:a2:a4: 98:66:d4:dd:98:77:b3:04:72:78:0a:a0:dc:9e:b0: 4c:ef:a8:ef:bc:a7:00:c9:a3:31:9b:54:e0:16:bf: 00:d3:17:5a:74:d9:91:1f:da:b0:7c:73:57:5c:51: ea:0c:1a:bc:54:87:c3:29:94:29:f1:c8:43:83:de: 22:46:45:21:79:1a:34:4a:0b:c0:90:8e:7a:95:5f: 8d:a6:e6:1e:f6:67:29:35:5d:73:a3:37:b1:71:21: d5:88:bf:90:0b:51:4c:22:52:66:66:44:0e:96:81: 2d:25:e1:e1:2f:24:5a:f8:32:b3:ae:cd:94:a0:31: d2:0b:bf:d1:4f:66:82:75:10:f7:2c:33:54:93:0e: 77:a9:33:7d:65:9a:2e:f5:ba:fb:31:26:90:a9:f1: 17:59:0e:f8:dd:c1:e8:60:27:8f:ee:91:89:1c:b7: 1d:8d:65:8e:f7:c3:86:35:01:fb:1e:1d:12:e4:0f: ee:52:2d:57:06:ed:d5:64:f8:10:cb:92:fb:ad:8a: 74:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B3:10:F7:E1:74:29:4A:1F:7A:1D:37:09:52:62:82:D4:5F:F8:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/908acec5-dff3-31a9-9913-a2e2cc620be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:af:9b:76:e4:6f:40:33:bc:ad:38:c5:e1:f4:e4:c2:4a:01: e1:5f:48:5f:c4:b4:64:85:8b:24:34:60:e0:eb:21:dc:13:ec: d6:09:d6:40:89:7b:87:91:7e:7c:05:b2:23:ca:ac:ba:34:f1: 23:78:92:57:3c:83:f2:54:b3:f3:21:49:dd:6d:65:3d:82:07: 82:9f:be:c4:81:2a:c6:09:27:ab:20:73:25:86:90:e0:b7:20: 4f:ac:16:5b:aa:1b:e9:46:3c:1b:8f:a6:5e:0a:50:b1:98:1f: 2f:2f:d5:cf:00:53:34:e5:0e:45:b7:0c:e3:05:9a:a9:09:b4: ba:09:ce:ba:d1:10:fa:b9:0c:fa:e2:ba:40:86:d0:30:6a:cb: 93:bd:23:23:0d:5b:2f:df:ff:dd:a8:82:6f:0e:85:75:5a:81: cd:d0:47:4e:29:28:36:bc:a9:1a:ec:7a:46:29:8f:10:a6:d8: d2:5b:5a:cf:37:48:b9:88:7c:42:3e:a2:d3:6b:a0:c0:cb:d5: b9:63:61:68:b6:6b:d7:1d:92:9b:0e:08:b2:97:89:7a:c5:4a: 14:c1:0f:70:60:8c:fa:74:7a:c0:cf:3b:b3:6b:9d:61:29:18: 92:30:fd:bd:69:26:24:cb:11:a7:27:ee:15:79:57:2c:8c:fc: e9:67:a8:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4K5yygOUDDdenaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjI2Zjk5ODYtNjMwMy00YmE5LWExOTUtYWZmYWY2M2RmMDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxUwDapZ0G2l+27NulX82MWv0R6iCFS6b4+t 8DQNGj6MddN3zzJI2ijoWvlSMnXD8kk9Os0PlLHToqSYZtTdmHezBHJ4CqDcnrBM 76jvvKcAyaMxm1TgFr8A0xdadNmRH9qwfHNXXFHqDBq8VIfDKZQp8chDg94iRkUh eRo0SgvAkI56lV+NpuYe9mcpNV1zozexcSHViL+QC1FMIlJmZkQOloEtJeHhLyRa +DKzrs2UoDHSC7/RT2aCdRD3LDNUkw53qTN9ZZou9br7MSaQqfEXWQ743cHoYCeP 7pGJHLcdjWWO98OGNQH7Hh0S5A/uUi1XBu3VZPgQy5L7rYp0QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmzEPfhdClKH3odNwlSYoLUX/gFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTA4YWNlYzUtZGZmMy0z MWE5LTk5MTMtYTJlMmNjNjIwYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACavm3bkb0AzvK04xeH05MJKAeFfSF/EtGSFiyQ0YODrIdwT7NYJ1kCJ e4eRfnwFsiPKrLo08SN4klc8g/JUs/MhSd1tZT2CB4KfvsSBKsYJJ6sgcyWGkOC3 IE+sFluqG+lGPBuPpl4KULGYHy8v1c8AUzTlDkW3DOMFmqkJtLoJzrrREPq5DPri ukCG0DBqy5O9IyMNWy/f/92ogm8OhXVagc3QR04pKDa8qRrsekYpjxCm2NJbWs83 SLmIfEI+otNroMDL1bljYWi2a9cdkpsOCLKXiXrFShTBD3BgjPp0esDPO7NrnWEp GJIw/b1pJiTLEacn7hV5VyyM/OlnqFg= -----END CERTIFICATE-----Generated at Thu Mar 26 06:07:11 2026 by rpki-client