$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9966b560-34b9-37b5-91ae-6ba940d7ec5c.roa File: 9966b560-34b9-37b5-91ae-6ba940d7ec5c.roa (raw, json) Hash identifier: +1LSKm97z4mO70ztky0dYB8GL3c+XvczktACTKNFkDM= Subject key identifier: 61:A1:10:02:9F:76:48:BD:35:DE:C9:99:B1:39:B7:45:E0:9D:8C:32 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFB9ECC99C96B2829E7D80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9966b560-34b9-37b5-91ae-6ba940d7ec5c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:b9:ec:c9:9c:96:b2:82:9e:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=678a5408-2e0e-4bad-a2be-aea3c3ea4f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:08:2b:fb:53:f8:b4:85:d4:23:7f:37:24:3e: f5:13:64:d5:f4:e8:1b:74:48:4d:4d:a5:ef:4d:42: 6f:4e:84:c3:a9:99:4e:d9:b0:af:26:39:ab:c5:88: db:3a:f5:71:6c:9c:70:a1:5e:2b:05:2b:92:69:6c: ea:0e:2a:bc:59:7b:96:25:f4:c8:29:23:16:24:53: 0a:f5:f1:cf:7b:70:cc:ab:2f:af:d6:44:8f:17:05: 01:d8:70:8f:59:bd:ed:fa:c3:f9:f7:f7:fd:f7:2f: 2f:40:20:fd:ba:ce:1e:10:90:03:c6:52:5c:09:d5: 8f:2d:6e:c6:9a:5c:1a:ce:66:04:64:ef:e4:93:13: a2:ae:2a:42:8a:f7:b2:72:94:a7:b5:8a:eb:54:61: 64:69:1c:ab:ce:d9:8d:65:db:31:34:3a:29:10:e1: 63:20:38:2f:d8:36:80:ec:6d:7d:2c:7f:98:b7:f9: 03:26:8a:b1:d9:90:47:52:4d:d2:ac:87:7b:f9:5b: 9e:53:86:3e:95:f8:ef:6c:a7:67:fa:1f:6e:77:f2: 16:37:39:34:57:dd:cb:95:09:91:3b:d7:23:ec:90: c0:12:8b:14:21:69:c7:95:ad:d6:9f:f7:c4:2b:70: bc:ef:2a:ab:8a:b1:67:ff:1e:78:46:84:99:2a:03: 5c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A1:10:02:9F:76:48:BD:35:DE:C9:99:B1:39:B7:45:E0:9D:8C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9966b560-34b9-37b5-91ae-6ba940d7ec5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ea:f1:ce:78:09:71:7d:72:41:c3:68:34:2f:71:9e:8c:b1: ce:8b:46:52:89:b9:88:e5:70:a7:53:62:56:4b:50:c7:60:e7: 05:a4:10:fe:51:a7:dd:45:ce:e8:b5:84:42:1d:c8:f8:69:5e: 8f:24:c0:ae:9f:b7:04:43:b3:0c:07:9c:82:60:2a:a7:dc:de: 81:e6:ae:12:5a:5a:4d:39:84:14:05:3e:31:9c:71:f5:3d:b7: 7d:e0:aa:5c:15:e5:7f:96:5d:99:69:e0:c0:55:c2:89:b8:30: 6f:1e:fa:f6:c8:d5:49:9d:0e:f0:09:4f:f3:0c:b6:82:f3:49: fd:ff:00:77:fc:29:bb:3e:39:df:ed:78:1c:7e:67:66:c6:be: 80:0a:98:a2:35:14:62:2a:6b:27:f3:f2:63:83:cc:d2:c5:80: 09:2e:bc:27:06:2f:35:de:36:1e:fb:7c:6a:f3:5d:89:c7:c5: 89:c7:22:32:c9:7b:37:a5:cb:3b:5d:fc:01:6f:bb:05:bb:4d: 4e:85:f9:10:42:22:38:a4:23:c6:31:32:d0:f5:a4:74:b6:d6: 32:89:38:58:1d:32:b1:09:7e:8d:44:76:eb:00:af:28:5e:ca: b6:03:c7:27:bc:bb:05:89:c5:de:c0:e8:9d:1f:2a:e9:68:fc: 30:a3:c4:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37nsyZyWsoKefYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Njc4YTU0MDgtMmUwZS00YmFkLWEyYmUtYWVhM2MzZWE0ZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAgr+1P4tIXUI383JD71E2TV9OgbdEhNTaXv TUJvToTDqZlO2bCvJjmrxYjbOvVxbJxwoV4rBSuSaWzqDiq8WXuWJfTIKSMWJFMK 9fHPe3DMqy+v1kSPFwUB2HCPWb3t+sP59/f99y8vQCD9us4eEJADxlJcCdWPLW7G mlwazmYEZO/kkxOiripCiveycpSntYrrVGFkaRyrztmNZdsxNDopEOFjIDgv2DaA 7G19LH+Yt/kDJoqx2ZBHUk3SrId7+VueU4Y+lfjvbKdn+h9ud/IWNzk0V93LlQmR O9cj7JDAEosUIWnHla3Wn/fEK3C87yqrirFn/x54RoSZKgNclwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGhEAKfdki9Nd7JmbE5t0XgnYwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTk2NmI1NjAtMzRiOS0z N2I1LTkxYWUtNmJhOTQwZDdlYzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjq8c54CXF9ckHDaDQvcZ6Msc6LRlKJuYjlcKdTYlZLUMdg5wWkEP5R p91Fzui1hEIdyPhpXo8kwK6ftwRDswwHnIJgKqfc3oHmrhJaWk05hBQFPjGccfU9 t33gqlwV5X+WXZlp4MBVwom4MG8e+vbI1UmdDvAJT/MMtoLzSf3/AHf8Kbs+Od/t eBx+Z2bGvoAKmKI1FGIqayfz8mODzNLFgAkuvCcGLzXeNh77fGrzXYnHxYnHIjLJ ezelyztd/AFvuwW7TU6F+RBCIjikI8YxMtD1pHS21jKJOFgdMrEJfo1EdusAryhe yrYDxye8uwWJxd7A6J0fKulo/DCjxHY= -----END CERTIFICATE-----Generated at Thu Mar 26 17:41:39 2026 by rpki-client