$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa File: 9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa (raw, json) Hash identifier: 7LxBUrpvCJgaQWJ3mVQ/IJdRPiSrT/kg1hp7wnhgpg0= Subject key identifier: 7C:BF:EA:FF:08:EB:9C:8D:63:D8:D2:6E:31:73:68:26:BD:93:17:71 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E067382AE8222217E17D00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:67:38:2a:e8:22:22:17:e1:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3c191336-33ce-46e5-8e0c-31830ec1aaec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d6:9f:9f:0e:8e:f5:b6:16:b0:fb:1c:97:96: 0f:31:17:05:f0:a9:0d:2e:fc:2b:c8:e5:7d:9c:24: 68:84:f1:5e:0e:6d:ca:ff:7b:06:b8:c6:7a:13:bf: ad:ba:76:2d:7d:3a:7b:c8:31:6d:0a:08:a4:75:a4: 42:4f:2c:45:6f:20:e2:f9:39:bf:6a:a3:4d:30:77: 4d:e3:09:b0:8a:e7:aa:26:17:92:1a:b4:dd:dd:b7: 4f:a6:f9:25:14:43:cf:b6:8e:53:4d:00:97:24:d9: 2f:28:bc:9a:8d:c8:e1:18:5c:ee:ab:db:9f:a2:e5: 9d:13:26:11:f5:e1:ee:d7:1f:7c:5a:37:8f:90:7d: 1e:93:e4:0a:ed:b8:bb:8b:29:65:eb:7d:fd:16:32: 6e:78:8b:f4:eb:1c:d4:63:ae:27:98:70:91:b8:56: 90:e5:67:09:10:da:df:ea:39:71:51:85:c4:f2:0b: b8:ff:b3:31:bd:7d:2e:40:f2:bd:d2:2c:eb:cc:4f: 19:72:c4:f8:75:2e:64:5d:39:16:22:3b:f4:df:76: 9d:0e:4b:ab:18:23:a5:16:25:9f:75:f6:0d:af:5d: 14:d8:d0:07:46:b2:c9:7d:9f:e7:12:54:50:1e:32: c5:04:8e:10:56:0b:c8:20:e4:d5:91:3c:11:68:88: 06:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BF:EA:FF:08:EB:9C:8D:63:D8:D2:6E:31:73:68:26:BD:93:17:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5c:c7:ec:08:a5:18:24:b8:84:bb:59:ac:ab:b2:64:c4:12: a5:6f:c9:16:42:41:fc:43:02:3b:83:c1:fa:b4:a6:f2:55:4a: 90:b5:74:40:6f:0f:e1:c5:d4:9e:21:ae:be:d7:bc:cf:d0:a8: 3f:00:a0:55:e9:0f:14:5c:f2:6b:e2:72:70:52:e5:5f:03:1d: 18:48:64:8a:b6:84:4f:5e:20:da:ca:c2:7f:82:1a:36:18:8b: 32:52:a4:f1:b2:4d:19:b1:48:ea:c3:e9:df:24:7f:f6:07:4f: 12:32:32:5a:9b:5e:fb:97:70:f7:ea:36:cb:87:55:2d:5e:80: 9e:c3:d6:0c:f2:73:f3:21:16:c2:f5:fa:f3:42:bd:20:1d:f5: e2:e3:18:d0:76:61:c1:e2:bb:07:90:f1:fa:6a:e0:45:32:c1: ff:f0:5e:6e:a9:98:c0:39:6b:c2:1f:9d:09:b9:6f:c2:b8:ad: de:01:fa:ad:8c:ff:48:2e:91:d7:e6:49:a6:6b:c9:f9:73:15: 54:06:ec:63:53:ba:2f:29:8a:bb:fa:08:2d:be:81:ad:62:fd: 32:cb:c0:e3:c9:05:8b:f0:69:23:5e:09:de:5f:22:2b:a4:ef: b9:f4:21:28:c3:1b:8a:f3:a3:d7:be:3a:95:26:ed:47:1b:e8: ce:42:99:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Gc4KugiIhfhfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk M2MxOTEzMzYtMzNjZS00NmU1LThlMGMtMzE4MzBlYzFhYWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdafnw6O9bYWsPscl5YPMRcF8KkNLvwryOV9 nCRohPFeDm3K/3sGuMZ6E7+tunYtfTp7yDFtCgikdaRCTyxFbyDi+Tm/aqNNMHdN 4wmwiueqJheSGrTd3bdPpvklFEPPto5TTQCXJNkvKLyajcjhGFzuq9ufouWdEyYR 9eHu1x98WjePkH0ek+QK7bi7iyll6339FjJueIv06xzUY64nmHCRuFaQ5WcJENrf 6jlxUYXE8gu4/7MxvX0uQPK90izrzE8ZcsT4dS5kXTkWIjv033adDkurGCOlFiWf dfYNr10U2NAHRrLJfZ/nElRQHjLFBI4QVgvIIOTVkTwRaIgGaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHy/6v8I65yNY9jSbjFzaCa9kxdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWJhYzJkNWItZTJjZi0z NzM3LTkyODctMWJkZDkxNjc0OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhcx+wIpRgkuIS7WayrsmTEEqVvyRZCQfxDAjuDwfq0pvJVSpC1dEBv D+HF1J4hrr7XvM/QqD8AoFXpDxRc8mvicnBS5V8DHRhIZIq2hE9eINrKwn+CGjYY izJSpPGyTRmxSOrD6d8kf/YHTxIyMlqbXvuXcPfqNsuHVS1egJ7D1gzyc/MhFsL1 +vNCvSAd9eLjGNB2YcHiuweQ8fpq4EUywf/wXm6pmMA5a8IfnQm5b8K4rd4B+q2M /0gukdfmSaZryflzFVQG7GNTui8pirv6CC2+ga1i/TLLwOPJBYvwaSNeCd5fIiuk 77n0ISjDG4rzo9e+OpUm7Ucb6M5CmWY= -----END CERTIFICATE-----Generated at Thu Mar 26 07:35:53 2026 by rpki-client