$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c1be859-b42c-3b7e-b47c-e4434a583204.roa File: 9c1be859-b42c-3b7e-b47c-e4434a583204.roa (raw, json) Hash identifier: ZByhDKbLD3RYPIc5pWRoOmyNRVfdouzp+17P2+YecP0= Subject key identifier: 0B:73:7F:AD:36:5F:3D:0A:B3:65:5E:AA:97:BD:82:72:C0:E8:23:67 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFC2311E4198B54190BF60 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c1be859-b42c-3b7e-b47c-e4434a583204.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 75.104.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:c2:31:1e:41:98:b5:41:90:bf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=cf0dbeee-f3b0-4846-b4d9-1082564b5ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:28:dd:e1:15:36:aa:0f:94:d5:be:eb:0b:1c: 05:30:5c:a5:e7:cf:9e:e2:e1:28:6a:c8:98:40:41: d0:92:2e:e1:5e:59:49:59:9b:b9:8d:74:4c:1b:1e: 85:03:25:51:1a:ef:0f:07:8b:54:a1:62:5e:94:b4: 6a:fb:73:db:10:93:c4:b0:68:ef:ad:db:cc:09:81: a3:b5:a3:41:55:31:ed:08:d5:46:c8:da:df:06:0c: 21:e1:93:fc:7c:c4:c4:42:cf:b4:46:96:f6:75:ff: ba:ca:ee:6c:b7:ff:89:ef:31:9b:f2:0b:ec:e9:fa: 56:4b:44:be:70:de:94:98:bf:c6:c2:1f:a8:da:75: e6:60:a6:b0:03:b1:a7:e2:b3:02:da:24:70:ee:c1: e0:48:66:40:08:64:ab:b5:c4:a1:17:10:17:ee:fe: d9:3f:51:84:5d:a3:8a:00:07:30:0e:24:16:a4:70: b0:22:62:ef:d6:84:85:72:a9:40:c1:06:bd:28:3e: 2f:92:12:ff:f0:ce:53:7a:6f:bf:a9:8d:be:3a:71: 8f:4c:d2:20:0b:08:78:c0:39:1f:e7:32:85:87:ff: 32:dc:2f:a0:9e:0e:81:0a:aa:90:ee:ed:eb:c5:df: 33:3e:28:a5:a7:cd:64:37:6b:56:37:8c:05:9a:37: 2e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:73:7F:AD:36:5F:3D:0A:B3:65:5E:AA:97:BD:82:72:C0:E8:23:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c1be859-b42c-3b7e-b47c-e4434a583204.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.104.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ff:cd:be:ad:88:6a:bd:8e:31:cc:a3:af:ad:d9:d3:3c:c0: b6:f2:e8:92:ef:bc:f9:4a:5a:50:1a:c0:f7:ca:d0:8f:46:c5: bb:2c:ac:25:e4:e7:34:19:3c:1d:28:d7:56:4b:5c:95:b2:c9: 7d:14:cf:ca:0b:a2:24:8c:27:00:75:75:a6:3a:61:0d:22:54: 24:da:5e:09:02:38:fd:fa:9d:e6:08:23:14:cf:09:ff:0d:04: ba:49:f6:d9:20:09:fa:ff:03:d9:d3:d5:34:b4:3d:9e:4d:18: d7:96:fc:7d:97:a4:42:43:8b:be:46:a0:c4:8b:30:ba:6d:7b: 5e:51:d7:b7:ed:33:51:77:32:48:54:1c:62:0e:07:4a:e0:e6: e6:8a:6d:a1:11:f0:7c:5f:80:22:ab:46:ca:d0:5d:e4:f1:e4: 96:55:c6:05:db:12:de:d5:6f:80:41:6a:d5:c3:74:d2:fc:41: 9d:a0:4c:13:45:90:80:2e:08:6b:93:c4:8a:db:57:42:23:05: 4d:c1:09:ab:5c:c1:ff:3f:c6:b5:33:d6:4e:05:7e:d3:93:1f: 25:55:82:bf:1e:5a:1c:7d:7a:ef:de:2f:ea:3d:e6:53:1e:e2: ba:e5:58:7d:4a:f9:cb:2b:5e:3a:3f:90:db:96:5a:67:62:c0: 86:7f:94:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k38IxHkGYtUGQv2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2YwZGJlZWUtZjNiMC00ODQ2LWI0ZDktMTA4MjU2NGI1Y2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ijd4RU2qg+U1b7rCxwFMFyl58+e4uEoasiY QEHQki7hXllJWZu5jXRMGx6FAyVRGu8PB4tUoWJelLRq+3PbEJPEsGjvrdvMCYGj taNBVTHtCNVGyNrfBgwh4ZP8fMTEQs+0Rpb2df+6yu5st/+J7zGb8gvs6fpWS0S+ cN6UmL/Gwh+o2nXmYKawA7Gn4rMC2iRw7sHgSGZACGSrtcShFxAX7v7ZP1GEXaOK AAcwDiQWpHCwImLv1oSFcqlAwQa9KD4vkhL/8M5Tem+/qY2+OnGPTNIgCwh4wDkf 5zKFh/8y3C+gng6BCqqQ7u3rxd8zPiilp81kN2tWN4wFmjcuywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtzf602Xz0Ks2Veqpe9gnLA6CNnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWMxYmU4NTktYjQyYy0z YjdlLWI0N2MtZTQ0MzRhNTgzMjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2iJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB//zb6tiGq9jjHMo6+t2dM8wLby6JLvvPlKWlAawPfK0I9GxbssrCXk 5zQZPB0o11ZLXJWyyX0Uz8oLoiSMJwB1daY6YQ0iVCTaXgkCOP36neYIIxTPCf8N BLpJ9tkgCfr/A9nT1TS0PZ5NGNeW/H2XpEJDi75GoMSLMLpte15R17ftM1F3MkhU HGIOB0rg5uaKbaER8HxfgCKrRsrQXeTx5JZVxgXbEt7Vb4BBatXDdNL8QZ2gTBNF kIAuCGuTxIrbV0IjBU3BCatcwf8/xrUz1k4FftOTHyVVgr8eWhx9eu/eL+o95lMe 4rrlWH1K+csrXjo/kNuWWmdiwIZ/lNY= -----END CERTIFICATE-----Generated at Thu Mar 26 15:21:20 2026 by rpki-client