$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9de78308-59ad-33b2-a95c-5da471104942.roa File: 9de78308-59ad-33b2-a95c-5da471104942.roa (raw, json) Hash identifier: COCdNiiWQ6+QtUKNSpJokyVh6Ebo7EJj5HFGTcKCbCU= Subject key identifier: 26:16:52:F0:DC:9C:03:EA:29:A7:58:D0:B7:C8:5F:ED:AB:B2:01:07 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFF9A165E4D5914D1DF80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9de78308-59ad-33b2-a95c-5da471104942.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:ff:9a:16:5e:4d:59:14:d1:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=135c5951-daeb-4080-8d8e-e86d308913b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:50:7d:45:41:f8:df:0d:f7:85:2b:fa:d7:58: a8:43:88:fb:77:0e:0e:fe:25:56:a3:27:81:3b:bd: 5f:f1:ca:9c:dd:ad:ae:a7:b9:f3:5f:18:d9:91:0c: c7:d6:9a:60:a7:a1:88:a0:b0:4e:41:ab:59:b8:99: 26:7b:cc:16:24:7c:57:33:1a:f3:d5:b5:35:fa:4e: a3:b8:be:3d:07:76:16:83:db:47:27:ad:4f:7e:26: 32:ee:64:73:76:be:3e:07:07:48:c4:92:8d:cb:27: 20:35:3e:3f:bc:1b:ea:00:97:da:d5:36:ae:d1:a9: 9d:8f:7a:31:c0:29:f2:d9:a3:7c:3d:0f:9d:c8:31: 95:42:60:5e:1d:73:a8:e6:84:ef:bf:64:74:1a:80: 8b:ed:26:a2:c9:36:54:ab:07:ff:7f:bd:a3:51:f4: d8:76:e5:80:b2:f1:c2:79:dc:78:72:59:44:cc:33: df:cc:f6:2e:83:57:72:f5:75:27:4a:a5:19:56:f5: 69:8d:a3:cb:08:ef:3a:eb:4b:c7:89:4a:16:7e:47: ca:25:54:76:4b:0c:a3:9d:81:f3:4b:59:79:95:c7: 09:6e:6a:39:d7:fb:b7:ea:28:8c:95:8a:1c:35:a0: 4d:05:00:67:9f:69:60:b6:ab:5a:bc:77:87:65:10: f0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:16:52:F0:DC:9C:03:EA:29:A7:58:D0:B7:C8:5F:ED:AB:B2:01:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9de78308-59ad-33b2-a95c-5da471104942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:00:b3:62:f2:00:dc:e9:86:01:44:eb:de:8a:c4:41:d8:0f: b0:0e:24:89:31:a0:50:24:23:7c:1f:af:20:67:2f:db:3f:de: 73:c3:84:5f:20:b7:9c:e2:ff:28:f2:fc:a7:31:2e:7e:d9:65: 71:a0:07:46:a2:03:7f:ec:4a:6d:26:50:a1:99:5b:3d:0f:20: 09:10:e2:01:27:fc:2c:1d:2d:66:48:ad:50:7c:bd:7d:f3:e3: e5:0c:3d:b4:9a:54:95:ba:a4:67:f7:88:32:e0:bd:02:4a:69: d9:15:d8:26:a5:60:31:2a:05:0a:6d:c6:a3:11:e3:16:99:89: 05:5b:84:a1:d1:e2:e5:97:dc:d2:2a:b7:dc:ad:ff:83:39:b1: 9b:85:eb:2d:4a:ca:11:40:09:17:42:a5:cc:98:e0:ec:57:d6: bc:6a:27:2e:e4:fc:78:96:13:97:3f:59:47:c1:a2:98:43:12: 90:43:14:6e:ae:ad:37:77:06:ec:07:8a:63:62:af:3c:c1:22: 6b:16:82:92:60:a6:2d:18:f1:3e:4a:e7:da:a9:d0:10:59:15: c3:cf:65:8c:11:b9:05:60:d7:d4:9d:d2:59:28:17:1e:90:2d: af:07:5e:29:25:a2:f3:31:6f:98:45:cb:93:d2:41:72:0c:13: 4a:40:fc:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/+aFl5NWRTR34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTM1YzU5NTEtZGFlYi00MDgwLThkOGUtZTg2ZDMwODkxM2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FB9RUH43w33hSv611ioQ4j7dw4O/iVWoyeB O71f8cqc3a2up7nzXxjZkQzH1ppgp6GIoLBOQatZuJkme8wWJHxXMxrz1bU1+k6j uL49B3YWg9tHJ61PfiYy7mRzdr4+BwdIxJKNyycgNT4/vBvqAJfa1Tau0amdj3ox wCny2aN8PQ+dyDGVQmBeHXOo5oTvv2R0GoCL7SaiyTZUqwf/f72jUfTYduWAsvHC edx4cllEzDPfzPYug1dy9XUnSqUZVvVpjaPLCO8660vHiUoWfkfKJVR2SwyjnYHz S1l5lccJbmo51/u36iiMlYocNaBNBQBnn2lgtqtavHeHZRDwSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYWUvDcnAPqKadY0LfIX+2rsgEHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWRlNzgzMDgtNTlhZC0z M2IyLWE5NWMtNWRhNDcxMTA0OTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMAs2LyANzphgFE696KxEHYD7AOJIkxoFAkI3wfryBnL9s/3nPDhF8g t5zi/yjy/KcxLn7ZZXGgB0aiA3/sSm0mUKGZWz0PIAkQ4gEn/CwdLWZIrVB8vX3z 4+UMPbSaVJW6pGf3iDLgvQJKadkV2CalYDEqBQptxqMR4xaZiQVbhKHR4uWX3NIq t9yt/4M5sZuF6y1KyhFACRdCpcyY4OxX1rxqJy7k/HiWE5c/WUfBophDEpBDFG6u rTd3BuwHimNirzzBImsWgpJgpi0Y8T5K59qp0BBZFcPPZYwRuQVg19Sd0lkoFx6Q La8HXiklovMxb5hFy5PSQXIME0pA/Oo= -----END CERTIFICATE-----Generated at Thu Mar 26 22:12:19 2026 by rpki-client