$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ea4b9ce-5069-37ec-84e6-11ef52c683d8.roa File: 9ea4b9ce-5069-37ec-84e6-11ef52c683d8.roa (raw, json) Hash identifier: RtW2jb3Z/UHO9OILJTSsYSdw0MRoMGt+UzMppZfDYes= Subject key identifier: 19:CB:51:FB:39:7A:CA:AF:66:6C:79:85:20:50:3E:20:AA:6D:11:09 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFD0B345F1F7D50524540 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ea4b9ce-5069-37ec-84e6-11ef52c683d8.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fd:0b:34:5f:1f:7d:50:52:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=dbdd0539-5cab-417e-8d2c-2cb5e9a651cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ce:c5:54:66:d9:01:a4:f9:f6:8b:3e:11:be: 3d:e1:32:ea:31:28:de:d5:6e:dd:98:6f:6a:6c:95: 58:a6:cc:dc:e5:20:69:f4:f3:22:98:ad:4d:18:ba: 41:2f:a9:be:0b:ae:59:b5:fc:75:1c:e3:60:b6:38: ba:4b:a7:4a:87:29:2e:7a:c4:83:a3:11:a3:74:e0: 37:65:37:f1:64:b3:87:78:dc:1d:b2:b5:9c:dd:9f: 85:cb:bb:6c:54:d3:73:a0:28:87:bf:87:bd:97:96: fa:42:11:92:2f:19:ca:22:08:7a:4a:8f:6e:99:c6: ce:8b:a8:51:ea:4e:4f:bb:4d:a7:b1:8a:40:d9:45: 49:11:d0:5a:14:a5:f5:40:be:24:44:5e:e0:e0:30: e1:e4:0d:ea:c3:5e:a1:24:7a:0c:8f:e7:8f:05:2b: 27:b0:f9:ee:0c:d4:ee:97:18:bc:18:93:ad:ee:66: 7d:97:c5:04:71:bc:bd:98:47:ac:b4:63:b4:e8:a4: 7f:80:e5:7b:8a:2d:5d:05:29:a2:40:5e:27:75:57: ef:8c:ff:bc:bd:98:89:ff:92:05:bb:f7:db:95:2f: e9:81:0c:14:69:ac:af:b8:07:0e:45:8c:9a:f4:1b: b4:45:7c:4d:14:3b:ce:23:3d:13:06:66:16:ee:28: ba:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CB:51:FB:39:7A:CA:AF:66:6C:79:85:20:50:3E:20:AA:6D:11:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ea4b9ce-5069-37ec-84e6-11ef52c683d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:e8:fa:6c:12:f1:cb:6f:bb:6e:03:64:73:ec:d9:fc:76:f6: bb:21:50:da:b5:ac:55:f7:5f:7c:92:20:91:4e:a3:41:c6:62: d7:df:f3:05:79:cd:22:16:f3:7a:86:38:9e:de:1c:64:55:10: 5a:f5:18:0b:a3:e6:37:1f:53:9a:ef:d2:b0:cf:69:61:a0:fe: 61:e1:e1:cd:53:2d:cd:33:f3:a0:d4:73:a4:d0:79:4f:6e:cf: 60:1d:3a:60:9c:a0:e6:74:33:93:1e:39:b0:6e:49:78:30:0e: e3:24:b1:d4:2f:18:18:cc:a1:ea:23:51:ad:40:f3:54:03:56: 4e:c1:f3:a9:1e:fd:4d:0f:fa:61:22:6a:e0:d2:23:a7:ba:ce: 1d:65:61:b7:77:2d:f8:b7:25:92:89:f0:ca:b3:30:24:0c:e7: 2b:50:49:cd:11:90:c6:36:bf:fd:c0:48:4a:97:26:a9:3b:2c: bf:5f:e4:13:25:da:f5:b6:1e:ec:ff:b3:2f:05:86:8d:23:1d: 06:34:ef:c6:e2:8b:f6:5b:d8:a6:d9:7c:69:f6:a1:18:ab:aa: 3d:08:e3:5c:06:5f:0a:cf:5f:9d:f4:f7:2b:72:a0:09:ad:40: 9d:49:a6:f4:f3:c2:01:81:5e:3a:2c:42:ef:fa:3b:e9:f6:0d: f8:4f:40:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/0LNF8ffVBSRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGJkZDA1MzktNWNhYi00MTdlLThkMmMtMmNiNWU5YTY1MWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc7FVGbZAaT59os+Eb494TLqMSje1W7dmG9q bJVYpszc5SBp9PMimK1NGLpBL6m+C65Ztfx1HONgtji6S6dKhykuesSDoxGjdOA3 ZTfxZLOHeNwdsrWc3Z+Fy7tsVNNzoCiHv4e9l5b6QhGSLxnKIgh6So9umcbOi6hR 6k5Pu02nsYpA2UVJEdBaFKX1QL4kRF7g4DDh5A3qw16hJHoMj+ePBSsnsPnuDNTu lxi8GJOt7mZ9l8UEcby9mEestGO06KR/gOV7ii1dBSmiQF4ndVfvjP+8vZiJ/5IF u/fblS/pgQwUaayvuAcORYya9Bu0RXxNFDvOIz0TBmYW7ii6pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnLUfs5esqvZmx5hSBQPiCqbREJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWVhNGI5Y2UtNTA2OS0z N2VjLTg0ZTYtMTFlZjUyYzY4M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/o+mwS8ctvu24DZHPs2fx29rshUNq1rFX3X3ySIJFOo0HGYtff8wV5 zSIW83qGOJ7eHGRVEFr1GAuj5jcfU5rv0rDPaWGg/mHh4c1TLc0z86DUc6TQeU9u z2AdOmCcoOZ0M5MeObBuSXgwDuMksdQvGBjMoeojUa1A81QDVk7B86ke/U0P+mEi auDSI6e6zh1lYbd3Lfi3JZKJ8MqzMCQM5ytQSc0RkMY2v/3ASEqXJqk7LL9f5BMl 2vW2Huz/sy8Fho0jHQY078bii/Zb2KbZfGn2oRirqj0I41wGXwrPX5309ytyoAmt QJ1JpvTzwgGBXjosQu/6O+n2DfhPQHg= -----END CERTIFICATE-----Generated at Thu Mar 26 18:56:20 2026 by rpki-client