$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ffd17f6-ddb9-32a2-96fa-e76964c53448.roa File: 9ffd17f6-ddb9-32a2-96fa-e76964c53448.roa (raw, json) Hash identifier: 3dyuZderhTqUV1LwsZrp2XzJv3vz78+Rx5Sh2we5/Gg= Subject key identifier: 2C:90:99:06:2C:D6:A1:8B:C7:93:FB:D4:49:5E:C6:0B:0C:CD:AE:32 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0AC987EB2B8DE545C2100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ffd17f6-ddb9-32a2-96fa-e76964c53448.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 162.72.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ac:98:7e:b2:b8:de:54:5c:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f903450b-78cc-49fd-bcf5-f87abd7659e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:a4:f6:34:eb:ab:42:fb:38:8f:30:8e:94: 87:64:24:92:9f:0e:4e:49:1d:f9:74:0f:85:19:43: e9:87:4b:23:c6:e6:30:ce:23:15:ae:0c:0b:88:fa: 12:bb:16:a1:db:1a:67:23:25:78:26:b9:10:48:28: 5b:c9:86:01:6a:8b:8a:36:da:78:ff:57:73:21:71: 22:e0:3a:a1:67:e5:ad:a8:a1:31:15:59:ea:83:6a: 5c:d0:f5:73:68:15:6d:ca:41:cf:c1:f7:2c:53:12: d1:bc:c7:d5:a8:c3:6d:5b:ff:6f:ba:28:67:cf:cc: 56:4c:2c:bb:7a:76:dd:a4:31:9d:ab:1b:bc:09:51: 64:4a:e9:43:da:4b:3e:2d:65:93:d0:1e:19:b5:57: 5d:62:f9:f0:dd:b4:95:a6:31:fa:01:3c:cb:8a:9d: 6a:0b:b8:f0:85:65:59:b7:f3:73:bc:8a:a5:65:3a: 37:a5:03:fe:4e:20:37:db:38:35:52:d1:75:05:e7: b9:0d:a2:33:f0:0b:2f:93:7f:18:6f:3c:ff:a6:da: 3e:90:1c:96:e0:cb:c5:b6:8d:76:e3:32:05:94:99: 6f:d3:42:67:36:f7:f0:8d:db:8c:71:93:d1:c0:9b: 74:bb:be:2a:f0:be:14:d2:b1:c1:23:4b:a6:bf:30: a6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:90:99:06:2C:D6:A1:8B:C7:93:FB:D4:49:5E:C6:0B:0C:CD:AE:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ffd17f6-ddb9-32a2-96fa-e76964c53448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:0b:c5:56:d6:6c:7f:29:15:6e:6d:da:5d:0b:f3:25:65:ee: ce:a2:15:e8:16:51:24:ca:81:c7:30:6c:cd:0d:d4:73:bb:50: b1:8e:61:81:78:ba:2f:94:0b:52:75:fb:4c:ef:6d:74:4d:f9: 9b:3e:cc:df:52:4e:76:86:ea:dd:34:60:11:de:39:3f:f3:09: e1:d0:80:8d:44:cf:97:f3:f3:a6:45:b8:38:5c:18:80:1d:7c: ed:88:cc:f9:c7:88:7c:da:9d:d7:82:7c:40:56:db:ba:ea:30: 62:6a:02:fe:6b:c8:48:9f:87:32:7a:39:48:aa:e6:f9:da:d6: 02:a9:07:16:e9:03:f0:e8:5a:66:f7:1a:27:6d:4a:89:3a:39: 53:bf:fc:f4:4f:0a:89:03:1d:1a:d1:36:2f:a3:71:1f:42:08: 32:8f:88:30:d6:c6:81:d5:3e:4d:ef:7e:97:f8:e1:7a:31:d5: 35:7c:9b:c5:9c:0c:af:47:03:d0:43:90:b9:ed:9f:9e:bb:dc: e4:3f:c7:00:6e:2f:fe:b0:1a:72:a8:b0:18:8c:13:f3:9a:40: 16:2c:8c:18:14:75:50:f9:82:3e:ae:20:51:39:9e:69:ef:82: a1:db:b8:68:8d:f4:ab:92:7b:cd:22:25:5f:d6:c7:ef:85:dc: 22:34:bf:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4KyYfrK43lRcIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjkwMzQ1MGItNzhjYy00OWZkLWJjZjUtZjg3YWJkNzY1OWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnqk9jTrq0L7OI8wjpSHZCSSnw5OSR35dA+F GUPph0sjxuYwziMVrgwLiPoSuxah2xpnIyV4JrkQSChbyYYBaouKNtp4/1dzIXEi 4DqhZ+WtqKExFVnqg2pc0PVzaBVtykHPwfcsUxLRvMfVqMNtW/9vuihnz8xWTCy7 enbdpDGdqxu8CVFkSulD2ks+LWWT0B4ZtVddYvnw3bSVpjH6ATzLip1qC7jwhWVZ t/NzvIqlZTo3pQP+TiA32zg1UtF1Bee5DaIz8Asvk38Ybzz/pto+kByW4MvFto12 4zIFlJlv00JnNvfwjduMcZPRwJt0u74q8L4U0rHBI0umvzCmLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyQmQYs1qGLx5P71ElexgsMza4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWZmZDE3ZjYtZGRiOS0z MmEyLTk2ZmEtZTc2OTY0YzUzNDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANALxVbWbH8pFW5t2l0L8yVl7s6iFegWUSTKgccwbM0N1HO7ULGOYYF4 ui+UC1J1+0zvbXRN+Zs+zN9STnaG6t00YBHeOT/zCeHQgI1Ez5fz86ZFuDhcGIAd fO2IzPnHiHzandeCfEBW27rqMGJqAv5ryEifhzJ6OUiq5vna1gKpBxbpA/DoWmb3 GidtSok6OVO//PRPCokDHRrRNi+jcR9CCDKPiDDWxoHVPk3vfpf44Xox1TV8m8Wc DK9HA9BDkLntn5673OQ/xwBuL/6wGnKosBiME/OaQBYsjBgUdVD5gj6uIFE5nmnv gqHbuGiN9KuSe80iJV/Wx++F3CI0vy8= -----END CERTIFICATE-----Generated at Thu Mar 26 04:28:42 2026 by rpki-client