$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a075d9a6-0847-3cfe-a202-526dec364124.roa File: a075d9a6-0847-3cfe-a202-526dec364124.roa (raw, json) Hash identifier: dQ8WgwU9Cr+5yooH4LNp+O6mFS5pLf8izW5RQ1fC00o= Subject key identifier: 8B:C7:E7:0C:12:A3:23:F0:73:01:7E:17:60:1C:75:10:B9:50:44:2D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E06AE057E0564248121EC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a075d9a6-0847-3cfe-a202-526dec364124.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:6a:e0:57:e0:56:42:48:12:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=667636cf-b3f3-4ac0-b7d0-5cf92449bfe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8a:9c:f5:a2:45:6d:4b:f7:11:d9:f4:ad:4b: 9c:33:d5:13:83:7d:1a:bd:66:48:e0:8a:51:06:a9: 98:ea:c0:ef:9e:50:62:da:9b:29:28:d1:98:0e:22: 2a:52:7c:4c:0b:ef:21:1e:e9:b1:0f:b2:31:24:4e: 66:9b:4f:4b:ee:00:26:64:a5:e7:f0:d5:82:73:40: b7:bf:35:8a:12:02:b9:dc:13:0f:ab:b7:a7:6b:d1: 7c:6f:e2:dd:bc:10:fb:0c:02:d1:8a:f0:dc:2e:a7: 56:a3:4e:33:11:4b:b8:b2:38:30:3d:37:5d:cc:b4: 6b:59:31:3e:9d:48:0a:b1:f6:e8:83:9e:b1:05:fa: 17:03:44:4d:4b:93:fd:35:76:59:df:9c:b7:ef:c1: 03:65:dd:db:fb:f3:04:2d:52:69:8f:be:f8:07:79: 33:50:69:28:d1:55:86:68:85:e5:35:ec:bb:0e:fd: fa:8e:86:b2:a4:97:9d:6c:fc:ab:7d:4f:a9:eb:2d: 1f:45:6e:49:6e:5f:48:a5:56:96:3c:4f:55:8d:83: 19:c6:6e:c6:5c:b9:fb:e3:7f:f5:c5:45:61:39:18: 7c:6b:8b:9d:d2:8e:d3:3d:48:46:18:35:f4:7a:ab: 70:f1:e3:30:32:21:c6:1d:e6:a1:4d:ee:1d:9d:4f: fd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C7:E7:0C:12:A3:23:F0:73:01:7E:17:60:1C:75:10:B9:50:44:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a075d9a6-0847-3cfe-a202-526dec364124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:e0:42:66:1b:2b:d3:57:28:30:16:47:ba:a7:88:60:e8:02: db:f6:5c:6c:95:6b:1b:5d:b8:b3:70:6f:00:df:d4:57:ce:ed: 7a:ea:7e:ba:4d:dd:a7:cf:bb:79:03:1e:42:eb:fd:73:2b:be: df:26:2c:7e:8b:db:e9:ad:e5:4f:54:0b:5b:70:47:96:8d:5f: 69:6c:80:81:87:3f:e4:d6:62:9a:37:ae:82:37:f0:bc:72:8c: 5d:92:6d:32:53:e0:81:2d:cd:a3:40:1b:e3:58:06:16:7c:06: 46:1d:60:48:2e:4b:a6:c2:10:17:70:26:57:6c:ed:22:46:3f: 1d:00:e9:4e:80:76:0f:5e:27:7e:2d:eb:59:ef:25:c7:78:bf: bb:04:c6:7e:29:05:01:fd:ef:25:6d:a5:0a:5f:e1:f8:aa:42: 6e:14:f2:4e:e9:55:20:30:15:8d:80:7a:db:1a:26:29:0b:3a: 16:62:ee:2b:a6:2d:8e:90:6a:05:71:7e:69:bf:f1:64:58:9d: e3:b6:3c:f5:bb:61:04:b3:a3:21:26:8e:d0:89:c3:5a:f6:ed: f4:0c:aa:d5:03:ea:6a:45:06:c2:f6:8b:cf:62:28:f7:4b:31: 39:79:46:b9:ab:03:51:b5:4b:ec:66:f7:17:34:f8:c5:26:d0: dc:46:8e:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GrgV+BWQkgSHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjY3NjM2Y2YtYjNmMy00YWMwLWI3ZDAtNWNmOTI0NDliZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioqc9aJFbUv3Edn0rUucM9UTg30avWZI4IpR BqmY6sDvnlBi2pspKNGYDiIqUnxMC+8hHumxD7IxJE5mm09L7gAmZKXn8NWCc0C3 vzWKEgK53BMPq7ena9F8b+LdvBD7DALRivDcLqdWo04zEUu4sjgwPTddzLRrWTE+ nUgKsfbog56xBfoXA0RNS5P9NXZZ35y378EDZd3b+/MELVJpj774B3kzUGko0VWG aIXlNey7Dv36joaypJedbPyrfU+p6y0fRW5Jbl9IpVaWPE9VjYMZxm7GXLn743/1 xUVhORh8a4ud0o7TPUhGGDX0eqtw8eMwMiHGHeahTe4dnU/9AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvH5wwSoyPwcwF+F2AcdRC5UEQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTA3NWQ5YTYtMDg0Ny0z Y2ZlLWEyMDItNTI2ZGVjMzY0MTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK33MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3gQmYbK9NXKDAWR7qniGDoAtv2XGyVaxtduLNwbwDf1FfO7XrqfrpN 3afPu3kDHkLr/XMrvt8mLH6L2+mt5U9UC1twR5aNX2lsgIGHP+TWYpo3roI38Lxy jF2SbTJT4IEtzaNAG+NYBhZ8BkYdYEguS6bCEBdwJlds7SJGPx0A6U6Adg9eJ34t 61nvJcd4v7sExn4pBQH97yVtpQpf4fiqQm4U8k7pVSAwFY2AetsaJikLOhZi7ium LY6QagVxfmm/8WRYneO2PPW7YQSzoyEmjtCJw1r27fQMqtUD6mpFBsL2i89iKPdL MTl5RrmrA1G1S+xm9xc0+MUm0NxGjt0= -----END CERTIFICATE-----Generated at Thu Mar 26 20:41:54 2026 by rpki-client