$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa File: a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa (raw, json) Hash identifier: Q13OTRmNG86EW1o3TXpjtb79txTEJ1Tw4iStpATY50E= Subject key identifier: D0:F1:62:AC:6E:FE:3E:73:43:57:4C:09:78:CF:E1:34:5F:05:FB:69 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0AE59DD165E4EDA3C8180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ae:59:dd:16:5e:4e:da:3c:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3da43c99-1106-4d8e-8fc0-0dda475e3d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c1:97:2d:14:45:91:84:6b:15:c7:1d:f0:48: 16:02:3c:ba:8d:93:2f:81:a0:06:51:b3:dc:11:a7: 80:d4:41:0c:e4:4d:01:6a:36:01:c3:15:cd:08:ea: a5:d3:af:33:1f:7e:7a:ff:53:f5:91:09:c8:b4:88: f9:2c:02:4f:f7:67:b7:6a:6f:0f:d0:42:62:c9:e6: 9b:45:4c:03:9b:d3:e8:c0:e5:8c:5c:6f:1f:a1:a3: ef:d5:1e:dd:e8:3d:81:20:b9:fa:31:98:0e:2a:c0: a3:7d:84:f0:ef:be:41:eb:f9:97:48:55:97:10:35: fe:0f:7e:50:9f:15:e4:19:ca:2b:27:f6:ce:37:9b: d2:74:cc:c2:e2:51:9e:5b:c5:78:05:2c:8b:c4:db: 0f:36:61:47:a0:ea:db:4d:03:72:6d:ca:2a:f6:e1: 79:7c:df:1d:20:c2:b2:21:8e:97:d7:66:6a:a9:8d: e5:ef:54:40:0a:79:1d:7f:e5:09:1b:06:ba:1c:64: aa:25:6c:fd:ee:0f:89:45:d7:d2:d9:01:4f:60:ae: 12:3c:22:1f:dd:68:5c:36:ef:ce:13:0d:34:b9:80: 59:d2:1c:ce:34:cd:04:21:69:94:f2:b4:06:40:21: 20:fc:34:7a:02:f6:d2:dd:4d:c1:84:e3:47:33:01: 98:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F1:62:AC:6E:FE:3E:73:43:57:4C:09:78:CF:E1:34:5F:05:FB:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:8c:13:4d:0c:6d:01:d4:07:67:8e:7e:e5:aa:1e:ba:06:1b: 86:da:2d:f1:0e:8f:6a:a3:c3:1f:32:f3:27:f1:14:29:8b:f6: 9a:91:94:fd:06:77:e0:83:84:3c:b1:7a:7d:e4:37:8d:6c:83: d1:f8:db:e4:77:86:77:c9:6b:91:23:a6:87:df:57:3a:9a:6b: 54:2a:c0:f5:50:de:fb:cb:9f:5b:c1:99:8f:48:ee:a6:1b:2b: 4a:1c:84:1c:5b:93:3a:60:6b:79:c4:62:77:47:03:0b:35:1e: 8c:bc:69:d4:d5:29:c8:95:17:db:69:f1:81:eb:a3:46:dd:01: 7f:69:75:54:c0:bc:46:a2:bb:98:d8:2c:50:e5:b1:58:a5:0f: 47:ef:56:85:ca:25:4d:a3:9b:58:d9:a9:f8:04:d6:a6:83:c5: f9:e6:e3:5f:9c:61:7c:c0:d7:29:30:1e:6d:e4:10:59:2a:65: 97:30:09:ff:46:3e:6d:a0:af:1e:ed:f6:15:5b:0f:69:56:ea: ab:01:63:93:22:23:1f:ad:cc:d8:a2:2c:92:be:89:2e:00:34: fd:c2:97:f4:a9:e5:f2:89:08:c7:06:85:69:00:3b:94:05:46: b9:d2:60:07:e9:9d:fc:30:ba:cb:84:a0:20:87:44:73:de:6e: e8:76:ab:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4K5Z3RZeTto8gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk M2RhNDNjOTktMTEwNi00ZDhlLThmYzAtMGRkYTQ3NWUzZDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMGXLRRFkYRrFccd8EgWAjy6jZMvgaAGUbPc EaeA1EEM5E0BajYBwxXNCOql068zH356/1P1kQnItIj5LAJP92e3am8P0EJiyeab RUwDm9PowOWMXG8foaPv1R7d6D2BILn6MZgOKsCjfYTw775B6/mXSFWXEDX+D35Q nxXkGcorJ/bON5vSdMzC4lGeW8V4BSyLxNsPNmFHoOrbTQNybcoq9uF5fN8dIMKy IY6X12ZqqY3l71RACnkdf+UJGwa6HGSqJWz97g+JRdfS2QFPYK4SPCIf3WhcNu/O Ew00uYBZ0hzONM0EIWmU8rQGQCEg/DR6AvbS3U3BhONHMwGYjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDxYqxu/j5zQ1dMCXjP4TRfBftpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTI4ZTFjOTctMDVhOS0z NmUyLWFiYmYtMDA5Y2Q0ZDgwOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaME00MbQHUB2eOfuWqHroGG4baLfEOj2qjwx8y8yfxFCmL9pqRlP0G d+CDhDyxen3kN41sg9H42+R3hnfJa5EjpoffVzqaa1QqwPVQ3vvLn1vBmY9I7qYb K0ochBxbkzpga3nEYndHAws1Hoy8adTVKciVF9tp8YHro0bdAX9pdVTAvEaiu5jY LFDlsVilD0fvVoXKJU2jm1jZqfgE1qaDxfnm41+cYXzA1ykwHm3kEFkqZZcwCf9G Pm2grx7t9hVbD2lW6qsBY5MiIx+tzNiiLJK+iS4ANP3Cl/Sp5fKJCMcGhWkAO5QF RrnSYAfpnfwwusuEoCCHRHPebuh2q1o= -----END CERTIFICATE-----Generated at Thu Mar 26 04:42:02 2026 by rpki-client