$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3531ffe-605f-35af-9ff5-c15d70405a20.roa File: a3531ffe-605f-35af-9ff5-c15d70405a20.roa (raw, json) Hash identifier: aakKv1Xwixq045J0qlZEj5CsIAXqamUV89d0oMJv/Ug= Subject key identifier: 8F:F4:1E:28:FA:99:B2:F1:78:DA:C8:C1:43:EC:E9:74:5D:90:9C:86 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0AFEED70D1FDCE0A39280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3531ffe-605f-35af-9ff5-c15d70405a20.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:af:ee:d7:0d:1f:dc:e0:a3:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=17c5c501-8e23-48fa-ab43-65781224a1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:20:79:06:fd:07:3d:bf:3b:09:db:88:ce:28: 1e:e6:3e:a5:a3:d4:6b:f9:42:d6:99:29:c0:df:19: fc:ff:4d:c8:03:ec:61:cc:60:f8:c4:e3:b5:f7:98: 1f:59:9e:ae:0d:43:53:95:a1:39:f4:7b:bb:af:50: 31:7c:84:ff:7a:de:6c:a4:16:ce:2b:37:e2:77:d2: f5:1e:18:2c:02:a5:5f:7a:e5:3c:46:85:5d:40:ed: f6:89:83:60:67:da:e1:93:2c:b7:79:49:1d:31:dc: 67:6f:29:7a:27:4a:a8:e6:bd:65:e7:f9:14:0f:f0: d7:83:81:7e:35:a5:38:86:5d:34:a9:f4:43:3c:5e: 6a:5f:7b:53:c5:33:5a:ff:f3:53:5f:86:c5:31:7b: 81:e1:3d:d0:64:41:9a:26:f0:ea:6c:e4:72:3f:db: 2d:a9:33:52:72:5f:bb:e2:4b:57:74:cd:1b:43:44: 7d:f8:9e:98:f4:69:bb:f9:f1:49:38:60:38:67:6b: 67:c7:38:16:50:5e:be:58:58:6e:49:ac:33:7d:45: bf:92:eb:ac:a9:ef:8c:cc:7a:29:82:75:3d:5d:b3: 72:2a:f5:c0:88:c3:8b:9f:42:00:98:74:15:ed:1e: 4d:8d:9b:1a:a0:43:45:71:02:87:98:16:cf:2d:66: f2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F4:1E:28:FA:99:B2:F1:78:DA:C8:C1:43:EC:E9:74:5D:90:9C:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3531ffe-605f-35af-9ff5-c15d70405a20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:e6:d8:f6:fe:3d:93:30:f7:0b:4f:24:80:9e:ae:99:09:39: b2:ef:84:35:5e:a3:02:64:5a:b5:cc:73:3f:1f:9e:f4:12:5d: 79:ae:6c:c2:ed:49:e4:48:00:48:bc:ec:22:7d:75:7c:83:a2: 4d:f7:42:b4:64:2e:a2:e9:81:dd:0b:43:35:cb:28:41:bc:ee: 5a:5d:91:bc:69:1a:a9:bb:e0:be:65:f9:f9:92:03:f9:be:69: ba:a9:18:ff:fa:7c:19:31:50:76:6b:6f:89:78:52:9d:7f:62: 0b:3b:71:a9:fb:43:ee:bd:c6:6a:5f:47:d7:07:8d:48:61:48: f9:ba:97:c2:34:31:03:52:7d:94:47:49:1d:50:73:58:20:fc: 4a:26:48:dd:ea:58:fb:66:e1:fe:65:98:d0:5e:c1:83:74:57: 35:c2:03:df:03:77:c1:63:4c:51:63:04:a2:12:97:ea:c5:7f: fe:71:b2:d0:ee:db:f3:cd:15:c6:cf:1f:b5:30:12:7a:4d:81: cd:41:cd:c6:a0:ec:3a:56:41:9b:06:38:72:cf:f1:6e:1d:0f: 7d:e6:90:7a:f8:c1:7e:4a:ba:82:df:61:34:df:19:97:46:da: c8:17:52:ea:a5:c5:fe:38:18:bd:8f:79:df:ee:a1:8f:01:a5: 05:96:ed:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4K/u1w0f3OCjkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTdjNWM1MDEtOGUyMy00OGZhLWFiNDMtNjU3ODEyMjRhMWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iB5Bv0HPb87CduIzige5j6lo9Rr+ULWmSnA 3xn8/03IA+xhzGD4xOO195gfWZ6uDUNTlaE59Hu7r1AxfIT/et5spBbOKzfid9L1 HhgsAqVfeuU8RoVdQO32iYNgZ9rhkyy3eUkdMdxnbyl6J0qo5r1l5/kUD/DXg4F+ NaU4hl00qfRDPF5qX3tTxTNa//NTX4bFMXuB4T3QZEGaJvDqbORyP9stqTNScl+7 4ktXdM0bQ0R9+J6Y9Gm7+fFJOGA4Z2tnxzgWUF6+WFhuSawzfUW/kuusqe+MzHop gnU9XbNyKvXAiMOLn0IAmHQV7R5NjZsaoENFcQKHmBbPLWbyMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/0Hij6mbLxeNrIwUPs6XRdkJyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTM1MzFmZmUtNjA1Zi0z NWFmLTlmZjUtYzE1ZDcwNDA1YTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/m2Pb+PZMw9wtPJICerpkJObLvhDVeowJkWrXMcz8fnvQSXXmubMLt SeRIAEi87CJ9dXyDok33QrRkLqLpgd0LQzXLKEG87lpdkbxpGqm74L5l+fmSA/m+ abqpGP/6fBkxUHZrb4l4Up1/Ygs7can7Q+69xmpfR9cHjUhhSPm6l8I0MQNSfZRH SR1Qc1gg/EomSN3qWPtm4f5lmNBewYN0VzXCA98Dd8FjTFFjBKISl+rFf/5xstDu 2/PNFcbPH7UwEnpNgc1Bzcag7DpWQZsGOHLP8W4dD33mkHr4wX5KuoLfYTTfGZdG 2sgXUuqlxf44GL2Ped/uoY8BpQWW7Ys= -----END CERTIFICATE-----Generated at Thu Mar 26 20:43:17 2026 by rpki-client