$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3ab0ba9-007e-3ca7-b914-3fac9030fba5.roa File: a3ab0ba9-007e-3ca7-b914-3fac9030fba5.roa (raw, json) Hash identifier: YcZMvczbXII62UC1zkDEph+31UuN/llw6lX4D7rVTjM= Subject key identifier: E7:C3:50:55:41:42:4F:19:A9:44:CD:EE:7E:DE:D9:A9:FA:F1:1B:E7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B4AA6D2F223B00224C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3ab0ba9-007e-3ca7-b914-3fac9030fba5.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b4:aa:6d:2f:22:3b:00:22:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b7f97591-b2d8-4d4e-902f-bb1df9fcf54f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:58:1c:2b:9c:ec:e3:5a:a1:de:06:e1:74: 24:71:fd:3e:dd:f7:5b:f2:ed:19:98:ad:00:ec:ed: 63:7f:6d:73:c4:9c:b0:7b:13:5e:c0:84:51:48:74: e4:9c:6a:dc:f1:45:41:4a:bd:cc:0c:d3:4f:52:46: 2d:f7:68:37:7e:da:6c:9e:ea:5b:2e:6c:71:fc:98: 64:36:0c:c7:9f:6b:1e:81:3d:1a:f9:e2:c0:e7:d3: 6f:00:23:36:38:cc:aa:56:17:2f:1a:2d:6a:c6:e3: 8c:71:a0:25:fd:b2:7f:d0:30:46:54:b1:10:83:5a: e0:12:be:c9:68:0f:d0:3d:60:11:7e:15:c8:a9:1c: d7:e6:07:ef:94:c0:92:5a:54:a4:69:03:af:2a:ce: 42:bd:ef:3f:f5:41:a8:b3:b1:22:1d:95:81:03:9a: 33:df:85:5e:b3:ea:5e:86:b9:20:ae:36:24:f3:7e: 5f:01:c9:e8:62:58:45:8d:21:3d:f7:78:ba:13:81: 7b:48:96:7c:89:87:84:61:e8:d7:1a:53:f7:7f:2d: ba:58:ab:69:79:e2:de:f2:4b:67:1e:ad:be:a0:56: 0b:72:c6:8c:ca:39:26:7c:d8:c9:4f:73:e5:67:ee: b4:21:da:47:86:f8:d2:c8:e0:d0:e3:c9:87:05:60: ab:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C3:50:55:41:42:4F:19:A9:44:CD:EE:7E:DE:D9:A9:FA:F1:1B:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3ab0ba9-007e-3ca7-b914-3fac9030fba5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:4b:12:2c:64:b0:44:80:56:c5:12:ea:ea:48:92:63:69:d2: e1:6b:a7:75:47:db:da:90:5a:0b:ef:57:db:27:ad:d8:22:f1: b4:8b:63:1a:0c:23:d4:66:63:bd:dc:59:c5:a0:a9:8b:af:f1: 25:5f:0c:39:ba:c9:db:a5:ff:c1:ae:10:15:9d:cc:2a:09:a4: 48:21:ef:e7:b9:20:a2:d7:6d:72:f3:92:f2:be:62:aa:0b:90: 3f:00:9f:73:f6:5f:2f:7d:c3:55:7c:a3:51:2b:be:76:54:58: af:c4:b7:df:a5:49:91:6e:d5:62:a9:c6:f3:37:fc:2b:40:cb: 11:a0:b9:4f:78:18:96:3f:01:18:e2:ce:7f:f4:4d:ac:c9:20: 22:7a:62:22:0b:88:ec:26:6d:65:6e:a8:66:a3:37:60:a0:c8: 3a:b7:b5:39:9e:36:9b:98:ef:5f:fb:cd:46:28:41:03:04:b8: 32:f5:46:fe:67:ad:fb:b6:aa:99:ba:d4:f3:44:cd:55:ab:0d: ed:fa:21:3f:2e:43:dc:1e:eb:f6:0c:1d:72:0c:f5:21:f6:e9: ba:14:9b:bb:5a:67:cf:43:33:dd:d3:8d:dd:de:ad:af:f7:68: f8:46:80:15:f5:b9:8d:ae:c6:2a:7c:32:a1:61:8f:e2:04:ba: e3:18:d0:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LSqbS8iOwAiTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjdmOTc1OTEtYjJkOC00ZDRlLTkwMmYtYmIxZGY5ZmNmNTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTZYHCuc7ONaod4G4XQkcf0+3fdb8u0ZmK0A 7O1jf21zxJywexNewIRRSHTknGrc8UVBSr3MDNNPUkYt92g3ftpsnupbLmxx/Jhk NgzHn2segT0a+eLA59NvACM2OMyqVhcvGi1qxuOMcaAl/bJ/0DBGVLEQg1rgEr7J aA/QPWARfhXIqRzX5gfvlMCSWlSkaQOvKs5Cve8/9UGos7EiHZWBA5oz34Ves+pe hrkgrjYk835fAcnoYlhFjSE993i6E4F7SJZ8iYeEYejXGlP3fy26WKtpeeLe8ktn Hq2+oFYLcsaMyjkmfNjJT3PlZ+60IdpHhvjSyODQ48mHBWCrMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfDUFVBQk8ZqUTN7n7e2an68RvnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTNhYjBiYTktMDA3ZS0z Y2E3LWI5MTQtM2ZhYzkwMzBmYmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPL2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhLEixksESAVsUS6upIkmNp0uFrp3VH29qQWgvvV9snrdgi8bSLYxoM I9RmY73cWcWgqYuv8SVfDDm6ydul/8GuEBWdzCoJpEgh7+e5IKLXbXLzkvK+YqoL kD8An3P2Xy99w1V8o1ErvnZUWK/Et9+lSZFu1WKpxvM3/CtAyxGguU94GJY/ARji zn/0TazJICJ6YiILiOwmbWVuqGajN2CgyDq3tTmeNpuY71/7zUYoQQMEuDL1Rv5n rfu2qpm61PNEzVWrDe36IT8uQ9we6/YMHXIM9SH26boUm7taZ89DM93Tjd3era/3 aPhGgBX1uY2uxip8MqFhj+IEuuMY0ME= -----END CERTIFICATE-----Generated at Thu Mar 26 15:20:45 2026 by rpki-client