$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3dc7a20-cdca-3a67-9bce-fc380934251d.roa File: a3dc7a20-cdca-3a67-9bce-fc380934251d.roa (raw, json) Hash identifier: 4+hwm8tn6Wi9DckrqZ1/0Uwq5ZXdTP7ZqLpH1qAiiWI= Subject key identifier: EC:04:30:52:3E:70:67:35:E5:82:0D:40:38:7E:7F:16:11:0D:11:A5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFBCA814C87602440D1A80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3dc7a20-cdca-3a67-9bce-fc380934251d.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:bc:a8:14:c8:76:02:44:0d:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5b74697b-ad00-41bc-9240-51fbca49018b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:12:ec:3c:64:cf:f6:68:66:47:99:2f:fa:b3: 76:6a:8e:8b:88:85:bf:6f:03:e4:b6:80:59:60:c8: 8f:12:c6:94:db:a5:d9:e2:c4:ab:2b:bf:bc:8b:58: c5:4b:7a:66:a7:eb:eb:de:ff:ef:77:ca:6a:a5:1a: 23:0e:74:77:e8:32:7f:50:2e:d2:6f:c8:b4:79:de: 13:d7:89:52:94:da:b6:5a:3d:64:c6:3c:35:ee:e7: 82:f2:57:14:f9:5f:9d:b2:a9:93:87:f8:69:d1:a7: 23:b8:88:42:68:c3:3b:7c:95:b4:a1:63:09:6e:35: 8f:db:66:b9:cb:ca:e0:21:ff:06:6a:51:5e:ed:5a: cb:25:59:0d:a7:84:f9:42:2c:e4:67:ea:4a:d3:8a: 7b:62:ab:33:d3:4f:a4:88:de:51:56:59:5f:18:11: 1f:5a:35:69:4c:d3:ba:75:0c:73:79:52:b9:bc:bf: 3a:95:b7:77:94:ed:91:b9:cb:4f:fc:7c:dc:a3:f8: 0c:7e:03:7e:cd:d0:23:99:3a:09:37:8d:c6:17:e8: 09:bb:3b:90:17:ea:72:b7:47:30:bc:66:73:f1:47: 84:51:b8:b0:42:ff:62:f4:77:7d:2d:67:85:e2:5d: 0c:80:a7:f7:b6:67:8d:aa:23:7a:86:e2:16:5e:b5: ce:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:04:30:52:3E:70:67:35:E5:82:0D:40:38:7E:7F:16:11:0D:11:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3dc7a20-cdca-3a67-9bce-fc380934251d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a6:a4:11:35:77:21:06:45:82:84:b8:66:7f:70:88:c2:7b: 7e:fd:be:9e:d5:35:e9:15:21:4f:38:e7:27:df:20:fb:3d:10: b4:fd:d3:35:6b:5f:21:9d:b0:0a:cd:97:26:fe:35:e5:78:b1: 9c:fb:ce:7d:f9:4f:bd:49:16:19:a8:8a:2b:b7:be:95:74:dc: 8e:71:15:75:a6:f9:eb:7d:58:67:6c:fa:ad:73:22:37:eb:23: b4:0b:b8:54:09:9b:cc:46:f6:67:71:87:e3:8d:ce:d0:d4:11: 64:00:1a:0b:f3:e0:fc:29:ee:ed:f3:c2:a4:41:ed:0c:11:58: af:0b:38:67:96:56:d8:62:07:b9:5e:e3:fa:5f:95:07:e4:2e: 27:3d:a9:39:d4:83:f1:31:4b:73:72:c7:ee:6f:d7:af:55:9e: 37:8e:2a:7d:80:b2:bb:d8:fc:2d:73:88:06:7a:c6:23:30:08: d9:1d:f1:a0:51:2d:7d:ff:92:f7:02:c0:ee:86:e3:57:d5:1c: a2:16:9f:83:86:38:72:36:97:67:e2:a2:b3:13:43:b7:e9:2e: 5d:77:bd:09:20:42:41:1d:23:a7:20:a9:97:d1:03:63:3c:50: 87:49:e5:fd:7e:47:84:83:c2:6c:7f:a3:85:0a:a9:79:d1:06: 66:74:bc:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37yoFMh2AkQNGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NWI3NDY5N2ItYWQwMC00MWJjLTkyNDAtNTFmYmNhNDkwMThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRLsPGTP9mhmR5kv+rN2ao6LiIW/bwPktoBZ YMiPEsaU26XZ4sSrK7+8i1jFS3pmp+vr3v/vd8pqpRojDnR36DJ/UC7Sb8i0ed4T 14lSlNq2Wj1kxjw17ueC8lcU+V+dsqmTh/hp0acjuIhCaMM7fJW0oWMJbjWP22a5 y8rgIf8GalFe7VrLJVkNp4T5QizkZ+pK04p7Yqsz00+kiN5RVllfGBEfWjVpTNO6 dQxzeVK5vL86lbd3lO2RuctP/Hzco/gMfgN+zdAjmToJN43GF+gJuzuQF+pyt0cw vGZz8UeEUbiwQv9i9Hd9LWeF4l0MgKf3tmeNqiN6huIWXrXO+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwEMFI+cGc15YINQDh+fxYRDRGlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTNkYzdhMjAtY2RjYS0z YTY3LTliY2UtZmMzODA5MzQyNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOmpBE1dyEGRYKEuGZ/cIjCe379vp7VNekVIU845yffIPs9ELT90zVr XyGdsArNlyb+NeV4sZz7zn35T71JFhmoiiu3vpV03I5xFXWm+et9WGds+q1zIjfr I7QLuFQJm8xG9mdxh+ONztDUEWQAGgvz4Pwp7u3zwqRB7QwRWK8LOGeWVthiB7le 4/pflQfkLic9qTnUg/ExS3Nyx+5v169VnjeOKn2AsrvY/C1ziAZ6xiMwCNkd8aBR LX3/kvcCwO6G41fVHKIWn4OGOHI2l2fiorMTQ7fpLl13vQkgQkEdI6cgqZfRA2M8 UIdJ5f1+R4SDwmx/o4UKqXnRBmZ0vB8= -----END CERTIFICATE-----Generated at Thu Mar 26 17:04:18 2026 by rpki-client