$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4533184-8eb9-3124-8cbd-1efa0d8f2db8.roa File: a4533184-8eb9-3124-8cbd-1efa0d8f2db8.roa (raw, json) Hash identifier: Whx9clSxv12b+/fCsctn++mwuYtAUw2H8mJOVk/Vwyk= Subject key identifier: E5:6D:0D:3A:9F:44:88:FD:53:41:A1:EE:10:5C:56:D1:04:61:C6:52 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E05B00C20CBD3CEF537140 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4533184-8eb9-3124-8cbd-1efa0d8f2db8.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 67.54.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:5b:00:c2:0c:bd:3c:ef:53:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ae37c068-b0aa-47ab-b0c8-9516b3bf65ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:07:e1:84:3a:09:a8:db:0a:33:84:e3:45:ea: f3:24:f1:14:0a:54:42:fa:b1:da:86:0d:27:e5:d5: 17:78:a2:94:79:d2:06:0b:ca:ec:3d:72:99:b8:e4: f1:10:5e:df:1d:a5:2c:5b:8b:2d:ae:db:ac:23:05: 61:18:58:7d:de:2c:8b:12:b8:46:82:5b:5b:90:a7: d7:f8:8a:09:72:55:d6:cb:95:10:36:42:41:98:15: 7f:37:b5:5f:71:fb:09:16:7e:33:ab:a3:5d:be:77: 07:52:ea:59:72:32:fc:2b:aa:7c:aa:5c:ad:3f:81: 67:d7:22:e2:b2:f4:f3:30:b6:d6:55:c0:09:0f:14: d5:bb:35:40:3f:86:5d:00:08:aa:7b:ab:3c:bd:f9: eb:ef:a4:2b:9e:bc:d9:c9:91:14:20:a4:1b:55:f1: d8:ab:3a:c3:7c:1e:93:a5:46:5a:67:30:a3:f4:2b: 19:b2:f2:80:ab:4e:46:80:9e:12:e8:60:e3:05:a5: 20:c8:dd:47:7e:54:bd:a7:72:3a:63:19:4d:a2:90: 9a:87:f3:20:2f:a7:00:0b:ac:ce:0d:e2:95:94:11: 53:e9:51:4c:3d:5e:6e:a5:bb:7c:38:2a:50:b1:f5: 3b:d6:ca:45:2a:8c:26:f4:e6:c5:ed:02:8e:9d:59: f5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6D:0D:3A:9F:44:88:FD:53:41:A1:EE:10:5C:56:D1:04:61:C6:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4533184-8eb9-3124-8cbd-1efa0d8f2db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d7:ce:9e:7c:38:bd:c1:2d:2e:98:48:e2:b7:5e:00:45:cc: a6:29:a6:30:67:c4:a6:31:12:50:43:66:ac:05:d8:cf:35:4b: 8b:c2:89:26:f6:c8:85:cc:eb:e0:a8:c2:e5:c3:07:a2:3a:a5: d1:b7:9a:49:52:d1:9e:a4:9f:22:d4:09:a1:70:5c:91:52:96: dd:42:e5:2a:e0:ba:72:fe:a8:e8:cb:83:d5:a1:4e:31:1b:b9: 4e:94:72:85:0f:0e:14:b5:9d:54:13:b3:09:65:8e:81:87:39: 1b:85:0a:69:16:9c:e0:cf:3f:4f:3f:92:65:b7:0e:26:08:f1: bd:e6:f4:57:76:75:72:49:f4:ec:f3:5d:53:a6:a5:1c:fb:0b: b7:5b:c0:07:54:b6:d2:70:4a:d5:c8:6c:f9:30:f1:47:eb:19: 4f:68:c3:b4:9c:60:c0:82:c2:a8:ce:2e:04:69:c0:15:34:36: 09:5c:02:42:0c:d8:6a:49:1a:9c:42:f7:6c:17:fe:49:d7:e8: 3f:5c:cd:77:76:60:54:ff:d9:7c:ae:13:a0:95:c7:88:fe:cf: 9e:ec:a7:f0:04:d4:3b:bf:7f:6a:15:36:10:21:8d:83:24:9b: 17:4c:8a:3f:14:bd:a7:2f:81:c7:26:af:b2:84:58:a0:d3:a9: a9:fa:05:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4FsAwgy9PO9TcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YWUzN2MwNjgtYjBhYS00N2FiLWIwYzgtOTUxNmIzYmY2NWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgfhhDoJqNsKM4TjRerzJPEUClRC+rHahg0n 5dUXeKKUedIGC8rsPXKZuOTxEF7fHaUsW4strtusIwVhGFh93iyLErhGgltbkKfX +IoJclXWy5UQNkJBmBV/N7VfcfsJFn4zq6NdvncHUupZcjL8K6p8qlytP4Fn1yLi svTzMLbWVcAJDxTVuzVAP4ZdAAiqe6s8vfnr76QrnrzZyZEUIKQbVfHYqzrDfB6T pUZaZzCj9CsZsvKAq05GgJ4S6GDjBaUgyN1HflS9p3I6YxlNopCah/MgL6cAC6zO DeKVlBFT6VFMPV5upbt8OCpQsfU71spFKowm9ObF7QKOnVn1KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVtDTqfRIj9U0Gh7hBcVtEEYcZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTQ1MzMxODQtOGViOS0z MTI0LThjYmQtMWVmYTBkOGYyZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDXzp58OL3BLS6YSOK3XgBFzKYppjBnxKYxElBDZqwF2M81S4vCiSb2 yIXM6+CowuXDB6I6pdG3mklS0Z6knyLUCaFwXJFSlt1C5SrgunL+qOjLg9WhTjEb uU6UcoUPDhS1nVQTswlljoGHORuFCmkWnODPP08/kmW3DiYI8b3m9Fd2dXJJ9Ozz XVOmpRz7C7dbwAdUttJwStXIbPkw8UfrGU9ow7ScYMCCwqjOLgRpwBU0NglcAkIM 2GpJGpxC92wX/knX6D9czXd2YFT/2XyuE6CVx4j+z57sp/AE1Du/f2oVNhAhjYMk mxdMij8Uvacvgccmr7KEWKDTqan6BUI= -----END CERTIFICATE-----Generated at Thu Mar 26 19:28:19 2026 by rpki-client