$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaf1c878-0f5a-35f3-834c-70d654786038.roa File: aaf1c878-0f5a-35f3-834c-70d654786038.roa (raw, json) Hash identifier: peDqoQQdVoxMqigCghEBCdCgd/rzMn+u15zJVw8UCNU= Subject key identifier: 12:8B:80:33:AE:26:7B:81:6F:93:99:E2:99:5F:6F:7D:3F:91:A3:01 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E08B951F18142C0ED7C300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaf1c878-0f5a-35f3-834c-70d654786038.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 75.107.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:8b:95:1f:18:14:2c:0e:d7:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ba67201f-7f62-412c-bb83-010c7f5ec1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:32:a7:81:b1:2f:ec:08:7d:29:62:e0:f7: 75:50:9f:d5:93:4b:7b:b0:8f:9e:28:f3:21:ed:cd: fe:d9:d6:fc:0e:a6:6c:3c:1f:0c:c8:d2:d4:91:28: 48:27:13:87:48:25:9f:b1:8e:95:7e:69:a9:b4:4d: a5:2a:12:7b:67:06:08:30:b2:e1:f5:44:56:07:18: 16:24:47:c6:dc:4e:3a:be:94:cf:6b:fd:27:64:86: 1e:4e:06:ea:f9:8a:a0:ba:7a:09:07:68:d1:20:24: b7:83:4f:e6:8c:26:b1:de:9b:89:76:92:03:04:c8: 13:54:5f:6c:93:14:ed:29:3a:23:da:dc:ba:d8:a9: 3b:ec:0d:93:42:e1:2a:93:00:cf:0d:5e:81:9d:8b: ed:c2:c5:d4:5d:66:f6:8d:67:de:d7:43:77:ed:ae: 88:cc:f5:08:26:84:f0:68:7e:c7:8f:35:12:18:f2: a5:cb:cd:c3:3c:aa:51:f4:7d:3d:c1:1d:d1:b6:b2: d6:74:48:46:9f:fb:3b:ec:d8:0c:03:0e:9c:c6:71: b3:df:ea:fc:a6:8e:37:81:7f:df:8c:9c:e0:25:ec: 44:88:11:be:a5:b6:45:cc:48:c0:e9:a2:2a:cb:d1: f7:15:8a:b1:46:16:a3:6c:9f:a6:db:98:39:e0:e6: e9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8B:80:33:AE:26:7B:81:6F:93:99:E2:99:5F:6F:7D:3F:91:A3:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaf1c878-0f5a-35f3-834c-70d654786038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.107.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:91:67:51:2b:c8:2e:5b:70:58:34:9d:c5:a1:fb:8a:35:a8: 66:0c:21:0f:34:bc:29:59:49:e2:06:0a:be:a9:50:8f:53:ea: 31:d0:e9:21:dc:76:e9:3d:c9:a4:21:69:b1:bf:ed:dd:c0:60: aa:57:92:8c:06:51:ea:b9:10:b6:38:40:b7:47:d2:0d:b7:84: 37:7d:36:bf:22:c8:3c:e5:0f:59:38:bf:44:1b:1d:48:3e:5b: 85:62:a5:83:00:47:4d:80:72:e8:c4:09:f8:41:49:b1:80:34: e7:10:f0:f3:30:d5:af:70:97:b0:0c:2f:04:2b:95:ab:4a:e4: db:44:6b:09:c5:a4:4d:2d:74:b6:05:c6:ca:07:ec:4a:81:a2: 8c:e4:eb:23:2e:7e:ea:49:46:3d:6c:b6:0f:c9:91:a1:b4:ce: 34:91:fe:14:b5:c9:bf:c4:42:2a:26:4b:2f:53:4d:3f:46:10: 54:97:1e:ed:42:74:fa:24:be:66:f7:76:2f:e6:73:bc:13:52: 70:83:e6:1d:c1:88:a0:7f:fa:30:d6:77:7f:2b:53:76:c7:1b: 82:57:31:b4:c3:71:8e:03:87:55:21:ad:1a:24:3d:af:be:57: 73:5b:30:b8:2f:3c:40:9c:e1:68:29:2a:29:56:05:8f:59:49: e7:8a:20:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4IuVHxgULA7XwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YmE2NzIwMWYtN2Y2Mi00MTJjLWJiODMtMDEwYzdmNWVjMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohYyp4GxL+wIfSli4Pd1UJ/Vk0t7sI+eKPMh 7c3+2db8DqZsPB8MyNLUkShIJxOHSCWfsY6VfmmptE2lKhJ7ZwYIMLLh9URWBxgW JEfG3E46vpTPa/0nZIYeTgbq+YqgunoJB2jRICS3g0/mjCax3puJdpIDBMgTVF9s kxTtKToj2ty62Kk77A2TQuEqkwDPDV6BnYvtwsXUXWb2jWfe10N37a6IzPUIJoTw aH7HjzUSGPKly83DPKpR9H09wR3RtrLWdEhGn/s77NgMAw6cxnGz3+r8po43gX/f jJzgJexEiBG+pbZFzEjA6aIqy9H3FYqxRhajbJ+m25g54ObpiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKLgDOuJnuBb5OZ4plfb30/kaMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWFmMWM4NzgtMGY1YS0z NWYzLTgzNGMtNzBkNjU0Nzg2MDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2vjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANiRZ1EryC5bcFg0ncWh+4o1qGYMIQ80vClZSeIGCr6pUI9T6jHQ6SHc duk9yaQhabG/7d3AYKpXkowGUeq5ELY4QLdH0g23hDd9Nr8iyDzlD1k4v0QbHUg+ W4VipYMAR02AcujECfhBSbGANOcQ8PMw1a9wl7AMLwQrlatK5NtEawnFpE0tdLYF xsoH7EqBoozk6yMufupJRj1stg/JkaG0zjSR/hS1yb/EQiomSy9TTT9GEFSXHu1C dPokvmb3di/mc7wTUnCD5h3BiKB/+jDWd38rU3bHG4JXMbTDcY4Dh1UhrRokPa++ V3NbMLgvPECc4WgpKilWBY9ZSeeKIIs= -----END CERTIFICATE-----Generated at Thu Mar 26 17:07:21 2026 by rpki-client