$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac9e06ea-4249-3ef5-8fc4-315858a7630f.roa File: ac9e06ea-4249-3ef5-8fc4-315858a7630f.roa (raw, json) Hash identifier: q/TO/WEeVmdRb7bgvU4YQkXwglsAuKg9retA5hlDVkU= Subject key identifier: 78:8B:DD:A5:37:72:3E:A3:7E:54:37:A7:05:F5:A5:12:40:18:C1:9C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFA99E08382A8786D96AA0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac9e06ea-4249-3ef5-8fc4-315858a7630f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:a9:9e:08:38:2a:87:86:d9:6a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=2fa5d44a-b935-410a-bb25-7f491e5c6206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:83:d9:ea:0e:8b:62:79:ac:4d:37:75:18:c3: f9:28:b3:7d:7e:61:d3:c0:65:77:fd:f4:bf:91:c2: 9a:8d:d1:88:70:54:17:b9:c0:7e:89:4a:2f:51:0b: 1f:a6:27:3e:00:57:3d:fd:58:af:ee:3d:c8:75:0d: 12:da:0b:10:28:e7:3a:1d:f1:f4:a2:76:e7:0c:67: 91:c3:75:da:74:d4:83:ae:6e:44:37:07:a3:fe:4d: d0:2b:18:67:1e:51:fc:45:85:ea:1a:86:5c:d7:63: fd:2d:6e:b8:a4:5b:1d:9f:55:0a:46:71:69:f5:86: 17:33:96:37:e5:cd:64:25:79:65:17:c4:65:81:ac: a2:cc:12:6f:17:ac:04:78:a4:35:cd:3b:32:38:0d: b2:9b:ec:02:37:4e:8e:11:90:07:46:94:8c:8e:d7: 9d:c5:45:1c:de:67:d1:14:c3:9a:c1:24:19:6d:09: 7c:0e:93:8a:70:40:49:74:de:fe:28:d1:28:c3:96: bd:5e:08:35:4e:e4:9a:f5:0c:9d:db:5e:f3:af:ab: da:60:57:02:af:97:08:10:cc:d6:4c:3f:0a:47:a8: 4b:b8:50:55:6f:11:67:ad:91:d8:a6:96:ce:2e:06: 49:52:dc:a6:08:53:26:c7:d5:12:30:da:63:c2:93: 4f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8B:DD:A5:37:72:3E:A3:7E:54:37:A7:05:F5:A5:12:40:18:C1:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac9e06ea-4249-3ef5-8fc4-315858a7630f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d1:84:fc:ba:6e:f3:79:51:40:f2:52:42:75:e1:a3:1e:ab: 64:07:e9:d3:ca:5f:64:0f:8d:93:d4:9f:44:a3:7f:38:71:06: 4f:78:c9:15:23:7b:48:6c:35:aa:aa:20:01:e9:ab:f9:20:49: b7:57:f6:1a:89:00:9c:a9:93:5a:b5:d2:fe:70:43:65:7e:09: 98:e2:52:e6:65:2f:56:98:b0:36:a0:cc:05:bd:3c:91:ec:74: bc:86:bc:0d:3a:38:73:0a:7f:e0:f7:2b:3f:f2:63:92:18:b5: fe:f2:94:0b:a4:00:30:81:17:07:5b:3c:81:f2:55:99:86:99: c3:ea:a4:2b:43:fc:d8:dc:8a:86:a1:62:dd:0b:cf:9d:fe:60: 3f:ca:99:50:26:67:27:ee:fb:1c:24:e0:42:a5:1e:e7:86:6d: a8:ea:d3:7e:82:dc:70:b5:6f:78:69:cc:65:4c:b9:b5:24:05: 3f:91:92:58:a8:f3:2c:13:91:0b:91:40:2a:ff:02:d5:87:2e: 2e:70:8a:c2:9e:c0:a8:45:11:f7:eb:44:68:f0:61:ff:b7:66: 7e:09:4d:1b:9f:c4:d6:66:7b:18:93:43:f5:39:19:0a:f8:6b: 60:84:4a:1e:62:a7:0f:10:de:a2:d1:bf:b2:ad:89:21:41:35: 88:d0:9b:a3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0k36meCDgqh4bZaqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MmZhNWQ0NGEtYjkzNS00MTBhLWJiMjUtN2Y0OTFlNWM2MjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4PZ6g6LYnmsTTd1GMP5KLN9fmHTwGV3/fS/ kcKajdGIcFQXucB+iUovUQsfpic+AFc9/Viv7j3IdQ0S2gsQKOc6HfH0onbnDGeR w3XadNSDrm5ENwej/k3QKxhnHlH8RYXqGoZc12P9LW64pFsdn1UKRnFp9YYXM5Y3 5c1kJXllF8RlgayizBJvF6wEeKQ1zTsyOA2ym+wCN06OEZAHRpSMjtedxUUc3mfR FMOawSQZbQl8DpOKcEBJdN7+KNEow5a9Xgg1TuSa9Qyd217zr6vaYFcCr5cIEMzW TD8KR6hLuFBVbxFnrZHYppbOLgZJUtymCFMmx9USMNpjwpNPcQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHiL3aU3cj6jflQ3pwX1pRJAGMGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWM5ZTA2ZWEtNDI0OS0z ZWY1LThmYzQtMzE1ODU4YTc2MzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBrPIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAI9GE/Lpu83lRQPJSQnXhox6rZAfp08pfZA+Nk9SfRKN/OHEGT3jJFSN7 SGw1qqogAemr+SBJt1f2GokAnKmTWrXS/nBDZX4JmOJS5mUvVpiwNqDMBb08kex0 vIa8DTo4cwp/4PcrP/Jjkhi1/vKUC6QAMIEXB1s8gfJVmYaZw+qkK0P82NyKhqFi 3QvPnf5gP8qZUCZnJ+77HCTgQqUe54ZtqOrTfoLccLVveGnMZUy5tSQFP5GSWKjz LBORC5FAKv8C1YcuLnCKwp7AqEUR9+tEaPBh/7dmfglNG5/E1mZ7GJND9TkZCvhr YIRKHmKnDxDeotG/sq2JIUE1iNCbow== -----END CERTIFICATE-----Generated at Thu Mar 26 16:10:38 2026 by rpki-client