$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/accc052b-3a70-35a4-bf57-4f48b06ee41b.roa File: accc052b-3a70-35a4-bf57-4f48b06ee41b.roa (raw, json) Hash identifier: a2XfYWz255mNqwp8Z/wC5CiNJpiTuQtb4Fwsh3WH3Wk= Subject key identifier: 60:68:8A:03:10:F1:75:AF:DF:55:31:44:BB:1B:B6:B1:5B:33:F4:8D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E001D45AE80DCD799F4700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/accc052b-3a70-35a4-bf57-4f48b06ee41b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:01:d4:5a:e8:0d:cd:79:9f:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5a9a896d-bae4-45bc-9f5c-1792b02bcd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ae:6c:7e:06:c1:ae:1a:2e:39:ea:2a:b7:e0: 67:8a:c2:86:02:4e:c3:7e:c9:76:5c:50:0c:79:73: 51:e3:12:43:4c:11:80:aa:44:b0:e7:84:c2:77:ed: 0c:6d:16:32:aa:1b:3e:75:3a:b5:96:1f:ef:af:36: 1b:16:5b:f2:3f:c1:1e:66:94:29:3e:bb:59:96:f5: 7c:f1:30:c1:34:2d:0c:68:bf:a8:5e:f4:f2:be:2c: 3b:b6:95:00:7c:53:0f:d3:12:8c:af:a4:f2:e0:6a: 7d:bc:c6:9f:24:1e:76:ba:d6:5b:d1:fc:96:79:05: 8d:f8:f3:52:4b:b6:92:8b:d3:ae:b7:cf:20:1f:ae: 55:5c:8f:19:6f:03:2f:69:27:5f:fb:84:97:d3:16: c2:24:b6:57:43:75:0f:f2:90:60:df:9c:aa:50:20: 6b:7f:6d:54:e8:32:38:0f:72:e2:e7:fd:8d:ff:3a: 96:ae:87:2b:0a:df:c3:36:fd:35:ea:e3:ab:c5:d1: 5c:b5:12:53:47:d1:37:4f:4b:61:51:7b:5e:75:a9: 58:31:79:47:0b:8b:74:0d:86:2c:80:d9:58:0a:62: a5:7a:20:2c:b7:4b:37:18:26:82:91:3a:24:b0:a7: 02:81:ef:08:d6:3f:f5:bd:6f:5b:0f:67:5a:63:ac: fe:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:68:8A:03:10:F1:75:AF:DF:55:31:44:BB:1B:B6:B1:5B:33:F4:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/accc052b-3a70-35a4-bf57-4f48b06ee41b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:01:89:2d:03:f4:55:1a:59:7e:a4:75:30:12:51:53:2d:53: 00:80:ce:2e:f0:f0:ee:ec:7a:83:2b:54:82:a2:98:6f:94:19: 83:fd:16:af:2a:6f:a3:57:42:f6:a8:da:87:73:a5:3d:a7:a7: 53:51:59:4a:95:de:54:a2:e3:c0:2a:bf:9e:1a:c0:1f:23:d2: ff:43:bd:9e:8a:88:6a:3c:cc:d3:14:61:14:28:26:0c:aa:d8: eb:c0:d1:10:50:35:b6:75:d9:82:ff:2f:d6:ab:4c:b3:61:5c: 3f:0e:07:8c:e9:a5:58:e1:01:55:86:56:6a:60:bb:1a:bd:72: f6:a3:8f:e3:5b:4f:8b:7a:09:85:19:8e:37:52:82:e9:52:45: c6:5d:95:55:a0:21:14:82:26:2d:dd:cb:f5:74:50:7a:86:0f: d8:03:23:ae:14:51:3a:59:e1:e0:04:28:c9:3b:fb:eb:22:db: 82:72:45:d4:6b:a6:5f:83:02:b1:55:09:fe:d0:55:41:32:ce: 2b:54:89:41:c3:7f:19:a9:a4:65:e9:9a:2e:6a:28:df:b0:15: 12:6f:64:d2:6c:73:53:a8:b7:d5:e4:17:9f:89:a0:75:35:64: dc:e2:c5:d1:d1:d4:62:48:75:4e:39:a7:d9:d9:05:b9:8e:9d: 81:71:45:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4AHUWugNzXmfRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NWE5YTg5NmQtYmFlNC00NWJjLTlmNWMtMTc5MmIwMmJjZDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr65sfgbBrhouOeoqt+BnisKGAk7Dfsl2XFAM eXNR4xJDTBGAqkSw54TCd+0MbRYyqhs+dTq1lh/vrzYbFlvyP8EeZpQpPrtZlvV8 8TDBNC0MaL+oXvTyviw7tpUAfFMP0xKMr6Ty4Gp9vMafJB52utZb0fyWeQWN+PNS S7aSi9Out88gH65VXI8ZbwMvaSdf+4SX0xbCJLZXQ3UP8pBg35yqUCBrf21U6DI4 D3Li5/2N/zqWrocrCt/DNv016uOrxdFctRJTR9E3T0thUXtedalYMXlHC4t0DYYs gNlYCmKleiAst0s3GCaCkToksKcCge8I1j/1vW9bD2daY6z+lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBoigMQ8XWv31UxRLsbtrFbM/SNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWNjYzA1MmItM2E3MC0z NWE0LWJmNTctNGY0OGIwNmVlNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMBiS0D9FUaWX6kdTASUVMtUwCAzi7w8O7seoMrVIKimG+UGYP9Fq8q b6NXQvao2odzpT2np1NRWUqV3lSi48Aqv54awB8j0v9DvZ6KiGo8zNMUYRQoJgyq 2OvA0RBQNbZ12YL/L9arTLNhXD8OB4zppVjhAVWGVmpguxq9cvajj+NbT4t6CYUZ jjdSgulSRcZdlVWgIRSCJi3dy/V0UHqGD9gDI64UUTpZ4eAEKMk7++si24JyRdRr pl+DArFVCf7QVUEyzitUiUHDfxmppGXpmi5qKN+wFRJvZNJsc1Oot9XkF5+JoHU1 ZNzixdHR1GJIdU45p9nZBbmOnYFxRe4= -----END CERTIFICATE-----Generated at Thu Mar 26 13:40:09 2026 by rpki-client