$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad760d84-9ad6-391c-8399-873dafb9d352.roa File: ad760d84-9ad6-391c-8399-873dafb9d352.roa (raw, json) Hash identifier: 7vY2opufcbUa9nCLeoK+4+Zy8UMVTYk3yRDu0em5sIU= Subject key identifier: A1:60:35:35:D5:8E:76:82:68:A1:6F:46:AB:AB:D5:9B:AB:AE:A1:6B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFA95CD964E747C97B0D0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad760d84-9ad6-391c-8399-873dafb9d352.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fa:95:cd:96:4e:74:7c:97:b0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b377dc78-01d0-42bb-b27a-e3d7a9157843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:07:5e:dc:eb:93:4d:4c:a3:aa:80:08:45: a5:d3:d5:ea:8b:8c:b8:7b:37:8e:6c:f1:63:81:1f: 81:81:05:92:39:54:7e:1d:2d:d9:15:e5:8e:de:fe: 9f:2f:51:b2:c5:74:84:1e:4d:e6:a3:c0:82:a5:64: ba:1b:01:5c:a6:38:e6:99:37:41:aa:89:21:da:c0: 5a:12:8e:d1:35:3d:44:7d:50:64:3f:b5:23:de:cf: fd:e9:89:37:7e:f9:fb:10:ce:df:2e:0a:1e:e2:1c: 6d:ca:b8:67:93:c6:58:55:13:1b:ba:cc:32:e9:f2: 0b:07:3b:cb:e7:af:d1:ea:10:91:05:04:91:82:5a: 5c:66:0a:7d:8a:c6:09:4f:db:6e:ef:e9:80:79:c1: 76:0d:81:37:96:43:8c:d8:01:de:d1:b8:1e:87:35: be:af:a5:61:0e:de:93:30:4f:d4:f9:70:46:f8:b6: 6a:db:b7:77:6c:54:fb:fb:ab:b1:bf:d8:c0:83:f1: 83:e0:06:05:ac:c6:d9:5a:19:2a:a4:cb:0e:52:85: 68:39:24:e4:aa:16:f6:06:18:ef:f1:28:f0:49:3a: 95:f5:a3:b1:bf:ea:81:75:2c:11:5b:f7:94:77:7f: 2b:d0:f8:9b:4e:19:c7:27:6d:60:46:e4:f6:72:b8: 85:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:60:35:35:D5:8E:76:82:68:A1:6F:46:AB:AB:D5:9B:AB:AE:A1:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad760d84-9ad6-391c-8399-873dafb9d352.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ed:93:f9:83:27:89:27:3d:69:cd:94:f6:07:16:1a:22:64: 2b:02:40:f4:33:ef:ec:51:d6:cc:a8:e7:20:ab:ed:e9:c2:2b: e8:4d:85:f1:3e:db:35:ed:b2:07:75:c5:36:0f:aa:ad:90:d5: 53:69:7f:5a:fc:7f:49:3f:fd:b7:39:9e:34:ec:8a:93:8f:91: 1f:6c:e4:32:45:01:1f:fb:59:1a:01:ed:5a:66:16:40:4c:d2: c6:51:4b:e2:d2:ce:a4:fe:99:bf:dc:89:c3:9b:8e:b3:ab:d3: 0a:5d:da:12:a1:82:35:84:14:56:1d:b4:8b:a8:4e:10:bf:fc: 76:eb:54:fa:05:4c:3b:dc:17:e0:0c:00:03:7d:cd:70:59:b1: cd:5e:16:32:b8:c9:10:7b:22:27:b1:a0:31:d6:8b:08:a9:9e: 2d:39:44:da:c7:3b:ed:13:bb:9f:38:1f:0a:5e:ab:d3:dd:cb: a5:8d:99:2a:ea:cd:eb:b6:82:27:f6:09:6f:c3:91:2c:45:45: 3a:1c:5c:4e:e5:63:79:68:93:50:e0:8f:6e:0d:05:ee:29:b7: c6:c8:df:11:58:98:34:81:23:be:dc:dd:6c:b3:84:bc:44:dc: e8:7d:1c:61:80:64:26:05:66:2b:f5:75:bd:53:c3:85:6e:75: e8:99:83:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/qVzZZOdHyXsNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjM3N2RjNzgtMDFkMC00MmJiLWIyN2EtZTNkN2E5MTU3ODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKMHXtzrk01Mo6qACEWl09Xqi4y4ezeObPFj gR+BgQWSOVR+HS3ZFeWO3v6fL1GyxXSEHk3mo8CCpWS6GwFcpjjmmTdBqokh2sBa Eo7RNT1EfVBkP7Uj3s/96Yk3fvn7EM7fLgoe4hxtyrhnk8ZYVRMbuswy6fILBzvL 56/R6hCRBQSRglpcZgp9isYJT9tu7+mAecF2DYE3lkOM2AHe0bgehzW+r6VhDt6T ME/U+XBG+LZq27d3bFT7+6uxv9jAg/GD4AYFrMbZWhkqpMsOUoVoOSTkqhb2Bhjv 8SjwSTqV9aOxv+qBdSwRW/eUd38r0PibThnHJ21gRuT2criFtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFgNTXVjnaCaKFvRqur1ZurrqFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWQ3NjBkODQtOWFkNi0z OTFjLTgzOTktODczZGFmYjlkMzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXtk/mDJ4knPWnNlPYHFhoiZCsCQPQz7+xR1syo5yCr7enCK+hNhfE+ 2zXtsgd1xTYPqq2Q1VNpf1r8f0k//bc5njTsipOPkR9s5DJFAR/7WRoB7VpmFkBM 0sZRS+LSzqT+mb/cicObjrOr0wpd2hKhgjWEFFYdtIuoThC//HbrVPoFTDvcF+AM AAN9zXBZsc1eFjK4yRB7IiexoDHWiwipni05RNrHO+0Tu584Hwpeq9Pdy6WNmSrq zeu2gif2CW/DkSxFRTocXE7lY3lok1Dgj24NBe4pt8bI3xFYmDSBI77c3WyzhLxE 3Oh9HGGAZCYFZiv1db1Tw4VudeiZg3s= -----END CERTIFICATE-----Generated at Thu Mar 26 19:12:29 2026 by rpki-client