$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af94c568-033d-3a88-9500-558aeee053a0.roa File: af94c568-033d-3a88-9500-558aeee053a0.roa (raw, json) Hash identifier: 8XPwpMC4d83eN+L5ckT8vMaSdzVYzZKAklDTK4cGOKY= Subject key identifier: 16:3B:C4:24:47:26:56:26:F9:EA:B2:E6:21:91:36:B3:87:8E:5F:47 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFBA3196BBF59FA362FE39 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af94c568-033d-3a88-9500-558aeee053a0.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:ba:31:96:bb:f5:9f:a3:62:fe:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f5c6f7c9-9f5e-4149-9ae7-f4298252b963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b4:31:b2:a7:55:da:59:e7:b8:64:d7:67:59: 32:ef:15:c7:57:02:8a:62:1f:f8:51:de:90:ac:3d: e5:4b:7b:9a:27:40:d4:98:2a:d3:0f:30:d5:65:82: 0d:af:8c:74:53:ee:20:07:f8:59:3c:fd:5c:42:6b: 3a:18:01:ec:b4:24:84:e4:c7:a9:ca:b1:04:10:35: 8d:25:32:08:3e:96:97:5d:8d:4e:e0:3e:bf:56:4b: e6:ca:8b:0d:c8:c0:4b:18:29:d1:97:4f:1c:cd:e5: 91:31:47:0f:84:8a:a3:7a:e9:79:d5:52:40:8b:cd: b4:4b:53:65:cf:09:ad:c1:3a:be:6c:83:a0:cd:bf: 0e:95:7c:d1:4c:df:0c:97:f3:5d:f8:f0:a0:62:47: 28:fe:4b:8b:77:73:2d:62:1f:d8:23:02:6f:58:13: 22:4a:8b:fb:f5:5a:97:ee:6d:51:7f:ad:b5:8a:fb: b0:e5:be:47:5d:79:05:fd:ec:18:28:83:92:32:7f: 81:88:e7:8b:85:15:52:c1:0d:4a:17:a2:b6:94:df: 8e:d0:48:bf:9b:2a:84:1f:f7:01:a0:a5:d1:10:be: e2:29:21:6f:30:50:d8:42:69:7b:72:f4:23:fa:e9: 0b:42:76:19:56:c1:40:2b:97:7e:97:35:f4:f2:a5: 75:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3B:C4:24:47:26:56:26:F9:EA:B2:E6:21:91:36:B3:87:8E:5F:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af94c568-033d-3a88-9500-558aeee053a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:cc:8d:a8:b3:9c:08:33:25:f5:34:37:8e:4d:bb:c0:b8:d7: d4:cf:b3:09:63:af:22:b5:79:10:27:58:b0:e6:11:8f:cb:0f: c7:d2:30:bd:50:90:7c:ad:ed:30:c4:89:27:ae:6c:79:79:41: 2c:d5:1c:50:33:b3:0e:78:44:0c:ea:2c:0e:d9:47:40:11:2d: d6:89:46:31:3c:cf:15:6f:9e:e5:69:67:97:70:7c:c8:6a:88: ba:18:65:63:44:3a:c7:a2:e5:56:f6:53:38:bd:55:f1:3e:63: 4d:db:a0:e8:e6:2a:e7:b3:4c:21:e2:08:23:f2:a4:52:10:72: 67:58:b1:b4:b3:25:3c:1a:0e:8f:8e:32:b0:37:fb:45:b9:bf: 45:88:7e:89:0c:18:5c:ff:89:ce:59:46:8d:67:bc:87:ed:1f: b3:3c:51:4a:cd:ac:10:4c:3f:83:e5:72:f3:9d:19:9e:df:ad: 33:85:e3:db:aa:9a:fa:26:36:5c:41:f0:40:cc:70:a7:ca:98: f0:c1:bd:58:17:d4:0d:37:66:46:33:ae:17:cb:e0:b7:07:73: a0:94:5f:13:d6:3a:41:5c:90:e8:eb:4f:38:ba:ce:95:14:b3: 29:49:89:03:d2:b9:9d:5d:ef:6a:41:fb:55:9d:0a:d5:fb:e3: e0:89:a9:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37oxlrv1n6Ni/jkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjVjNmY3YzktOWY1ZS00MTQ5LTlhZTctZjQyOTgyNTJiOTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7QxsqdV2lnnuGTXZ1ky7xXHVwKKYh/4Ud6Q rD3lS3uaJ0DUmCrTDzDVZYINr4x0U+4gB/hZPP1cQms6GAHstCSE5MepyrEEEDWN JTIIPpaXXY1O4D6/VkvmyosNyMBLGCnRl08czeWRMUcPhIqjeul51VJAi820S1Nl zwmtwTq+bIOgzb8OlXzRTN8Ml/Nd+PCgYkco/kuLd3MtYh/YIwJvWBMiSov79VqX 7m1Rf621ivuw5b5HXXkF/ewYKIOSMn+BiOeLhRVSwQ1KF6K2lN+O0Ei/myqEH/cB oKXREL7iKSFvMFDYQml7cvQj+ukLQnYZVsFAK5d+lzX08qV17QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBY7xCRHJlYm+eqy5iGRNrOHjl9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWY5NGM1NjgtMDMzZC0z YTg4LTk1MDAtNTU4YWVlZTA1M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTMjaiznAgzJfU0N45Nu8C419TPswljryK1eRAnWLDmEY/LD8fSML1Q kHyt7TDEiSeubHl5QSzVHFAzsw54RAzqLA7ZR0ARLdaJRjE8zxVvnuVpZ5dwfMhq iLoYZWNEOsei5Vb2Uzi9VfE+Y03boOjmKuezTCHiCCPypFIQcmdYsbSzJTwaDo+O MrA3+0W5v0WIfokMGFz/ic5ZRo1nvIftH7M8UUrNrBBMP4PlcvOdGZ7frTOF49uq mvomNlxB8EDMcKfKmPDBvVgX1A03ZkYzrhfL4LcHc6CUXxPWOkFckOjrTzi6zpUU sylJiQPSuZ1d72pB+1WdCtX74+CJqS0= -----END CERTIFICATE-----Generated at Thu Mar 26 17:36:26 2026 by rpki-client