$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b59b75a3-ff65-36ff-9068-52862b2493d7.roa File: b59b75a3-ff65-36ff-9068-52862b2493d7.roa (raw, json) Hash identifier: 6Cd2yFCMgfth4JbevV6u1fM3WfmLA9kucakIiNMB4g8= Subject key identifier: 11:A4:41:87:02:76:24:6E:B8:E4:3B:5E:87:37:36:A0:7B:85:D1:94 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B03F9E2C8E6E0A7D3280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b59b75a3-ff65-36ff-9068-52862b2493d7.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b0:3f:9e:2c:8e:6e:0a:7d:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=46aea694-5298-4e85-be91-cad4a5041359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3e:87:58:fc:ae:c6:7f:19:0f:d7:2f:7c:5c: 60:77:b1:73:6f:89:6c:c2:1f:01:07:a4:fb:6d:b0: 45:a7:70:c4:6b:73:5b:41:74:9f:77:33:0e:72:68: 20:60:20:f9:da:22:33:f8:6f:3b:a9:97:36:58:ec: 2c:4b:4c:ef:7a:14:d9:52:4a:e9:c0:3d:38:33:1e: 1f:2e:b7:85:da:cd:d6:cb:7a:88:d4:9a:f8:a4:69: fc:20:a1:ee:42:39:80:6c:47:02:cf:85:76:d3:f7: 08:6c:d2:0c:bf:5d:9c:e1:a1:b0:01:cf:c5:9d:1f: 1b:c0:b6:64:ea:10:2a:98:2c:65:85:1b:c1:57:e7: 7d:06:6b:c7:74:b0:45:e5:c8:54:52:b2:97:b6:7a: 35:29:05:00:fd:92:4a:6a:06:ad:f0:de:7e:a4:ff: 88:69:c8:ed:82:a3:1e:fa:fa:e7:e0:f7:4d:4e:3e: 59:f4:b1:93:9d:da:fa:ca:0d:dd:67:21:91:ee:6c: f6:eb:e7:44:2e:8c:10:1f:72:b5:13:fe:95:96:0e: f6:2e:0b:80:e7:1b:2f:84:7e:14:ce:f5:10:9e:69: d6:dd:eb:e6:9c:18:d2:9f:9d:42:d6:94:06:dc:f9: 64:8d:d5:61:26:5a:ec:17:78:c5:34:65:46:6d:f7: 29:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A4:41:87:02:76:24:6E:B8:E4:3B:5E:87:37:36:A0:7B:85:D1:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b59b75a3-ff65-36ff-9068-52862b2493d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:f3:9d:16:e6:a6:7a:b9:89:35:07:d8:df:da:22:a2:94:c1: b0:27:8e:4b:89:7d:2a:a5:5d:05:e0:39:96:83:04:70:0e:f9: 91:57:68:e6:d3:8c:96:33:65:c1:bd:b3:2f:05:86:66:45:c3: 86:c2:13:73:42:c6:0d:96:ff:84:f3:eb:a8:82:d7:34:b3:d7: c2:27:75:30:ff:96:97:44:f7:4d:95:63:cb:e7:48:82:12:f6: 6b:62:34:c0:66:7f:4b:e3:3d:f7:d9:0d:2d:05:8f:6f:c6:fa: 1d:7e:92:e6:1d:35:a5:4f:6a:66:dd:12:1f:ff:72:c1:ef:18: 7d:a8:60:63:c2:36:e4:e5:e4:21:e9:39:a2:06:8f:fd:c5:19: 1e:82:5f:af:b1:8a:77:d6:81:5b:f1:d3:26:c3:67:15:7e:48: d9:fb:24:7c:3f:ee:b8:31:9c:8b:d4:bb:41:a9:c6:c5:06:01: 0f:c8:5c:92:89:ad:b6:f6:43:25:ce:18:aa:27:60:6f:97:74: a5:29:7e:d1:5d:3f:59:c0:ca:14:27:50:0b:c8:b2:6d:05:51: ed:be:d3:bb:f4:fd:e5:9a:80:a2:fe:13:fc:6e:a0:eb:46:c8: e6:c5:ed:d7:f4:71:bc:bd:b6:6d:43:2b:e9:04:3d:ca:8a:70: cd:4b:08:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LA/niyObgp9MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDZhZWE2OTQtNTI5OC00ZTg1LWJlOTEtY2FkNGE1MDQxMzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D6HWPyuxn8ZD9cvfFxgd7Fzb4lswh8BB6T7 bbBFp3DEa3NbQXSfdzMOcmggYCD52iIz+G87qZc2WOwsS0zvehTZUkrpwD04Mx4f LreF2s3Wy3qI1Jr4pGn8IKHuQjmAbEcCz4V20/cIbNIMv12c4aGwAc/FnR8bwLZk 6hAqmCxlhRvBV+d9BmvHdLBF5chUUrKXtno1KQUA/ZJKagat8N5+pP+IacjtgqMe +vrn4PdNTj5Z9LGTndr6yg3dZyGR7mz26+dELowQH3K1E/6Vlg72LguA5xsvhH4U zvUQnmnW3evmnBjSn51C1pQG3PlkjdVhJlrsF3jFNGVGbfcpVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGkQYcCdiRuuOQ7Xoc3NqB7hdGUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjU5Yjc1YTMtZmY2NS0z NmZmLTkwNjgtNTI4NjJiMjQ5M2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTznRbmpnq5iTUH2N/aIqKUwbAnjkuJfSqlXQXgOZaDBHAO+ZFXaObT jJYzZcG9sy8FhmZFw4bCE3NCxg2W/4Tz66iC1zSz18IndTD/lpdE902VY8vnSIIS 9mtiNMBmf0vjPffZDS0Fj2/G+h1+kuYdNaVPambdEh//csHvGH2oYGPCNuTl5CHp OaIGj/3FGR6CX6+xinfWgVvx0ybDZxV+SNn7JHw/7rgxnIvUu0GpxsUGAQ/IXJKJ rbb2QyXOGKonYG+XdKUpftFdP1nAyhQnUAvIsm0FUe2+07v0/eWagKL+E/xuoOtG yObF7df0cby9tm1DK+kEPcqKcM1LCOs= -----END CERTIFICATE-----Generated at Thu Mar 26 17:05:59 2026 by rpki-client