$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb2ea8e9-1f97-32cd-bf12-5899231a5320.roa File: bb2ea8e9-1f97-32cd-bf12-5899231a5320.roa (raw, json) Hash identifier: tiT+wMIPXVUUQfWSyzpAzVYEsWKMB+BYgkuddUhnFX8= Subject key identifier: 7B:DB:3C:C2:F1:95:D9:8A:CD:D6:EA:91:47:E3:F4:AB:CC:FC:91:96 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFF5EC1DB8775CAEBDB4C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb2ea8e9-1f97-32cd-bf12-5899231a5320.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 162.72.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:f5:ec:1d:b8:77:5c:ae:bd:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c756de7c-0368-4b6a-bb95-8a7c23859d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:84:8f:c0:37:0f:0d:96:9c:af:1d:2a:52:2e: 62:03:3c:7c:e6:ed:01:28:6b:f4:95:e7:9b:f4:44: 51:8d:6f:dc:66:ac:cc:65:b6:2f:72:a4:83:2b:79: fe:6a:74:de:40:d0:96:58:0b:f0:af:59:d0:f6:98: 4e:2d:bb:64:6f:1b:4a:6c:78:fd:97:4b:57:05:04: 5b:c3:68:7d:e2:1c:c9:24:f2:02:9d:22:1e:53:78: cb:68:2e:fc:db:b5:de:40:50:2a:8b:c4:d7:e3:e9: 70:65:d7:88:84:28:83:99:d0:53:27:90:87:3b:70: d0:be:ad:4e:a0:65:0a:5c:41:1b:ea:cf:62:05:ba: 2d:2b:76:c1:73:f8:9b:06:b8:5a:cb:e8:ab:07:7f: 5c:78:b1:cd:d4:ba:87:f7:9c:a2:3d:88:65:4c:ac: bc:e3:e1:a5:48:24:20:c6:b9:05:8c:98:94:2b:07: 5e:f4:f0:81:02:f9:f4:24:c7:27:68:3f:3e:13:41: 1e:76:b7:4e:2a:c1:25:45:c0:61:76:d2:34:7c:be: 18:6d:3c:8b:bb:d3:38:cb:e8:8d:d7:cf:22:2c:d9: 59:33:46:a2:b9:75:97:7f:44:e0:f0:4f:17:27:ab: d8:f5:25:f0:45:b9:34:26:bf:2f:ad:39:e6:f4:21: dc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DB:3C:C2:F1:95:D9:8A:CD:D6:EA:91:47:E3:F4:AB:CC:FC:91:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb2ea8e9-1f97-32cd-bf12-5899231a5320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:c8:33:32:82:9d:1e:2e:86:7b:89:42:bb:23:3c:88:25:e3: 6e:ee:49:5b:93:d6:1c:82:0e:cc:c3:7b:92:22:51:f8:47:ed: 0f:f6:aa:6a:47:0b:18:2a:08:62:0f:2c:57:53:b9:e0:69:8d: 6a:14:d8:5e:56:b2:a9:b2:28:30:3f:4f:29:80:cc:39:4a:de: b5:26:5e:34:bd:44:61:94:17:f4:dd:f4:c1:19:2e:97:e1:48: c3:07:cc:58:a9:cf:f3:12:42:28:83:11:7f:4a:ca:9e:c2:d1: 72:6b:08:af:6d:9b:b8:4f:7d:30:04:ea:fa:ee:f7:7b:e5:fa: 58:be:18:45:aa:91:76:d0:d0:5c:8c:15:2b:35:93:40:8b:90: 3d:58:14:8c:fa:68:ac:f6:87:f3:f1:b2:70:82:6f:ed:20:3a: 1c:57:e2:1f:65:97:29:d7:5f:0c:ea:5d:2c:b5:35:2b:64:4b: ca:a3:be:ce:8e:93:2d:d7:39:23:2d:5b:1e:48:84:b9:67:2e: 2b:f0:44:d8:60:75:a4:e6:7d:63:1e:7f:e0:65:65:a3:d0:cd: a8:1f:af:78:8e:89:9c:50:46:46:e7:f7:1a:0a:14:a0:2d:7e: f9:fb:32:e7:a3:b7:ed:79:06:ce:ed:5a:98:08:56:8b:3c:b0: fa:60:72:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/XsHbh3XK69tMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Yzc1NmRlN2MtMDM2OC00YjZhLWJiOTUtOGE3YzIzODU5ZDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoSPwDcPDZacrx0qUi5iAzx85u0BKGv0leeb 9ERRjW/cZqzMZbYvcqSDK3n+anTeQNCWWAvwr1nQ9phOLbtkbxtKbHj9l0tXBQRb w2h94hzJJPICnSIeU3jLaC7827XeQFAqi8TX4+lwZdeIhCiDmdBTJ5CHO3DQvq1O oGUKXEEb6s9iBbotK3bBc/ibBrhay+irB39ceLHN1LqH95yiPYhlTKy84+GlSCQg xrkFjJiUKwde9PCBAvn0JMcnaD8+E0EedrdOKsElRcBhdtI0fL4YbTyLu9M4y+iN 188iLNlZM0aiuXWXf0Tg8E8XJ6vY9SXwRbk0Jr8vrTnm9CHcOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvbPMLxldmKzdbqkUfj9KvM/JGWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmIyZWE4ZTktMWY5Ny0z MmNkLWJmMTItNTg5OTIzMWE1MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALvIMzKCnR4uhnuJQrsjPIgl427uSVuT1hyCDszDe5IiUfhH7Q/2qmpH CxgqCGIPLFdTueBpjWoU2F5WsqmyKDA/TymAzDlK3rUmXjS9RGGUF/Td9MEZLpfh SMMHzFipz/MSQiiDEX9Kyp7C0XJrCK9tm7hPfTAE6vru93vl+li+GEWqkXbQ0FyM FSs1k0CLkD1YFIz6aKz2h/PxsnCCb+0gOhxX4h9llynXXwzqXSy1NStkS8qjvs6O ky3XOSMtWx5IhLlnLivwRNhgdaTmfWMef+BlZaPQzagfr3iOiZxQRkbn9xoKFKAt fvn7Muejt+15Bs7tWpgIVos8sPpgcq0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:45:55 2026 by rpki-client