$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc4595f9-4cd7-33b7-94d2-e585336dbfa2.roa File: bc4595f9-4cd7-33b7-94d2-e585336dbfa2.roa (raw, json) Hash identifier: 73cpmtKA+8owORX5XdC+OK7z+y++CysfIa7/MXKwazs= Subject key identifier: 46:47:F1:37:16:7C:80:3D:C3:A6:89:28:59:21:A3:3C:01:3B:6C:0F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0682F530844C010C46E2F Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc4595f9-4cd7-33b7-94d2-e585336dbfa2.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:68:2f:53:08:44:c0:10:c4:6e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f6be2c88-6b7e-4a0b-b68f-fe2c7cfeb091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f8:b9:d8:99:d7:ce:ca:64:c0:27:f2:9b:5d: 23:e4:70:42:a4:56:f2:fc:ef:7f:c0:da:bb:c4:07: 2f:ac:bf:3b:ae:c7:17:95:9f:41:a7:83:8a:e8:aa: fb:7b:c5:c9:49:28:0b:97:b1:02:72:ed:71:22:18: f7:01:28:34:16:bd:38:32:0d:cd:4b:e8:5e:5a:53: d3:a9:e5:99:07:fc:d6:34:39:7b:3e:8c:35:75:32: 44:fe:4a:ac:01:48:2f:e5:d6:af:b2:b8:ac:8b:65: 26:04:83:91:68:ce:fd:21:2b:ff:6f:74:69:06:2c: af:e5:28:e7:21:c3:85:ed:64:15:e4:4f:1a:83:5c: 12:1a:d5:d2:91:a6:9b:ca:eb:2e:bc:5e:af:40:0a: 21:ed:a6:58:34:c9:7a:b0:65:d5:dc:a2:62:03:55: fc:fd:9f:4c:ed:2b:74:d4:f9:92:47:fe:2a:21:ee: aa:95:da:12:95:86:88:18:20:97:aa:4e:59:00:00: aa:68:8c:23:16:78:27:4e:03:9d:76:1e:5d:db:d9: 95:8e:c4:ba:dd:37:82:de:da:e4:36:76:a5:d0:cd: 33:80:c5:ff:12:bb:c1:e5:85:17:52:ac:47:ae:51: 38:e7:6b:f3:0a:03:a1:94:a5:c0:0b:28:d6:ff:57: 99:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:47:F1:37:16:7C:80:3D:C3:A6:89:28:59:21:A3:3C:01:3B:6C:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc4595f9-4cd7-33b7-94d2-e585336dbfa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:6d:b8:a9:78:95:11:8a:6d:aa:39:cc:9e:5e:7f:0e:70:d1: 45:2a:96:58:bc:d2:32:54:5d:1a:6e:2e:1e:2f:3b:c1:55:f3: 82:b6:49:2f:f3:80:71:e6:2f:42:5c:51:8f:d3:09:a5:39:37: 80:f5:99:aa:63:fb:af:4b:c3:48:eb:15:68:74:9a:60:ae:fb: 54:28:9a:99:42:a6:81:01:d1:78:48:d6:71:56:02:5e:6d:14: a3:7b:37:5d:34:5b:c6:b4:ef:3d:27:e9:f3:21:e5:6d:6c:16: 3b:4d:35:0d:1f:e2:c7:3c:76:eb:fc:86:3a:25:40:08:e2:1a: 6a:19:70:24:2c:1b:16:6c:ff:6d:1b:cf:22:50:71:4c:c6:f1: 3f:11:ed:4e:22:0d:2c:06:ee:30:0d:ee:0d:96:7e:ee:9c:58: 1f:6c:af:92:c0:51:47:a9:c9:25:97:53:40:7f:be:fb:fe:c0: 60:ca:c6:f8:f8:b7:24:ee:da:9c:bd:9b:61:4d:aa:ad:0a:4d: 54:2f:5d:f2:30:a5:69:0b:19:fe:96:51:27:84:7f:67:e0:4a: cd:c9:de:1d:34:83:bd:6b:91:40:f0:4f:c9:5f:7f:f0:9d:a2: 8e:59:9f:79:11:e6:08:41:96:cf:dd:50:8d:a0:e5:34:32:19: 56:d4:05:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GgvUwhEwBDEbi8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjZiZTJjODgtNmI3ZS00YTBiLWI2OGYtZmUyYzdjZmViMDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/i52JnXzspkwCfym10j5HBCpFby/O9/wNq7 xAcvrL87rscXlZ9Bp4OK6Kr7e8XJSSgLl7ECcu1xIhj3ASg0Fr04Mg3NS+heWlPT qeWZB/zWNDl7Pow1dTJE/kqsAUgv5davsrisi2UmBIORaM79ISv/b3RpBiyv5Sjn IcOF7WQV5E8ag1wSGtXSkaabyusuvF6vQAoh7aZYNMl6sGXV3KJiA1X8/Z9M7St0 1PmSR/4qIe6qldoSlYaIGCCXqk5ZAACqaIwjFngnTgOddh5d29mVjsS63TeC3trk Nnal0M0zgMX/ErvB5YUXUqxHrlE452vzCgOhlKXACyjW/1eZiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZH8TcWfIA9w6aJKFkhozwBO2wPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmM0NTk1ZjktNGNkNy0z M2I3LTk0ZDItZTU4NTMzNmRiZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIptuKl4lRGKbao5zJ5efw5w0UUqlli80jJUXRpuLh4vO8FV84K2SS/z gHHmL0JcUY/TCaU5N4D1mapj+69Lw0jrFWh0mmCu+1QomplCpoEB0XhI1nFWAl5t FKN7N100W8a07z0n6fMh5W1sFjtNNQ0f4sc8duv8hjolQAjiGmoZcCQsGxZs/20b zyJQcUzG8T8R7U4iDSwG7jAN7g2Wfu6cWB9sr5LAUUepySWXU0B/vvv+wGDKxvj4 tyTu2py9m2FNqq0KTVQvXfIwpWkLGf6WUSeEf2fgSs3J3h00g71rkUDwT8lff/Cd oo5Zn3kR5ghBls/dUI2g5TQyGVbUBb8= -----END CERTIFICATE-----Generated at Thu Mar 26 11:36:09 2026 by rpki-client