$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfaacc0d-5171-3bf3-9d23-9b276aa315a1.roa File: bfaacc0d-5171-3bf3-9d23-9b276aa315a1.roa (raw, json) Hash identifier: DMZq5QrflC7m0OERLS21nCM8PxNkpilkW4f/S9OA7d0= Subject key identifier: 11:95:68:A9:89:37:ED:70:13:9D:BB:C4:97:D6:A0:9A:6A:5F:6F:DB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0ADB73FA0D7F3540B2C00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfaacc0d-5171-3bf3-9d23-9b276aa315a1.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ad:b7:3f:a0:d7:f3:54:0b:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ba3a27bb-0b79-42d4-aa07-7396a226b513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:f1:c3:0e:ab:d5:f7:c0:06:80:29:62:f6: 3d:75:eb:17:8e:20:71:f8:d6:61:b4:24:14:e9:80: 8f:f8:88:71:11:23:c7:8a:8a:f5:2d:49:44:6f:14: 44:1a:88:2b:c4:dd:be:ac:66:60:56:ad:19:e5:54: dd:d9:4b:55:17:21:54:44:65:9a:c7:09:0d:9f:f9: 1e:83:db:b5:25:3d:8f:47:f4:2f:d1:28:81:f2:ed: d1:15:f7:af:ed:bc:bc:c6:80:d2:60:1a:b1:b8:31: 7b:9e:69:32:63:3d:d3:fe:f0:78:85:22:a7:94:3b: d2:d9:0b:32:31:2a:b3:a5:65:6e:16:e6:f5:f0:8b: b0:dd:69:df:c2:51:ec:3f:40:38:bc:ad:d4:ab:3e: 22:62:ce:7e:c2:38:b2:59:e0:d0:b7:99:82:e4:b5: 07:c5:19:46:03:bd:7f:2d:f9:00:24:bd:14:2c:1c: cc:94:8a:6d:07:4c:b9:b6:80:6a:86:f1:4d:9c:de: 43:12:3b:8d:a9:0d:66:c7:31:52:2f:72:8f:7e:f9: 6a:96:58:f9:46:dd:74:83:1e:40:4b:d9:63:0a:23: bf:d4:17:1a:b1:17:51:ec:98:05:fe:60:6a:a0:80: 83:f1:fa:61:50:5d:e4:f1:20:be:ed:6e:f8:ea:75: 44:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:95:68:A9:89:37:ED:70:13:9D:BB:C4:97:D6:A0:9A:6A:5F:6F:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfaacc0d-5171-3bf3-9d23-9b276aa315a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:ec:44:1a:57:80:4f:89:68:13:04:f6:39:d5:1d:b4:7f:83: d8:1f:52:3f:da:47:92:d0:8a:4f:10:07:a6:35:b7:ec:75:d2: f1:56:15:f6:f7:eb:a1:33:b5:c2:08:24:4a:22:ef:bd:0d:41: 04:b4:ce:dd:33:29:a7:67:a4:c7:45:cd:b3:76:8e:d5:61:e6: 20:16:cd:01:f6:58:90:3e:5d:23:fb:5e:25:9d:dd:e5:4c:0e: 80:98:62:c5:b4:32:c7:de:74:74:1f:80:12:39:13:fe:2b:57: db:e9:6f:ea:0e:5d:c6:d3:3f:b9:c0:fe:31:40:e6:bd:14:d0: a2:d8:53:b4:41:ef:12:20:9f:ed:dc:1a:a2:ca:b5:e4:22:9b: bc:2b:bb:fd:c8:f3:8a:62:5e:88:11:b9:b0:3b:00:1f:22:f4: 90:8f:01:69:0c:e8:81:24:78:03:11:6d:d6:9a:f9:df:4d:20: ba:ca:01:63:1d:26:1f:60:de:ea:8d:bd:70:99:7a:08:a5:b1: ef:cc:c4:46:b8:74:20:8b:ee:99:be:85:c1:be:88:48:c8:92: 4c:a2:88:bf:bd:31:e7:27:c8:2f:df:ca:a3:b6:97:13:c9:29: fe:8d:e6:ff:fb:b4:89:4e:29:cf:27:f5:8b:79:bc:cc:ab:72: 4c:90:4c:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4K23P6DX81QLLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YmEzYTI3YmItMGI3OS00MmQ0LWFhMDctNzM5NmEyMjZiNTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPDxww6r1ffABoApYvY9desXjiBx+NZhtCQU 6YCP+IhxESPHior1LUlEbxREGogrxN2+rGZgVq0Z5VTd2UtVFyFURGWaxwkNn/ke g9u1JT2PR/Qv0SiB8u3RFfev7by8xoDSYBqxuDF7nmkyYz3T/vB4hSKnlDvS2Qsy MSqzpWVuFub18Iuw3WnfwlHsP0A4vK3Uqz4iYs5+wjiyWeDQt5mC5LUHxRlGA71/ LfkAJL0ULBzMlIptB0y5toBqhvFNnN5DEjuNqQ1mxzFSL3KPfvlqllj5Rt10gx5A S9ljCiO/1BcasRdR7JgF/mBqoICD8fphUF3k8SC+7W746nVESwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGVaKmJN+1wE527xJfWoJpqX2/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmZhYWNjMGQtNTE3MS0z YmYzLTlkMjMtOWIyNzZhYTMxNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHsRBpXgE+JaBME9jnVHbR/g9gfUj/aR5LQik8QB6Y1t+x10vFWFfb3 66EztcIIJEoi770NQQS0zt0zKadnpMdFzbN2jtVh5iAWzQH2WJA+XSP7XiWd3eVM DoCYYsW0MsfedHQfgBI5E/4rV9vpb+oOXcbTP7nA/jFA5r0U0KLYU7RB7xIgn+3c GqLKteQim7wru/3I84piXogRubA7AB8i9JCPAWkM6IEkeAMRbdaa+d9NILrKAWMd Jh9g3uqNvXCZegilse/MxEa4dCCL7pm+hcG+iEjIkkyiiL+9MecnyC/fyqO2lxPJ Kf6N5v/7tIlOKc8n9Yt5vMyrckyQTHg= -----END CERTIFICATE-----Generated at Thu Mar 26 06:07:17 2026 by rpki-client