$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c89a28ad-0d1e-34ab-9c5a-ff3e59af4604.roa File: c89a28ad-0d1e-34ab-9c5a-ff3e59af4604.roa (raw, json) Hash identifier: sQoFXRzXlzspSKmb2EDYU71D+AxJK1gayQWJiib2MWY= Subject key identifier: F0:6B:97:DC:4F:5A:2F:73:EE:20:59:DC:88:91:AB:F4:93:04:2D:6D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E003D4174C7E4A31604000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c89a28ad-0d1e-34ab-9c5a-ff3e59af4604.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:03:d4:17:4c:7e:4a:31:60:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6d6c2ce0-dece-463e-9db9-aef0cdeac7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:74:44:95:64:1c:b2:18:72:dc:11:2d:3b: 29:49:09:47:d3:00:90:6b:dc:32:61:87:21:b0:06: 64:26:7c:f2:28:43:f3:41:f2:02:9f:29:a4:bf:6a: 2d:c3:f8:c8:77:bf:bb:eb:60:b0:13:1f:6d:6e:bd: 97:6f:3d:83:16:4f:7b:c3:f7:b0:10:2b:39:5b:12: f3:db:f4:01:03:ad:2b:b4:4d:9c:e1:2b:35:bd:0e: 0f:fe:30:5d:0f:10:fb:9f:7c:57:00:86:04:e3:1f: 90:15:91:3e:b1:98:28:9d:7f:8e:39:db:1e:36:fe: 78:7a:e4:59:5e:41:2d:fe:69:70:59:dd:d9:8f:74: 03:eb:f7:4a:70:ac:02:39:1e:1b:38:e1:eb:da:38: e4:38:1b:66:01:4c:ea:00:ec:1c:40:fd:77:5d:69: 72:f1:a9:57:85:63:0c:fd:10:95:1b:6b:4b:46:be: 81:76:55:26:09:c1:a0:3e:7e:54:26:ee:75:28:98: 34:4d:50:46:dd:a0:e7:85:48:bd:a2:dd:cf:e4:df: f4:c3:48:63:a7:b9:6b:fd:9a:1a:f3:88:e3:bf:8e: fc:da:0b:ba:5d:84:db:ad:a0:b7:e0:23:19:9a:1f: de:d6:ea:d2:62:a0:40:61:be:35:49:45:dd:d6:8b: b7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6B:97:DC:4F:5A:2F:73:EE:20:59:DC:88:91:AB:F4:93:04:2D:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c89a28ad-0d1e-34ab-9c5a-ff3e59af4604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:53:2c:59:d0:e9:45:64:c9:40:44:8c:ad:09:fa:ac:20:5c: fc:92:83:36:0a:3e:95:53:23:12:a8:11:b8:91:0e:a1:9d:13: ca:73:fa:97:22:27:a3:18:bc:43:3b:34:70:3f:85:95:fb:d0: 85:18:f0:23:61:de:9c:be:aa:f4:e3:30:3c:11:3e:21:13:45: 72:1b:4b:e8:98:15:18:dd:6f:8f:4e:91:ed:d0:8f:bc:ab:93: ed:97:cf:68:a6:66:9e:20:61:b9:78:f1:2e:af:6c:8d:47:b5: 19:a1:84:1d:1b:32:13:68:bd:a2:c4:f0:b8:87:f2:07:fe:b1: ef:44:b7:72:d6:a7:84:81:02:66:0b:b4:5f:04:71:22:e6:0b: ad:36:ad:13:44:c2:80:87:d7:ac:41:1e:7e:5a:98:14:1b:7f: 9a:9d:86:94:00:77:cf:04:52:da:93:bb:f8:8a:33:5c:dd:1b: 8f:e5:8c:44:c0:09:26:86:a4:5c:e5:72:cb:4b:c6:af:b1:b4: 7a:98:e6:ac:35:06:d1:ce:cf:6b:7a:c1:83:25:1f:a7:ae:ba: e6:a1:ca:1f:64:43:b1:dd:5b:07:f6:4b:d5:88:46:c6:e2:bd: eb:9d:6d:4a:d0:2f:e5:bb:66:51:85:7e:88:c5:97:46:d7:2d: 16:11:f8:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4APUF0x+SjFgQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NmQ2YzJjZTAtZGVjZS00NjNlLTlkYjktYWVmMGNkZWFjN2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugt0RJVkHLIYctwRLTspSQlH0wCQa9wyYYch sAZkJnzyKEPzQfICnymkv2otw/jId7+762CwEx9tbr2Xbz2DFk97w/ewECs5WxLz 2/QBA60rtE2c4Ss1vQ4P/jBdDxD7n3xXAIYE4x+QFZE+sZgonX+OOdseNv54euRZ XkEt/mlwWd3Zj3QD6/dKcKwCOR4bOOHr2jjkOBtmAUzqAOwcQP13XWly8alXhWMM /RCVG2tLRr6BdlUmCcGgPn5UJu51KJg0TVBG3aDnhUi9ot3P5N/0w0hjp7lr/Zoa 84jjv4782gu6XYTbraC34CMZmh/e1urSYqBAYb41SUXd1ou3iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBrl9xPWi9z7iBZ3IiRq/STBC1tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzg5YTI4YWQtMGQxZS0z NGFiLTljNWEtZmYzZTU5YWY0NjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPO0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlTLFnQ6UVkyUBEjK0J+qwgXPySgzYKPpVTIxKoEbiRDqGdE8pz+pci J6MYvEM7NHA/hZX70IUY8CNh3py+qvTjMDwRPiETRXIbS+iYFRjdb49Oke3Qj7yr k+2Xz2imZp4gYbl48S6vbI1HtRmhhB0bMhNovaLE8LiH8gf+se9Et3LWp4SBAmYL tF8EcSLmC602rRNEwoCH16xBHn5amBQbf5qdhpQAd88EUtqTu/iKM1zdG4/ljETA CSaGpFzlcstLxq+xtHqY5qw1BtHOz2t6wYMlH6euuuahyh9kQ7HdWwf2S9WIRsbi veudbUrQL+W7ZlGFfojFl0bXLRYR+I8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:44:27 2026 by rpki-client