$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9a71017-bed5-33b0-967f-73189681c3ce.roa File: c9a71017-bed5-33b0-967f-73189681c3ce.roa (raw, json) Hash identifier: 6cNWAZVtrvW6BFt6KUxgk9NxkuiYwsZ2FbhGRkSWmhg= Subject key identifier: 6B:C8:5E:88:A0:EB:95:AC:26:72:FA:04:44:10:93:25:82:10:23:85 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0AFC2E87FCF18C78BCC00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9a71017-bed5-33b0-967f-73189681c3ce.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:af:c2:e8:7f:cf:18:c7:8b:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6dc9b163-0ca7-4147-ae12-a7c63418aeb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ab:cf:33:c0:b1:94:4c:2c:8a:41:52:17:68: c1:4b:8a:10:4e:60:9c:75:50:27:20:c9:04:80:51: cb:ce:3b:d6:8a:ac:1b:2a:2b:73:b6:31:66:e9:d0: 7d:b1:06:11:bb:cd:ce:a6:f6:26:90:ec:40:9b:47: d6:2d:d6:94:0a:d9:66:a1:5b:cb:4f:4f:71:8c:16: c9:a1:a4:f3:82:1a:77:eb:c9:18:d0:99:78:d8:fa: af:e5:68:2b:85:b2:39:0c:ed:c5:a0:94:cb:20:a1: 4c:be:15:3e:2a:bd:88:2f:2c:ce:8c:24:6a:ca:d4: a6:26:2e:f8:c4:2e:6c:a7:48:b2:a2:6d:1c:49:a8: 28:f1:ab:3c:62:59:2e:46:c8:e8:45:0f:db:af:74: 17:53:2f:2c:7c:ae:09:72:64:fd:26:f4:fd:fd:d1: 32:2a:81:1f:d4:73:7c:eb:67:2b:c8:0b:87:05:b7: f2:f9:0c:73:d8:cc:af:b4:9a:b6:c8:18:7c:c4:48: 69:58:a4:c6:14:a9:b8:cb:53:fb:62:7a:9d:48:71: 0e:84:8a:e8:eb:4c:70:4d:2d:50:8c:0e:8a:16:d7: 6d:aa:a1:5b:8a:4f:33:2a:5c:1f:ea:da:c2:98:bf: a5:e8:3a:08:08:ef:8f:5e:7e:8e:84:72:f5:3c:50: 46:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C8:5E:88:A0:EB:95:AC:26:72:FA:04:44:10:93:25:82:10:23:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9a71017-bed5-33b0-967f-73189681c3ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:82:c0:c0:ec:5e:70:fd:a1:98:cc:04:5b:07:18:17:91:12: 3f:a1:c8:4c:99:ff:89:b2:eb:c7:35:e8:e2:ff:34:2e:43:0c: 4a:79:32:63:5e:8b:1c:68:54:58:95:c3:dd:14:bb:f3:3f:2d: 82:7a:3b:0a:d3:b6:31:b0:df:1d:fe:4d:16:16:4b:b9:0b:a0: 3b:59:50:fb:6b:fa:49:78:c1:cd:e0:6c:eb:cd:fb:f1:76:3b: d4:92:d1:ef:24:ad:95:b6:28:ed:fa:84:da:ba:fe:74:53:cc: 38:a7:3d:bd:7d:1a:fe:37:fe:40:ef:68:89:1a:72:4d:5c:45: 22:65:15:08:6b:4b:84:d7:0c:80:52:f9:e0:7e:be:b7:92:11: 6f:46:e3:dc:4b:9f:99:f3:0b:73:62:ee:ee:24:0b:cd:49:06: 72:4e:84:32:fe:de:bc:d2:22:69:eb:48:f0:67:ef:43:b6:e3: 73:20:67:2e:04:b5:99:59:e4:54:5c:cc:46:50:57:a6:f1:38: b3:ba:bc:cb:a8:6b:63:1f:11:45:52:65:f9:76:63:83:7f:97: 45:9f:9b:56:36:c8:ae:a1:df:b2:8a:46:ad:1d:1d:6e:dd:42: 15:9f:bb:44:4d:15:82:08:46:63:34:55:49:e8:ab:d6:a7:9d: cc:cd:ae:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4K/C6H/PGMeLzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NmRjOWIxNjMtMGNhNy00MTQ3LWFlMTItYTdjNjM0MThhZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKvPM8CxlEwsikFSF2jBS4oQTmCcdVAnIMkE gFHLzjvWiqwbKitztjFm6dB9sQYRu83OpvYmkOxAm0fWLdaUCtlmoVvLT09xjBbJ oaTzghp368kY0Jl42Pqv5WgrhbI5DO3FoJTLIKFMvhU+Kr2ILyzOjCRqytSmJi74 xC5sp0iyom0cSago8as8YlkuRsjoRQ/br3QXUy8sfK4JcmT9JvT9/dEyKoEf1HN8 62cryAuHBbfy+Qxz2MyvtJq2yBh8xEhpWKTGFKm4y1P7YnqdSHEOhIro60xwTS1Q jA6KFtdtqqFbik8zKlwf6trCmL+l6DoICO+PXn6OhHL1PFBGMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvIXoig65WsJnL6BEQQkyWCECOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzlhNzEwMTctYmVkNS0z M2IwLTk2N2YtNzMxODk2ODFjM2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGCwMDsXnD9oZjMBFsHGBeREj+hyEyZ/4my68c16OL/NC5DDEp5MmNe ixxoVFiVw90Uu/M/LYJ6OwrTtjGw3x3+TRYWS7kLoDtZUPtr+kl4wc3gbOvN+/F2 O9SS0e8krZW2KO36hNq6/nRTzDinPb19Gv43/kDvaIkack1cRSJlFQhrS4TXDIBS +eB+vreSEW9G49xLn5nzC3Ni7u4kC81JBnJOhDL+3rzSImnrSPBn70O243MgZy4E tZlZ5FRczEZQV6bxOLO6vMuoa2MfEUVSZfl2Y4N/l0Wfm1Y2yK6h37KKRq0dHW7d QhWfu0RNFYIIRmM0VUnoq9annczNrmc= -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:25 2026 by rpki-client