$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa File: c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa (raw, json) Hash identifier: WKbKi5n/vHOGWbKjR9QTLh/uLFz7BQ4oN56na9LK2aA= Subject key identifier: 64:F1:99:B2:FA:A7:C5:08:87:21:43:7F:0E:AA:72:31:77:88:6B:6F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFBBC095C895E83827D740 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:bb:c0:95:c8:95:e8:38:27:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=e04219e1-f9fd-42f0-b7c0-27e1e8df517f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3d:c5:0d:00:07:37:68:8e:c3:91:62:d3:98: 40:07:fd:b6:ca:11:bb:88:c0:b1:21:bb:36:1a:c6: 90:2c:af:de:c7:6b:f9:cd:2c:37:bb:da:16:13:d0: 42:43:b2:17:80:06:37:5b:73:86:8c:0c:34:98:25: ce:26:64:bb:41:03:4c:4a:ab:7f:01:2e:ae:a7:69: 9b:f3:bc:7d:f0:8a:43:d0:f2:ef:f4:d6:7d:2c:87: 3d:17:df:66:a7:42:3a:ff:d1:65:9a:d7:18:ec:86: 3a:66:bc:84:f1:a1:f3:bb:8a:f3:8b:bc:e8:af:fa: cb:86:86:99:1c:c8:20:8f:31:f1:fd:00:21:c8:ba: 2e:7e:b1:0b:4f:e3:2c:97:30:fe:ee:cd:97:38:b4: 03:c2:79:07:8c:39:20:6c:8b:d9:d2:01:0a:ab:aa: f5:87:df:89:db:ec:e6:9c:f7:8e:2a:6f:8d:4a:fe: 00:b0:07:8f:af:72:03:13:d4:db:c7:26:b6:16:3d: e9:be:63:78:8d:59:22:14:7a:27:9f:77:dc:6a:26: df:50:84:c7:c0:20:be:27:0f:2a:fa:9f:85:30:62: 72:28:4d:4b:27:a3:4d:84:9e:1a:ef:eb:f0:48:e7: 3b:85:cd:2e:b9:a1:ca:fd:04:12:17:ea:7f:f0:78: c5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F1:99:B2:FA:A7:C5:08:87:21:43:7F:0E:AA:72:31:77:88:6B:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:b7:b1:1d:5c:36:5e:65:e6:5a:25:5d:33:25:3e:43:63:f0: 8d:e0:77:af:05:df:00:a3:66:b8:ef:f5:8d:dc:c3:44:c7:74: bc:1f:7f:1f:c7:7f:56:b7:8f:a1:e3:b4:e6:32:1e:22:cc:f7: 9b:8d:4a:e4:54:1f:bf:2d:f9:86:80:e8:90:77:ad:cb:0d:75: 06:7d:0e:91:11:c4:6f:de:22:ca:a0:10:dd:8c:2e:c3:3d:cb: 8c:da:33:08:7d:89:d4:ac:3b:4d:68:60:b7:c7:ea:56:ee:28: c5:f1:1f:55:ca:5c:72:aa:31:d6:bc:e7:dc:d3:f7:3f:7c:62: 07:6c:01:a3:3b:34:48:2e:4d:88:20:a9:37:44:06:62:6f:a8: a9:cd:ea:7f:2d:9b:0a:fc:fb:7f:46:a8:44:c5:39:a9:3e:f4: 65:48:9a:8f:54:95:59:54:ed:03:06:76:f3:d0:13:6a:bd:03: 47:7f:4a:d8:e3:d5:04:f5:af:73:64:0a:39:b7:17:da:b2:ba: 43:2a:b1:86:2c:cc:25:6e:a7:06:51:8e:19:24:90:2d:a1:7d: 71:c3:9c:f3:e2:37:29:94:9e:16:45:36:c0:47:1c:2c:2f:31: 45:8e:4e:13:84:9d:07:de:cc:32:dd:66:3b:d6:04:19:2e:81: f0:8a:2b:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37vAlciV6Dgn10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZTA0MjE5ZTEtZjlmZC00MmYwLWI3YzAtMjdlMWU4ZGY1MTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz3FDQAHN2iOw5Fi05hAB/22yhG7iMCxIbs2 GsaQLK/ex2v5zSw3u9oWE9BCQ7IXgAY3W3OGjAw0mCXOJmS7QQNMSqt/AS6up2mb 87x98IpD0PLv9NZ9LIc9F99mp0I6/9FlmtcY7IY6ZryE8aHzu4rzi7zor/rLhoaZ HMggjzHx/QAhyLoufrELT+MslzD+7s2XOLQDwnkHjDkgbIvZ0gEKq6r1h9+J2+zm nPeOKm+NSv4AsAePr3IDE9Tbxya2Fj3pvmN4jVkiFHonn3fcaibfUITHwCC+Jw8q +p+FMGJyKE1LJ6NNhJ4a7+vwSOc7hc0uuaHK/QQSF+p/8HjFZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTxmbL6p8UIhyFDfw6qcjF3iGtvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzlhYTNkZWUtYmMzMS0z MmEyLThiODEtOTYwNDc5OGU3YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKS3sR1cNl5l5lolXTMlPkNj8I3gd68F3wCjZrjv9Y3cw0THdLwffx/H f1a3j6HjtOYyHiLM95uNSuRUH78t+YaA6JB3rcsNdQZ9DpERxG/eIsqgEN2MLsM9 y4zaMwh9idSsO01oYLfH6lbuKMXxH1XKXHKqMda859zT9z98YgdsAaM7NEguTYgg qTdEBmJvqKnN6n8tmwr8+39GqETFOak+9GVImo9UlVlU7QMGdvPQE2q9A0d/Stjj 1QT1r3NkCjm3F9qyukMqsYYszCVupwZRjhkkkC2hfXHDnPPiNymUnhZFNsBHHCwv MUWOThOEnQfezDLdZjvWBBkugfCKK30= -----END CERTIFICATE-----Generated at Thu Mar 26 16:55:39 2026 by rpki-client