$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9d8e783-12ac-3b61-9dc9-88f74787c212.roa File: c9d8e783-12ac-3b61-9dc9-88f74787c212.roa (raw, json) Hash identifier: O/qVs4I1niNA4EHoHmXZ2kJcRi/X7gn3d+7EeE64jbU= Subject key identifier: 7C:CC:9E:13:93:91:B5:58:7D:29:76:C7:64:23:78:81:0B:8F:31:0B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B346CB64FDF764347EC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9d8e783-12ac-3b61-9dc9-88f74787c212.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b3:46:cb:64:fd:f7:64:34:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=03d69838-db0c-4b14-82f0-13417ba84b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:67:9e:8c:38:44:0a:75:c6:73:c3:0b:d0:01: f8:03:a8:a5:0e:9d:1e:36:6a:0a:d9:a2:e7:bb:6f: 10:9a:90:7a:17:7e:21:6f:72:6a:8a:6e:79:87:ab: 5a:00:4a:5e:52:7e:52:f7:95:3a:2b:42:73:cf:89: 8b:7a:aa:4f:ba:c7:2a:3d:8b:17:c1:dd:04:72:c4: b3:12:0d:20:b4:17:49:86:9f:b9:11:c2:e6:1c:e9: 3c:d4:fc:ce:52:2e:26:58:13:38:15:5d:a2:a4:57: 54:c9:d2:1c:83:c0:39:1c:30:71:58:0a:bb:0d:e8: 62:14:8f:04:20:03:87:4e:ea:90:cf:bd:9d:d3:b4: 77:3c:57:f2:13:94:c8:b8:48:49:79:03:a4:7d:18: 9b:c2:2b:22:9a:9b:b6:44:f3:d3:81:f8:c2:a1:01: 47:2a:e7:ae:b9:4e:1d:ec:16:01:5a:cc:d5:41:64: 59:5b:fc:b9:2d:30:3c:5e:0d:a5:b8:c3:81:93:47: 5b:e0:bc:ff:62:99:38:91:85:e3:18:99:46:6b:67: e1:04:73:bb:32:2c:f8:fe:a9:b1:1b:77:1b:a3:97: fd:a0:e3:53:2c:1b:ab:4c:6a:b4:1b:47:84:d5:f4: 04:ec:f6:47:fb:29:04:b5:5b:50:5f:ec:f9:42:ff: 65:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CC:9E:13:93:91:B5:58:7D:29:76:C7:64:23:78:81:0B:8F:31:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9d8e783-12ac-3b61-9dc9-88f74787c212.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:2b:11:cf:24:9a:bd:89:35:95:0a:84:02:4a:61:63:2f:b0: b8:51:dd:67:65:8a:6c:43:10:3c:0f:3a:48:cb:fe:61:f1:24: f2:5a:42:de:46:fb:58:53:a1:05:07:26:66:a6:d9:03:b4:13: ab:7a:95:86:9e:bc:0f:22:12:c1:76:26:f0:64:fa:15:d0:9c: 50:bb:0b:21:71:c7:5c:87:a3:1f:cc:03:bf:07:dc:64:da:87: be:85:a6:36:b2:3e:3b:93:d9:0c:ee:d1:fe:37:93:52:f3:63: a7:93:48:f8:e2:82:f6:de:a6:ab:f5:30:af:49:1b:48:24:a5: d5:0b:4f:53:46:0f:6c:41:07:24:97:4d:ca:d7:df:54:50:77: 13:38:a6:1e:76:fe:85:cf:69:0d:c1:c6:da:1a:4e:09:8c:67: f0:76:25:72:b5:30:8b:2d:46:e2:35:e4:f7:f9:91:9b:88:0d: 65:2e:74:f3:16:f9:02:6a:e4:5c:9e:99:17:a7:8c:6e:ee:8c: 5d:a5:0a:99:73:87:dd:4d:aa:f4:c6:02:9a:aa:d6:e6:a2:3f: 4c:9e:f5:25:e5:55:ba:5b:8d:25:7f:9b:ce:b7:a5:2e:7c:45: 38:23:ef:c7:ab:4a:07:48:53:6b:2c:41:c9:5d:f7:a8:cb:e8: 6f:0b:45:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LNGy2T992Q0fsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDNkNjk4MzgtZGIwYy00YjE0LTgyZjAtMTM0MTdiYTg0YjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmeejDhECnXGc8ML0AH4A6ilDp0eNmoK2aLn u28QmpB6F34hb3Jqim55h6taAEpeUn5S95U6K0Jzz4mLeqpPuscqPYsXwd0EcsSz Eg0gtBdJhp+5EcLmHOk81PzOUi4mWBM4FV2ipFdUydIcg8A5HDBxWAq7DehiFI8E IAOHTuqQz72d07R3PFfyE5TIuEhJeQOkfRibwisimpu2RPPTgfjCoQFHKueuuU4d 7BYBWszVQWRZW/y5LTA8Xg2luMOBk0db4Lz/Ypk4kYXjGJlGa2fhBHO7Miz4/qmx G3cbo5f9oONTLBurTGq0G0eE1fQE7PZH+ykEtVtQX+z5Qv9lFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzMnhOTkbVYfSl2x2QjeIELjzELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzlkOGU3ODMtMTJhYy0z YjYxLTlkYzktODhmNzQ3ODdjMjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKArEc8kmr2JNZUKhAJKYWMvsLhR3WdlimxDEDwPOkjL/mHxJPJaQt5G +1hToQUHJmam2QO0E6t6lYaevA8iEsF2JvBk+hXQnFC7CyFxx1yHox/MA78H3GTa h76FpjayPjuT2Qzu0f43k1LzY6eTSPjigvbepqv1MK9JG0gkpdULT1NGD2xBBySX TcrX31RQdxM4ph52/oXPaQ3BxtoaTgmMZ/B2JXK1MIstRuI15Pf5kZuIDWUudPMW +QJq5FyemRenjG7ujF2lCplzh91NqvTGApqq1uaiP0ye9SXlVbpbjSV/m863pS58 RTgj78erSgdIU2ssQcld96jL6G8LRfc= -----END CERTIFICATE-----Generated at Thu Mar 26 17:11:40 2026 by rpki-client