$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd9f2950-7c8b-3f12-98b4-1f47e7f1c1f2.roa File: cd9f2950-7c8b-3f12-98b4-1f47e7f1c1f2.roa (raw, json) Hash identifier: BeWZl/9Z5yJZRuHfOdYVd28GcgmHKSuxk2hj66UkwxM= Subject key identifier: 90:1C:D5:D0:94:F9:3B:02:AD:CF:AA:8C:7B:BB:80:3A:82:4B:F4:C2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFDF1D2CA7E3386ADF8180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd9f2950-7c8b-3f12-98b4-1f47e7f1c1f2.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 75.107.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:df:1d:2c:a7:e3:38:6a:df:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=e8a245e0-36ed-4c3c-9c25-366eba2a194c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d6:6b:fb:a3:b2:0f:04:3c:53:b5:2c:41:41: c1:ad:a8:71:7d:f6:5d:b4:5e:8d:93:62:ea:fa:d1: 1a:ac:29:d0:29:77:d4:eb:f3:c3:45:c3:44:72:e2: 2b:7d:e4:9c:58:5c:f6:dc:fe:4b:a3:72:02:ec:c8: 4e:d1:30:c7:e4:45:e1:c6:e0:0b:db:9d:6d:5c:e3: 44:8a:b9:b6:4f:a9:d6:08:ce:75:85:04:53:88:68: 16:e4:6b:cd:52:89:b9:41:1f:b7:08:51:d8:c0:7d: c9:52:b8:1d:cf:91:65:13:07:a3:17:a3:ac:64:32: 57:38:4e:85:91:84:8a:84:b7:71:ab:5e:8a:4b:e8: aa:b3:5b:e9:de:6a:57:83:df:9b:6f:8b:83:92:f3: 56:d1:a5:c2:3e:ee:5e:48:ba:d0:bb:fb:03:fb:68: 73:75:29:ed:a7:08:53:5f:ec:2c:f6:e1:aa:40:a4: b7:16:78:b9:6c:7d:a1:3e:03:fd:aa:a6:d0:16:2a: 45:68:1d:67:97:df:a0:70:2a:32:db:52:5a:d6:94: 4a:56:26:39:91:e3:20:b2:95:ec:17:79:32:c9:fb: e8:b4:8f:4c:3d:8c:da:7a:95:f8:a1:a7:5c:0f:d0: 7a:19:ed:89:aa:28:da:5b:0a:8a:2c:9f:4b:8b:ba: 40:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1C:D5:D0:94:F9:3B:02:AD:CF:AA:8C:7B:BB:80:3A:82:4B:F4:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd9f2950-7c8b-3f12-98b4-1f47e7f1c1f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.107.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:72:c9:ab:56:fe:33:a7:c3:05:98:af:f9:ea:12:6b:ea:e8: e3:7c:22:8b:fc:80:e5:c8:e9:40:3e:6f:89:d5:bb:0e:8d:4e: e6:c2:90:dd:c6:d9:31:96:6d:bb:0e:9a:9f:c1:ad:e1:94:e2: d8:ed:54:f2:14:52:ae:e4:1a:53:a5:13:d6:a7:21:df:4d:e9: 30:1d:bf:41:79:ce:e5:56:f4:33:27:ab:51:5c:9f:9a:3c:fc: a6:3c:25:64:4f:73:be:39:32:b4:4c:fd:e5:a4:2b:ea:88:d2: ff:ab:04:0c:80:11:23:1e:a9:69:03:08:01:a9:06:7c:ba:b8: c9:76:2f:8b:2e:db:8c:24:fc:cd:cc:3f:60:b5:f3:8b:57:01: e0:2f:41:e3:59:48:a5:f5:87:0e:5a:16:cb:75:01:a4:00:97: 05:26:e2:62:2e:82:d9:95:eb:ca:0d:69:b5:7f:4b:0b:5b:14: 26:b8:92:eb:9c:3a:7a:74:4a:42:d2:54:df:1c:15:51:4f:41: f3:bf:a5:4c:dd:b6:1a:2e:51:83:3a:03:b1:d7:75:56:69:97: f9:3b:41:c1:dd:40:44:c6:cb:8a:b3:67:09:87:fc:48:4a:e7: ea:78:1f:f6:c7:e3:ec:c3:35:29:89:bc:a5:e1:02:79:ba:87: 91:6d:b0:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k398dLKfjOGrfgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZThhMjQ1ZTAtMzZlZC00YzNjLTljMjUtMzY2ZWJhMmExOTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09Zr+6OyDwQ8U7UsQUHBrahxffZdtF6Nk2Lq +tEarCnQKXfU6/PDRcNEcuIrfeScWFz23P5Lo3IC7MhO0TDH5EXhxuAL251tXONE irm2T6nWCM51hQRTiGgW5GvNUom5QR+3CFHYwH3JUrgdz5FlEwejF6OsZDJXOE6F kYSKhLdxq16KS+iqs1vp3mpXg9+bb4uDkvNW0aXCPu5eSLrQu/sD+2hzdSntpwhT X+ws9uGqQKS3Fni5bH2hPgP9qqbQFipFaB1nl9+gcCoy21Ja1pRKViY5keMgspXs F3kyyfvotI9MPYzaepX4oadcD9B6Ge2JqijaWwqKLJ9Li7pATwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAc1dCU+TsCrc+qjHu7gDqCS/TCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2Q5ZjI5NTAtN2M4Yi0z ZjEyLTk4YjQtMWY0N2U3ZjFjMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2vyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9yyatW/jOnwwWYr/nqEmvq6ON8Iov8gOXI6UA+b4nVuw6NTubCkN3G 2TGWbbsOmp/BreGU4tjtVPIUUq7kGlOlE9anId9N6TAdv0F5zuVW9DMnq1Fcn5o8 /KY8JWRPc745MrRM/eWkK+qI0v+rBAyAESMeqWkDCAGpBny6uMl2L4su24wk/M3M P2C184tXAeAvQeNZSKX1hw5aFst1AaQAlwUm4mIugtmV68oNabV/SwtbFCa4kuuc Onp0SkLSVN8cFVFPQfO/pUzdthouUYM6A7HXdVZpl/k7QcHdQETGy4qzZwmH/EhK 5+p4H/bH4+zDNSmJvKXhAnm6h5FtsLw= -----END CERTIFICATE-----Generated at Thu Mar 26 12:43:46 2026 by rpki-client