$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa File: cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa (raw, json) Hash identifier: x4yKVxUXAUkHxQND3P5RYR4t2Fk/Xwqjh0Oyu09MDQg= Subject key identifier: 3C:3C:84:DA:4A:F4:F0:76:BA:52:3C:5C:16:7D:7C:56:EE:31:E0:D3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFCAC5C5F8610F7AC2600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fc:ac:5c:5f:86:10:f7:ac:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=8dc95ce0-97a0-403b-8151-5409b7e58ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2e:10:b0:3c:f3:ed:e3:e7:69:b2:91:22:72: 86:29:e1:d2:bf:3f:99:4c:ec:f3:9c:57:27:06:80: 51:b9:de:ca:b6:2e:d6:5a:f0:29:36:16:e0:72:f7: 2e:a6:8c:c8:d2:e3:6b:c9:c9:dc:f9:fd:da:b2:ab: ce:84:43:52:ef:dc:bd:f9:ed:75:2c:37:9c:e1:e6: 15:c3:56:e2:15:88:b7:77:d9:ae:33:14:9c:fd:d3: 8e:09:f2:10:0e:51:d1:12:e2:28:63:1c:3f:66:62: 88:5c:08:45:90:d5:58:d9:1b:4f:54:49:37:3e:95: e6:38:32:73:45:a4:2b:cb:33:d7:be:c2:17:f0:2a: 85:0d:11:c2:59:91:9e:e0:7f:03:26:c2:93:75:38: fa:e2:b4:28:88:01:82:60:9c:5b:3e:8f:49:72:5c: ba:1b:26:5a:4f:a8:71:ea:a5:ff:40:e7:f2:ab:a9: 01:77:38:46:50:2d:86:9d:47:59:50:28:89:00:8b: 09:22:f9:6c:f6:b4:75:45:ec:90:59:3a:06:c7:a3: 37:9b:83:dc:1f:73:e3:e0:9a:d8:da:b9:8d:54:cc: f4:78:10:a0:90:f7:1e:2d:8f:ce:c4:7c:66:5f:5a: 49:04:ad:7e:aa:ab:71:cb:b1:b9:dc:a1:05:d1:39: 3d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3C:84:DA:4A:F4:F0:76:BA:52:3C:5C:16:7D:7C:56:EE:31:E0:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:b5:2b:41:e1:bc:ec:1d:95:e4:2a:ed:7f:6d:ba:7d:2f:db: 31:d0:86:68:f2:fc:f6:85:4f:23:3a:ae:31:2f:a8:1c:a3:6b: 4a:0a:77:eb:13:84:20:b8:53:b8:1f:82:54:9f:f3:2c:40:d0: ed:f6:90:ba:01:67:ea:da:05:ee:44:50:58:47:ee:53:6d:e1: 67:5c:8c:31:23:bb:69:e9:46:33:0d:05:32:2f:67:2b:ed:0a: 3a:9c:7e:7c:6f:49:e3:bf:8a:77:4d:32:c3:07:4c:54:41:0e: 16:e4:62:2e:7a:77:fa:d0:c2:ad:5f:ab:53:4d:e1:e5:a2:db: 99:bf:70:7a:f1:a4:41:5c:aa:f2:95:1b:64:ef:0e:24:e0:96: 32:37:e0:38:ea:e8:de:82:5a:72:64:b2:c3:c5:b4:b8:27:68: fb:45:65:dc:39:30:79:e4:56:b1:f8:e6:34:d4:d5:59:5b:ce: 55:8c:d2:4a:db:83:02:d5:3f:a8:55:f1:f4:b7:da:6c:54:98: 16:7b:38:e2:a0:3a:90:e6:96:aa:54:d3:e9:23:85:0d:4d:28: 7f:b9:65:9f:1c:20:da:78:8f:b2:5b:5c:82:d5:c0:1b:4a:2c: e8:0b:86:82:9b:17:8f:0a:ab:87:fc:dc:52:bf:3f:09:62:99: 86:a1:db:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/ysXF+GEPesJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OGRjOTVjZTAtOTdhMC00MDNiLTgxNTEtNTQwOWI3ZTU4YmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS4QsDzz7ePnabKRInKGKeHSvz+ZTOzznFcn BoBRud7Kti7WWvApNhbgcvcupozI0uNrycnc+f3asqvOhENS79y9+e11LDec4eYV w1biFYi3d9muMxSc/dOOCfIQDlHREuIoYxw/ZmKIXAhFkNVY2RtPVEk3PpXmODJz RaQryzPXvsIX8CqFDRHCWZGe4H8DJsKTdTj64rQoiAGCYJxbPo9Jcly6GyZaT6hx 6qX/QOfyq6kBdzhGUC2GnUdZUCiJAIsJIvls9rR1ReyQWToGx6M3m4PcH3Pj4JrY 2rmNVMz0eBCgkPceLY/OxHxmX1pJBK1+qqtxy7G53KEF0Tk9iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDw8hNpK9PB2ulI8XBZ9fFbuMeDTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2ZlYzU4YjQtODE2Ny0z N2UyLWJlZjEtYzdiNDBhZTFlOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKC1K0HhvOwdleQq7X9tun0v2zHQhmjy/PaFTyM6rjEvqByja0oKd+sT hCC4U7gfglSf8yxA0O32kLoBZ+raBe5EUFhH7lNt4WdcjDEju2npRjMNBTIvZyvt CjqcfnxvSeO/indNMsMHTFRBDhbkYi56d/rQwq1fq1NN4eWi25m/cHrxpEFcqvKV G2TvDiTgljI34Djq6N6CWnJkssPFtLgnaPtFZdw5MHnkVrH45jTU1VlbzlWM0krb gwLVP6hV8fS32mxUmBZ7OOKgOpDmlqpU0+kjhQ1NKH+5ZZ8cINp4j7JbXILVwBtK LOgLhoKbF48Kq4f83FK/PwlimYah22w= -----END CERTIFICATE-----Generated at Thu Mar 26 04:28:24 2026 by rpki-client