$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d0ff1f45-a856-3692-b700-086a0fb2bf07.roa File: d0ff1f45-a856-3692-b700-086a0fb2bf07.roa (raw, json) Hash identifier: Wn5boLujaY3N9bXcZuuTOLYTT8XS5FZFbCWafNosm4o= Subject key identifier: 8F:B0:8D:15:F9:04:62:7D:08:3B:96:8C:31:4D:43:1A:CB:50:45:E8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B31570F4A96B2DFE6F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d0ff1f45-a856-3692-b700-086a0fb2bf07.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b3:15:70:f4:a9:6b:2d:fe:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=e33e0b8c-3d93-4a87-b377-eff766e388e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:29:b7:58:12:9a:43:40:d6:91:aa:6e:63:bc: 5a:fc:ba:8c:ee:ea:47:25:2f:66:c1:97:f3:52:ed: a4:28:80:25:91:03:8d:dd:85:ae:f8:0a:35:a7:17: 3d:1e:b9:a7:d1:93:6a:17:c5:26:c5:62:e9:fc:6b: 8a:fe:e9:72:e7:c9:e5:9d:2c:a9:49:05:f2:e8:2f: 47:c8:87:21:cc:17:19:18:66:be:26:0f:e3:64:56: 01:10:f7:5d:4a:63:d9:40:50:ca:64:1c:02:42:fc: 23:51:9e:d8:58:d2:67:d3:22:98:ee:8f:9d:99:ee: cd:98:e9:11:fc:92:3e:55:11:f3:3e:59:fc:82:78: f1:d1:66:de:9b:a3:49:c7:43:8e:86:52:47:95:94: b2:9d:e3:79:64:30:f9:1c:6e:41:cb:a6:d5:87:15: a0:2c:0a:8e:3e:52:be:02:f2:a0:ef:d4:02:67:02: 04:7a:7f:49:c4:1b:e8:1b:ed:26:21:2f:62:95:6d: c4:77:6f:2a:d7:f1:02:89:39:9d:3f:83:0f:4e:a8: f4:d8:3d:3e:ef:34:62:1a:94:fe:bf:21:28:bc:36: fb:e1:51:ef:88:8d:d3:dd:dd:e6:f5:a9:12:00:ba: 4c:6f:b8:7f:d5:0d:e3:c0:1f:3c:81:b1:cd:2c:c7: 17:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B0:8D:15:F9:04:62:7D:08:3B:96:8C:31:4D:43:1A:CB:50:45:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d0ff1f45-a856-3692-b700-086a0fb2bf07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:93:42:c0:ba:07:f5:d0:6e:a7:4c:db:e5:26:53:13:00:94: 7a:e4:59:22:a3:7d:c4:06:32:45:40:39:35:11:33:34:05:28: 74:59:8d:7b:88:ae:75:b5:4a:34:ab:55:ba:f1:db:f1:c7:75: 15:f1:18:bd:5a:ef:bc:9f:f8:ac:aa:85:d4:37:a1:3c:59:9f: 01:71:dc:f5:2e:de:31:1a:ef:37:64:a0:8a:5c:ce:f7:34:f1: f0:96:e5:29:23:79:01:ea:e4:87:26:0d:ad:a0:02:23:0f:eb: f3:b7:a7:21:ca:0a:fa:fa:a5:a8:20:77:69:19:73:ff:df:91: c6:c7:a4:51:db:13:05:9e:99:28:10:40:a6:3e:ab:9d:54:9b: d2:c9:4f:f8:dd:b9:e5:23:f7:95:51:24:86:ee:0d:04:93:58: b5:03:23:73:54:ec:54:db:cd:d8:f3:1c:c2:62:44:72:14:cd: 7d:0b:64:e8:3e:65:70:99:60:0b:a1:35:a4:82:8b:e9:dc:32: 30:65:86:f5:d1:9c:30:a6:5a:77:61:04:d2:6b:03:83:7f:56: 07:05:5c:3c:d3:7b:a5:26:c2:0e:5a:c3:d3:1b:65:71:e0:3e: 46:9c:49:d3:fa:e1:6d:0c:3f:6a:0f:8a:a3:60:9a:8f:dc:92: d7:cb:fa:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LMVcPSpay3+bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZTMzZTBiOGMtM2Q5My00YTg3LWIzNzctZWZmNzY2ZTM4OGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Cm3WBKaQ0DWkapuY7xa/LqM7upHJS9mwZfz Uu2kKIAlkQON3YWu+Ao1pxc9Hrmn0ZNqF8UmxWLp/GuK/uly58nlnSypSQXy6C9H yIchzBcZGGa+Jg/jZFYBEPddSmPZQFDKZBwCQvwjUZ7YWNJn0yKY7o+dme7NmOkR /JI+VRHzPln8gnjx0Wbem6NJx0OOhlJHlZSyneN5ZDD5HG5By6bVhxWgLAqOPlK+ AvKg79QCZwIEen9JxBvoG+0mIS9ilW3Ed28q1/ECiTmdP4MPTqj02D0+7zRiGpT+ vyEovDb74VHviI3T3d3m9akSALpMb7h/1Q3jwB88gbHNLMcXMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+wjRX5BGJ9CDuWjDFNQxrLUEXoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDBmZjFmNDUtYTg1Ni0z NjkyLWI3MDAtMDg2YTBmYjJiZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPK6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWTQsC6B/XQbqdM2+UmUxMAlHrkWSKjfcQGMkVAOTURMzQFKHRZjXuI rnW1SjSrVbrx2/HHdRXxGL1a77yf+KyqhdQ3oTxZnwFx3PUu3jEa7zdkoIpczvc0 8fCW5SkjeQHq5IcmDa2gAiMP6/O3pyHKCvr6paggd2kZc//fkcbHpFHbEwWemSgQ QKY+q51Um9LJT/jdueUj95VRJIbuDQSTWLUDI3NU7FTbzdjzHMJiRHIUzX0LZOg+ ZXCZYAuhNaSCi+ncMjBlhvXRnDCmWndhBNJrA4N/VgcFXDzTe6Umwg5aw9MbZXHg PkacSdP64W0MP2oPiqNgmo/cktfL+rg= -----END CERTIFICATE-----Generated at Thu Mar 26 04:41:55 2026 by rpki-client