$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa File: d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa (raw, json) Hash identifier: miVgPsdkE+n3uUIXs2Wopc9NIsOtvQs2dMcFUYjx3x4= Subject key identifier: 43:05:5D:DE:F5:18:CE:09:8B:27:FB:EE:08:73:24:97:8A:FC:18:8A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFBD06EE307F1291AE4360 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:bd:06:ee:30:7f:12:91:ae:43:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6474c07a-d05b-4cdc-ad7e-846f052b9a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5f:da:b1:48:f6:c2:de:ee:f7:65:a5:66:08: 81:b1:03:2f:b8:4c:72:39:f8:82:eb:84:ea:42:e2: 3a:3c:2c:48:a1:da:27:2b:59:81:d9:e3:98:a1:33: d9:3e:19:11:c6:e5:e4:af:0c:24:4b:a9:cc:a5:b3: 57:06:e8:29:f3:e1:f0:20:66:90:25:d8:02:62:fe: 31:8e:e9:68:6c:cd:e7:c3:a2:7f:c7:11:50:7b:3c: 75:c3:a9:d3:77:dd:a4:d8:de:c8:d7:92:35:3e:4a: a1:34:31:f3:1b:91:4a:d4:65:30:20:3c:69:35:be: 34:16:f5:df:f9:c0:29:e6:7e:4b:fd:b7:c2:fd:e5: f1:13:e4:3e:86:40:fd:58:0d:ac:48:f8:54:8e:4e: d8:42:59:1b:e4:b5:80:9f:80:06:5c:e3:1d:08:95: dd:64:bc:77:84:a1:8d:0b:61:b3:af:4d:b9:c7:53: 0c:6f:2b:37:50:e4:65:93:cc:d9:4a:82:ad:fb:dd: dd:b7:0a:ba:8c:ed:57:52:a4:bf:9f:36:c4:6d:a1: 9e:62:78:10:c6:5e:08:c5:47:38:cf:2e:c5:e3:49: f9:bf:cc:ef:b2:3c:bf:ba:fb:bf:02:9e:83:53:06: 28:42:27:eb:af:bf:19:f0:ab:e3:0f:47:87:fa:f1: 0a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:05:5D:DE:F5:18:CE:09:8B:27:FB:EE:08:73:24:97:8A:FC:18:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ec:86:f7:3c:eb:95:c8:7a:8e:d4:bd:28:15:77:8f:80:e1: 63:4a:e2:ec:8d:83:f4:40:c1:f4:b3:c2:7f:de:88:f8:f5:de: 9e:e9:2c:ac:0b:28:a0:72:c7:89:ed:71:b1:54:19:2d:fc:6c: 71:c4:38:dd:6e:bc:0f:94:1b:61:18:00:e6:24:71:cb:5c:9f: b0:a4:b6:0f:31:1d:75:5c:ef:79:4f:b9:a4:f9:74:60:20:88: 88:69:28:56:c7:76:bd:34:26:37:47:9d:27:07:4b:ff:98:69: ec:2f:c1:e9:fc:1e:d9:eb:bf:9b:b9:c4:ed:80:bb:be:9b:6f: a0:92:c3:23:c4:a8:4c:15:36:36:1e:f2:af:b9:b3:d2:bb:e4: b9:82:e3:af:1d:19:db:ec:02:92:42:84:fd:47:b5:c0:05:8a: 06:5e:67:2c:c3:32:01:66:67:e2:d5:9d:26:ce:12:f2:0b:cc: ab:ea:df:2b:14:22:14:8e:06:1f:e2:40:17:bf:ed:87:ce:ad: 0f:b5:a2:eb:cf:19:67:d6:df:81:33:81:23:5d:64:11:92:75: 70:cb:6e:99:3f:6f:b4:23:5d:eb:b0:cc:30:b6:37:ab:72:02: 93:30:b8:0c:d2:93:d4:9b:6f:5a:32:95:e6:39:46:86:2e:e9: 77:bb:ae:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k370G7jB/EpGuQ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjQ3NGMwN2EtZDA1Yi00Y2RjLWFkN2UtODQ2ZjA1MmI5YTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1/asUj2wt7u92WlZgiBsQMvuExyOfiC64Tq QuI6PCxIodonK1mB2eOYoTPZPhkRxuXkrwwkS6nMpbNXBugp8+HwIGaQJdgCYv4x julobM3nw6J/xxFQezx1w6nTd92k2N7I15I1PkqhNDHzG5FK1GUwIDxpNb40FvXf +cAp5n5L/bfC/eXxE+Q+hkD9WA2sSPhUjk7YQlkb5LWAn4AGXOMdCJXdZLx3hKGN C2Gzr025x1MMbys3UORlk8zZSoKt+93dtwq6jO1XUqS/nzbEbaGeYngQxl4IxUc4 zy7F40n5v8zvsjy/uvu/Ap6DUwYoQifrr78Z8KvjD0eH+vEK7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMFXd71GM4Jiyf77ghzJJeK/BiKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDNmY2JkZGMtYmY5ZC0z MjBmLTlkNjUtOWExZWMwNjBlZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK28MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALshvc865XIeo7UvSgVd4+A4WNK4uyNg/RAwfSzwn/eiPj13p7pLKwL KKByx4ntcbFUGS38bHHEON1uvA+UG2EYAOYkcctcn7Cktg8xHXVc73lPuaT5dGAg iIhpKFbHdr00JjdHnScHS/+Yaewvwen8Htnrv5u5xO2Au76bb6CSwyPEqEwVNjYe 8q+5s9K75LmC468dGdvsApJChP1HtcAFigZeZyzDMgFmZ+LVnSbOEvILzKvq3ysU IhSOBh/iQBe/7YfOrQ+1ouvPGWfW34EzgSNdZBGSdXDLbpk/b7QjXeuwzDC2N6ty ApMwuAzSk9Sbb1oyleY5RoYu6Xe7rug= -----END CERTIFICATE-----Generated at Thu Mar 26 05:54:20 2026 by rpki-client