$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d533a3db-77f0-3d60-b53d-f9e6ab61d5b9.roa File: d533a3db-77f0-3d60-b53d-f9e6ab61d5b9.roa (raw, json) Hash identifier: hH90U5xlXFJcJHX9Nl3Zx1WI8QhHTeDVFft6d0yvxYM= Subject key identifier: 76:88:A7:49:2D:1C:C3:9C:04:BF:0F:92:2D:4C:90:82:B4:E9:AD:AC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFB7199BDB61CC3A58DD80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d533a3db-77f0-3d60-b53d-f9e6ab61d5b9.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:b7:19:9b:db:61:cc:3a:58:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ccb5b2c4-ee5a-4d67-a9e3-5ce4005c8b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:0b:1e:f6:5c:8a:ed:c7:5d:cf:de:01:ca: c6:a2:83:59:ee:71:8a:2e:b0:5a:5a:a3:96:78:95: e8:8e:43:12:2f:5e:7f:cb:c6:ab:08:5d:72:f2:19: 53:fd:81:1d:8e:8d:61:a8:e7:59:6a:96:b0:1b:3c: a3:98:df:f3:fe:33:a8:8e:86:bb:f7:c9:4f:6e:5f: 3a:b7:43:60:ae:6f:75:35:d6:20:16:f6:e4:ff:34: 58:95:39:df:85:93:a9:45:a7:65:bd:c1:8a:74:87: e6:3a:78:88:c8:2b:85:7e:a9:6c:20:58:d7:77:2d: d9:13:45:36:19:e5:a5:15:bc:b5:80:b4:68:da:77: 19:07:f2:a0:7b:0e:04:17:8f:51:f0:35:f8:09:d6: 35:29:6d:1d:3c:f9:0a:27:91:53:77:9e:b7:15:af: 27:a8:e5:17:63:7d:f3:c2:c2:ab:8e:ed:0e:75:2d: f0:98:cb:db:38:70:7f:a9:df:5f:c0:5e:e5:ef:9d: 4c:21:a3:09:d1:e3:da:74:7f:98:26:6d:de:0c:07: ce:b9:84:dd:4a:d8:d2:96:51:0a:a1:36:9b:c5:1b: 35:ea:cd:2d:77:b1:0c:37:b5:b7:45:43:e1:8c:fa: 5d:cc:25:17:92:6b:03:a7:93:8b:22:b8:98:66:78: ed:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:88:A7:49:2D:1C:C3:9C:04:BF:0F:92:2D:4C:90:82:B4:E9:AD:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d533a3db-77f0-3d60-b53d-f9e6ab61d5b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:8c:14:e9:3e:f6:c5:ed:f5:3b:c2:b0:68:7d:c4:7e:0f:35: 01:4e:6a:eb:9f:eb:b3:0c:e2:1c:09:1e:84:ff:d8:13:46:0a: be:b6:ce:f4:d6:72:ad:f8:ef:1b:2c:4c:e2:be:75:69:93:a6: b9:c2:d8:d4:75:ce:ae:ec:75:5e:6d:d2:a6:36:56:e3:21:91: 29:32:0e:ac:e4:de:d0:72:bf:10:2f:4a:d7:47:87:9a:a2:91: 6a:6f:e9:c0:39:7b:cf:d9:ca:71:94:87:1a:a0:73:43:bb:46: f4:62:c0:6e:ee:b0:6f:6a:67:53:69:a8:5f:88:90:2d:48:49: 47:db:1b:0b:69:57:04:13:22:04:da:74:6d:bc:ab:90:20:97: a2:a1:c3:37:96:01:82:90:77:63:cb:b8:d8:0e:bd:df:70:a3: cc:b8:13:c7:0e:4c:77:02:5e:1d:59:b8:9e:d9:da:4c:80:b0: 5d:be:e2:e9:7e:d9:19:e6:3e:76:68:d4:75:43:9e:22:33:f2: c8:42:13:9c:c6:84:e9:f7:58:5d:74:9a:16:8c:d2:7f:88:a9: 97:a1:ae:b4:31:32:6c:e9:de:f4:cb:d2:ec:ab:b0:96:95:c6: 07:c8:83:11:f4:e8:60:78:85:e0:41:ee:3f:5f:49:4a:6d:5c: 15:3c:fc:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37cZm9thzDpY3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2NiNWIyYzQtZWU1YS00ZDY3LWE5ZTMtNWNlNDAwNWM4YjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4sLHvZciu3HXc/eAcrGooNZ7nGKLrBaWqOW eJXojkMSL15/y8arCF1y8hlT/YEdjo1hqOdZapawGzyjmN/z/jOojoa798lPbl86 t0Ngrm91NdYgFvbk/zRYlTnfhZOpRadlvcGKdIfmOniIyCuFfqlsIFjXdy3ZE0U2 GeWlFby1gLRo2ncZB/Kgew4EF49R8DX4CdY1KW0dPPkKJ5FTd563Fa8nqOUXY33z wsKrju0OdS3wmMvbOHB/qd9fwF7l751MIaMJ0ePadH+YJm3eDAfOuYTdStjSllEK oTabxRs16s0td7EMN7W3RUPhjPpdzCUXkmsDp5OLIriYZnjt+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaIp0ktHMOcBL8Pki1MkIK06a2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDUzM2EzZGItNzdmMC0z ZDYwLWI1M2QtZjllNmFiNjFkNWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiMFOk+9sXt9TvCsGh9xH4PNQFOauuf67MM4hwJHoT/2BNGCr62zvTW cq347xssTOK+dWmTprnC2NR1zq7sdV5t0qY2VuMhkSkyDqzk3tByvxAvStdHh5qi kWpv6cA5e8/ZynGUhxqgc0O7RvRiwG7usG9qZ1NpqF+IkC1ISUfbGwtpVwQTIgTa dG28q5Agl6KhwzeWAYKQd2PLuNgOvd9wo8y4E8cOTHcCXh1ZuJ7Z2kyAsF2+4ul+ 2RnmPnZo1HVDniIz8shCE5zGhOn3WF10mhaM0n+IqZehrrQxMmzp3vTL0uyrsJaV xgfIgxH06GB4heBB7j9fSUptXBU8/IY= -----END CERTIFICATE-----Generated at Thu Mar 26 19:43:40 2026 by rpki-client