$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d5c1194a-1d8a-31c9-9fa9-875062b6c6d5.roa File: d5c1194a-1d8a-31c9-9fa9-875062b6c6d5.roa (raw, json) Hash identifier: 5OzDFgWM2NP1W1XU6t8te482Ea5jjd59k1KxxEi0KfE= Subject key identifier: AA:63:AD:41:1C:FB:4A:2D:66:58:28:3B:C6:3F:A2:66:B8:B4:CF:48 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B16B5AE275B4C5DE57C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d5c1194a-1d8a-31c9-9fa9-875062b6c6d5.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b1:6b:5a:e2:75:b4:c5:de:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=aa8cc718-fda7-41c5-ac1e-095437f696a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:d9:cd:07:97:73:38:4d:8c:89:d0:46:72: d8:52:6f:f7:f3:42:87:6a:fb:80:c2:8b:d7:fe:8b: a2:78:89:00:3f:72:3e:d6:30:dc:33:c9:53:19:77: 7c:50:f4:7c:56:45:4d:66:77:d3:9c:18:a9:51:6b: ab:cf:a4:0d:f3:69:9e:01:5a:4f:53:dc:f7:6b:46: a3:a6:af:43:6f:6b:1d:13:3b:56:04:a5:74:b8:2b: fa:15:4c:67:20:54:a0:86:ff:b9:58:d0:09:b5:b5: fb:7b:7f:e8:09:0b:01:f1:7f:66:16:57:33:99:3b: 04:4b:7a:a5:78:79:ff:8a:99:c3:fa:7e:be:5c:6d: ad:13:8c:2e:cc:5f:fe:bc:15:78:a6:fc:f5:0b:bc: df:f1:be:60:a7:8e:5a:f1:a7:a5:a1:f9:58:f6:12: 8c:61:f9:f4:48:2a:5d:74:b7:be:66:b5:07:32:30: 31:19:da:ba:97:02:9a:11:aa:bf:c0:cf:8a:ab:8b: 51:5e:66:37:84:5b:07:1c:e2:4a:40:cf:0f:41:e5: ae:87:0f:30:09:fa:6f:df:7b:4c:52:30:ba:80:46: e5:bf:2c:51:43:c6:92:3b:19:af:af:26:18:dc:d3: aa:63:78:5e:2f:c2:3a:2b:47:cc:ca:ac:54:bd:f2: 25:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:63:AD:41:1C:FB:4A:2D:66:58:28:3B:C6:3F:A2:66:B8:B4:CF:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d5c1194a-1d8a-31c9-9fa9-875062b6c6d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:64:1f:66:99:9b:bc:5d:6e:59:90:54:52:63:24:af:2b:36: 17:21:2c:ee:1e:be:d3:38:17:4c:d1:e6:d2:36:2c:1b:83:e0: fc:ee:ad:dd:f9:d2:d2:6e:5b:bc:e6:67:3b:62:06:77:8a:9f: 26:ba:9d:37:75:43:96:11:1d:37:ab:92:5f:bf:3f:e9:dc:5a: 12:66:65:37:ec:1e:02:cb:fa:f5:b2:a5:ae:bb:b3:1a:66:2f: 24:19:21:81:78:ff:5e:19:d8:55:7d:33:26:97:5a:75:83:a5: 6c:dd:02:28:16:1b:a7:7d:5e:c1:4e:01:52:f5:99:01:90:52: 23:5c:47:2d:cb:df:db:ec:75:3d:e9:dc:66:b8:c6:bd:f0:ef: 0f:9b:8c:9f:e0:7d:7b:0b:21:f6:77:0f:2f:d3:a0:52:7b:c8: 53:00:a3:46:b8:c0:11:f6:db:23:20:1c:af:77:e1:ec:72:93: 16:b3:60:ae:99:63:6f:46:6d:d7:3c:17:8c:b4:5c:f4:b6:d4: eb:c3:bb:ad:57:e0:14:49:ae:c7:a3:1d:19:eb:93:2f:8c:d7: bc:03:42:6d:f3:29:ff:ce:3f:5f:9b:24:fb:05:cf:8d:5c:0e: eb:c7:93:bb:67:12:c2:43:46:f2:68:99:f4:65:6d:81:b2:58: 0e:4c:33:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LFrWuJ1tMXeV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YWE4Y2M3MTgtZmRhNy00MWM1LWFjMWUtMDk1NDM3ZjY5NmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0XZzQeXczhNjInQRnLYUm/380KHavuAwovX /ouieIkAP3I+1jDcM8lTGXd8UPR8VkVNZnfTnBipUWurz6QN82meAVpPU9z3a0aj pq9Db2sdEztWBKV0uCv6FUxnIFSghv+5WNAJtbX7e3/oCQsB8X9mFlczmTsES3ql eHn/ipnD+n6+XG2tE4wuzF/+vBV4pvz1C7zf8b5gp45a8aeloflY9hKMYfn0SCpd dLe+ZrUHMjAxGdq6lwKaEaq/wM+Kq4tRXmY3hFsHHOJKQM8PQeWuhw8wCfpv33tM UjC6gEblvyxRQ8aSOxmvryYY3NOqY3heL8I6K0fMyqxUvfIl9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpjrUEc+0otZlgoO8Y/oma4tM9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDVjMTE5NGEtMWQ4YS0z MWM5LTlmYTktODc1MDYyYjZjNmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNkH2aZm7xdblmQVFJjJK8rNhchLO4evtM4F0zR5tI2LBuD4Pzurd35 0tJuW7zmZztiBneKnya6nTd1Q5YRHTerkl+/P+ncWhJmZTfsHgLL+vWypa67sxpm LyQZIYF4/14Z2FV9MyaXWnWDpWzdAigWG6d9XsFOAVL1mQGQUiNcRy3L39vsdT3p 3Ga4xr3w7w+bjJ/gfXsLIfZ3Dy/ToFJ7yFMAo0a4wBH22yMgHK934exykxazYK6Z Y29Gbdc8F4y0XPS21OvDu61X4BRJrsejHRnrky+M17wDQm3zKf/OP1+bJPsFz41c DuvHk7tnEsJDRvJomfRlbYGyWA5MM/Q= -----END CERTIFICATE-----Generated at Thu Mar 26 16:26:51 2026 by rpki-client