$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d647b28c-0262-394b-917f-9592b2c72397.roa File: d647b28c-0262-394b-917f-9592b2c72397.roa (raw, json) Hash identifier: CvMhZvJL+AvksS/NXwlNTUofwdujlzjdAdzyXYJziHs= Subject key identifier: 68:1B:2A:DC:D1:01:86:45:3D:CA:E7:A7:02:C6:79:02:B7:4F:40:3D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFCBDB3FB200C1E0E9900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d647b28c-0262-394b-917f-9592b2c72397.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fc:bd:b3:fb:20:0c:1e:0e:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=52a05377-947d-4950-9562-d8c8eb1a4055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:00:d7:e7:b6:c6:e6:16:63:aa:4a:35:43:9d: 9c:f4:c9:35:9d:99:3a:3b:68:93:2e:90:06:b7:b7: 89:df:6a:0a:32:87:3b:ec:9f:26:ee:4c:33:49:19: ac:2d:e5:6e:a5:8c:2d:4e:3a:04:6a:63:2a:00:35: 30:c9:3f:cb:78:f1:d2:6f:ca:85:40:04:91:f1:fd: 6d:79:75:64:c3:16:cd:48:81:21:37:c0:c2:f0:c4: de:ef:6f:c8:4e:a5:84:25:f3:ac:6a:51:4f:51:32: 12:e8:b5:a0:0f:a7:f9:34:e6:5f:4a:ef:31:6a:aa: 1d:c4:f1:62:ce:78:56:8c:88:0c:27:81:08:c7:74: 01:cb:0c:97:d0:5b:dc:00:90:a1:75:c4:9d:eb:0f: 6e:8c:91:47:d5:5b:c3:47:44:db:21:8c:da:d2:2f: 6f:8d:dd:f4:21:02:f0:dc:65:19:42:74:4b:b0:04: 50:b6:7e:09:cb:2c:00:c6:31:5b:b5:13:4e:6b:71: 0c:aa:bc:2c:22:28:53:8e:f3:11:f3:02:58:f9:d0: df:0e:c2:22:13:a3:2a:f1:b5:5c:33:81:74:08:83: ee:ac:5f:7e:cc:11:a2:d2:ee:66:a7:04:20:bf:86: a0:28:5f:8a:1f:cc:f9:ec:cc:68:3c:0f:d9:f9:fd: 16:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1B:2A:DC:D1:01:86:45:3D:CA:E7:A7:02:C6:79:02:B7:4F:40:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d647b28c-0262-394b-917f-9592b2c72397.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e7:50:61:4d:aa:d3:d8:79:70:2b:a3:18:91:e8:9c:f0:82: 5d:ba:aa:99:35:c0:5d:a7:0b:64:45:da:e0:7d:0f:5b:3c:8b: a3:2a:53:3d:63:95:8e:fb:8c:16:1e:49:79:b3:29:b7:ad:e0: 45:6f:30:ba:41:40:e1:69:d7:66:7c:3b:92:31:c1:de:5d:7c: c4:29:4d:7c:ba:31:af:73:24:94:1f:be:3f:e7:7b:65:5d:4c: 9e:a2:92:2d:aa:9b:7a:00:65:6a:72:cf:ac:e8:37:bf:b7:98: 34:81:93:8e:ca:cb:43:c3:e7:46:f8:09:e9:7f:3a:2a:53:35: 32:00:74:ef:00:67:2d:b2:fd:e0:40:15:1f:53:77:37:92:02: c8:24:f7:2e:23:16:47:75:f5:be:34:12:c4:61:7a:04:ad:09: 32:93:21:2c:89:2b:e5:9c:60:97:21:eb:38:90:ec:ab:8c:d0: 9a:4d:c0:80:02:53:d8:97:23:b4:22:a6:46:a4:8f:bf:b1:4f: e5:33:7c:b0:32:f7:9a:8f:91:f2:41:51:2c:08:7b:10:10:fd: c6:b3:39:18:47:fa:00:93:b7:3f:96:8b:49:dd:c1:e4:8b:b1: fe:6b:90:23:98:9d:c8:82:0f:97:84:b6:74:71:e7:3f:1f:cc: 40:e4:91:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/y9s/sgDB4OmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTJhMDUzNzctOTQ3ZC00OTUwLTk1NjItZDhjOGViMWE0MDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgADX57bG5hZjqko1Q52c9Mk1nZk6O2iTLpAG t7eJ32oKMoc77J8m7kwzSRmsLeVupYwtTjoEamMqADUwyT/LePHSb8qFQASR8f1t eXVkwxbNSIEhN8DC8MTe72/ITqWEJfOsalFPUTIS6LWgD6f5NOZfSu8xaqodxPFi znhWjIgMJ4EIx3QBywyX0FvcAJChdcSd6w9ujJFH1VvDR0TbIYza0i9vjd30IQLw 3GUZQnRLsARQtn4JyywAxjFbtRNOa3EMqrwsIihTjvMR8wJY+dDfDsIiE6Mq8bVc M4F0CIPurF9+zBGi0u5mpwQgv4agKF+KH8z57MxoPA/Z+f0WfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgbKtzRAYZFPcrnpwLGeQK3T0A9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDY0N2IyOGMtMDI2Mi0z OTRiLTkxN2YtOTU5MmIyYzcyMzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHnUGFNqtPYeXAroxiR6Jzwgl26qpk1wF2nC2RF2uB9D1s8i6MqUz1j lY77jBYeSXmzKbet4EVvMLpBQOFp12Z8O5Ixwd5dfMQpTXy6Ma9zJJQfvj/ne2Vd TJ6iki2qm3oAZWpyz6zoN7+3mDSBk47Ky0PD50b4Cel/OipTNTIAdO8AZy2y/eBA FR9TdzeSAsgk9y4jFkd19b40EsRhegStCTKTISyJK+WcYJch6ziQ7KuM0JpNwIAC U9iXI7Qipkakj7+xT+UzfLAy95qPkfJBUSwIexAQ/cazORhH+gCTtz+Wi0ndweSL sf5rkCOYnciCD5eEtnRx5z8fzEDkkZA= -----END CERTIFICATE-----Generated at Thu Mar 26 17:42:24 2026 by rpki-client