$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6827c06-437e-3bae-8402-31dd89a05e30.roa File: d6827c06-437e-3bae-8402-31dd89a05e30.roa (raw, json) Hash identifier: 9byX0oe1wsYGP8jr0fovMWjNNtywrZ4ooKMMCo4MfB8= Subject key identifier: 44:65:87:64:A0:C4:F8:17:95:2D:86:00:02:A9:69:ED:69:97:DE:C8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFAE6994BE09A283FF180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6827c06-437e-3bae-8402-31dd89a05e30.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fa:e6:99:4b:e0:9a:28:3f:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ec3e61a9-f154-4639-b6b1-c6d12ed08632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b4:ad:4c:46:4c:b4:d0:5c:81:7a:fe:2b:b9: c3:66:2d:84:94:80:32:c4:f1:97:e0:cb:ca:b4:b6: f0:19:07:22:14:f7:01:f6:cd:4a:02:60:a7:8d:92: 67:81:16:e6:3c:91:30:83:48:45:64:63:e0:ec:26: 05:53:d4:14:a7:f4:1f:44:19:ec:0d:b8:58:a9:a2: 50:eb:d5:d6:78:bc:d4:04:cc:f9:ad:a0:f4:01:5f: 09:11:ab:13:0d:17:da:5a:a7:e3:94:24:7d:3b:af: d9:20:74:b3:40:05:b9:34:26:e0:5f:26:07:1a:a0: 07:0d:b9:49:7a:4b:28:42:7e:68:8c:a1:3a:58:c4: 43:d3:23:3e:6f:57:8a:64:4d:f9:5c:5f:49:02:1c: 33:1b:3c:ff:3e:63:26:9e:e1:42:a0:07:9f:5d:38: 97:86:22:e6:a0:9a:05:6c:8a:89:0e:8c:b6:bb:cd: 5f:47:fc:d4:3f:08:a7:d0:c9:bb:41:73:ef:ba:2f: 08:04:71:41:6b:1c:eb:de:b3:e2:02:db:b7:ca:8e: 3a:1c:32:0e:46:66:fb:1b:46:49:e0:4d:aa:e7:99: 89:de:49:50:40:36:1a:8c:c7:d5:cb:41:1b:67:8c: 49:7e:e8:b1:c3:8f:76:68:c6:01:a6:56:e6:b2:72: 5f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:65:87:64:A0:C4:F8:17:95:2D:86:00:02:A9:69:ED:69:97:DE:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6827c06-437e-3bae-8402-31dd89a05e30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:21:f4:85:e7:d6:3f:87:6f:a4:fb:8c:a0:4b:b6:67:49:be: 9d:d5:5d:0f:73:1b:18:e5:b1:40:82:02:b3:9a:25:0c:19:b9: 43:75:64:34:af:72:4d:5d:ca:a0:66:ee:54:c2:4c:b6:ff:8e: 55:e5:e5:ee:05:88:6a:da:79:68:71:25:f2:96:fb:d6:84:d8: c7:1a:f8:14:e1:de:01:b1:c2:13:26:e9:97:18:d6:d0:3e:aa: 21:b3:23:18:2d:30:fd:8f:b1:ab:af:ab:ed:de:6c:b4:55:20: 3f:17:19:df:30:22:8a:e7:b8:81:17:14:f6:92:5d:95:6a:3c: 51:dd:36:f7:7f:06:fb:16:17:8d:f2:97:ce:23:49:09:cc:48: c7:5c:b8:37:8b:83:18:73:8e:84:63:e2:e2:ff:5a:f2:84:8f: b9:24:de:3a:20:87:9f:9c:2b:58:c9:17:3a:cb:7b:8e:6a:20: 05:00:9e:3c:5a:5a:6e:c7:17:b3:14:ee:2c:10:79:5f:bf:5d: eb:91:0f:46:ff:4c:cd:c9:56:26:b9:b8:73:d9:23:38:22:99: 40:b0:6e:84:97:38:99:66:34:b1:44:47:f1:a4:0a:67:8c:04: f2:17:94:4e:44:81:74:7a:9a:22:b2:71:f4:f4:f6:1f:14:ea: 80:15:3b:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/rmmUvgmig/8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZWMzZTYxYTktZjE1NC00NjM5LWI2YjEtYzZkMTJlZDA4NjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrStTEZMtNBcgXr+K7nDZi2ElIAyxPGX4MvK tLbwGQciFPcB9s1KAmCnjZJngRbmPJEwg0hFZGPg7CYFU9QUp/QfRBnsDbhYqaJQ 69XWeLzUBMz5raD0AV8JEasTDRfaWqfjlCR9O6/ZIHSzQAW5NCbgXyYHGqAHDblJ eksoQn5ojKE6WMRD0yM+b1eKZE35XF9JAhwzGzz/PmMmnuFCoAefXTiXhiLmoJoF bIqJDoy2u81fR/zUPwin0Mm7QXPvui8IBHFBaxzr3rPiAtu3yo46HDIORmb7G0ZJ 4E2q55mJ3klQQDYajMfVy0EbZ4xJfuixw492aMYBplbmsnJfvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERlh2SgxPgXlS2GAAKpae1pl97IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDY4MjdjMDYtNDM3ZS0z YmFlLTg0MDItMzFkZDg5YTA1ZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8h9IXn1j+Hb6T7jKBLtmdJvp3VXQ9zGxjlsUCCArOaJQwZuUN1ZDSv ck1dyqBm7lTCTLb/jlXl5e4FiGraeWhxJfKW+9aE2Mca+BTh3gGxwhMm6ZcY1tA+ qiGzIxgtMP2Psauvq+3ebLRVID8XGd8wIornuIEXFPaSXZVqPFHdNvd/BvsWF43y l84jSQnMSMdcuDeLgxhzjoRj4uL/WvKEj7kk3jogh5+cK1jJFzrLe45qIAUAnjxa Wm7HF7MU7iwQeV+/XeuRD0b/TM3JVia5uHPZIzgimUCwboSXOJlmNLFER/GkCmeM BPIXlE5EgXR6miKycfT09h8U6oAVOyg= -----END CERTIFICATE-----Generated at Thu Mar 26 20:41:50 2026 by rpki-client