$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7f77bf6-de76-3c3b-b698-56eee6ca2b6a.roa File: d7f77bf6-de76-3c3b-b698-56eee6ca2b6a.roa (raw, json) Hash identifier: GiMX7/oVJ7yp7iCpv9+TCyReTjx357x0+LVhT2j6rNU= Subject key identifier: 13:60:C5:4B:F5:CA:A2:34:C5:C1:3E:EC:C9:EC:86:D9:D8:24:22:94 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B41C625675DA0C2F6700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7f77bf6-de76-3c3b-b698-56eee6ca2b6a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b4:1c:62:56:75:da:0c:2f:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=79d613e3-ce51-46e5-97ab-2154a2224c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:18:a3:65:f7:78:ed:a5:0a:79:0a:5d:f3:79: 29:da:ff:0c:25:9b:e7:ad:d1:06:4b:c8:11:15:16: 58:4e:a5:2b:7c:51:b5:c7:df:e5:8c:ea:ee:c1:48: 83:5b:05:ab:23:53:b7:05:27:45:be:fc:85:de:20: 24:e4:e8:d4:74:44:fc:75:89:f6:08:15:ac:ad:ce: 32:c3:fd:af:75:85:e5:97:52:21:88:17:39:6a:3f: 60:c8:6b:ee:83:a1:b8:8f:d5:99:a1:c8:4c:89:fb: f0:ca:f1:b5:20:54:c7:1a:db:47:87:1d:50:ee:86: 01:b1:d9:d4:f9:c4:51:e3:81:60:1c:5f:0b:0b:64: fe:fa:04:2a:3f:06:8d:5d:a9:e3:cf:6b:08:46:60: 52:fd:d9:1c:9f:95:9c:67:ac:01:fa:b1:3b:20:bd: 33:5b:4e:37:f3:fe:2d:4f:7e:ce:bc:86:d6:5a:92: f8:08:b6:10:dd:6b:8c:96:d6:27:41:b1:82:10:d6: 09:8d:c8:ca:00:6f:db:85:a0:66:d9:17:ed:e4:58: af:de:10:24:1b:a9:05:fa:fc:81:af:98:cd:71:a2: fa:e7:22:f6:39:e1:28:20:0d:d7:0c:5a:2c:05:e7: ff:cb:3f:8c:57:0a:6d:d0:6a:ce:fb:77:fb:91:f6: fa:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:60:C5:4B:F5:CA:A2:34:C5:C1:3E:EC:C9:EC:86:D9:D8:24:22:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7f77bf6-de76-3c3b-b698-56eee6ca2b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:80:68:14:3d:77:56:3e:4c:8a:4f:ca:ae:f4:4b:87:2b:52: 68:88:3d:8a:af:a0:ee:ef:66:d7:5e:e5:6c:d7:55:01:9b:28: 69:e3:57:61:64:23:b2:6b:ce:91:fa:28:4e:c0:e7:4f:21:4d: 03:35:23:ef:ba:92:ef:54:d5:02:74:36:3b:2e:22:a6:c1:e9: 04:b8:bc:cf:6c:c8:fb:bc:99:b7:71:d5:e4:27:fe:b7:63:5c: 53:3a:f0:b0:b8:66:56:14:95:81:3b:ff:5a:ef:88:05:93:ef: 36:8a:10:50:ff:99:e7:46:ce:8e:db:07:05:aa:4f:92:cf:22: cb:92:07:f9:72:3e:05:80:21:43:f4:d1:f2:a4:2a:ba:24:0c: dc:1a:d4:c9:c6:98:86:24:c2:6f:8a:6a:46:b6:b5:5c:70:3a: 0f:60:fc:af:6e:2e:2f:81:13:9e:ea:c8:96:71:9a:a3:be:56: 5c:99:d5:73:d5:83:81:5e:11:18:49:82:45:a2:12:50:60:0a: b5:1d:eb:e1:02:e1:10:15:bc:4a:9f:26:8e:f1:d9:a3:2c:37: 87:d3:ce:25:8f:32:cd:2f:d1:07:44:74:34:41:15:a6:e3:a6: 57:61:87:49:e8:d7:35:99:24:6b:94:02:cb:82:cd:38:a5:f3: 60:61:38:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LQcYlZ12gwvZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NzlkNjEzZTMtY2U1MS00NmU1LTk3YWItMjE1NGEyMjI0YzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBijZfd47aUKeQpd83kp2v8MJZvnrdEGS8gR FRZYTqUrfFG1x9/ljOruwUiDWwWrI1O3BSdFvvyF3iAk5OjUdET8dYn2CBWsrc4y w/2vdYXll1IhiBc5aj9gyGvug6G4j9WZochMifvwyvG1IFTHGttHhx1Q7oYBsdnU +cRR44FgHF8LC2T++gQqPwaNXanjz2sIRmBS/dkcn5WcZ6wB+rE7IL0zW0438/4t T37OvIbWWpL4CLYQ3WuMltYnQbGCENYJjcjKAG/bhaBm2Rft5Fiv3hAkG6kF+vyB r5jNcaL65yL2OeEoIA3XDFosBef/yz+MVwpt0GrO+3f7kfb6CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNgxUv1yqI0xcE+7MnshtnYJCKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDdmNzdiZjYtZGU3Ni0z YzNiLWI2OTgtNTZlZWU2Y2EyYjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCAaBQ9d1Y+TIpPyq70S4crUmiIPYqvoO7vZtde5WzXVQGbKGnjV2Fk I7JrzpH6KE7A508hTQM1I++6ku9U1QJ0NjsuIqbB6QS4vM9syPu8mbdx1eQn/rdj XFM68LC4ZlYUlYE7/1rviAWT7zaKEFD/medGzo7bBwWqT5LPIsuSB/lyPgWAIUP0 0fKkKrokDNwa1MnGmIYkwm+Kaka2tVxwOg9g/K9uLi+BE57qyJZxmqO+VlyZ1XPV g4FeERhJgkWiElBgCrUd6+EC4RAVvEqfJo7x2aMsN4fTziWPMs0v0QdEdDRBFabj pldhh0no1zWZJGuUAsuCzTil82BhOH0= -----END CERTIFICATE-----Generated at Thu Mar 26 04:37:11 2026 by rpki-client