$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8e8fa5e-c66c-395e-b819-56d247bfd1c5.roa File: d8e8fa5e-c66c-395e-b819-56d247bfd1c5.roa (raw, json) Hash identifier: rbxyIQeIoPfVfPgxrKoLZrLdqZGwBlxwpg2MQKK36Fw= Subject key identifier: B2:C8:E5:64:66:C2:68:B1:CC:14:DF:FF:6C:A8:2C:E3:E4:A5:C5:A7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0AFFAB8F50FA49A2F4430 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8e8fa5e-c66c-395e-b819-56d247bfd1c5.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:af:fa:b8:f5:0f:a4:9a:2f:44:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b2ed2f6a-c1a7-4c7a-9266-fceb1da6d575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ad:ba:76:83:e3:c2:5a:46:cd:46:4f:bf:c6: b8:21:56:04:55:43:5e:59:9b:83:72:14:4c:7f:b4: 1d:a4:8b:d8:a2:e7:18:9b:47:1a:f6:e4:6b:1a:ca: e7:29:d9:31:56:a8:fe:a2:b4:cf:64:23:40:3c:26: 7a:5a:17:b3:88:c0:43:5b:72:a8:87:9c:d1:68:08: 5d:cc:cd:67:87:f0:62:db:74:41:bf:cd:c7:50:ca: 5b:73:50:98:5c:f4:a5:64:f0:7f:92:39:8a:8a:91: e6:9b:a9:e2:36:18:61:14:d2:c7:1c:81:88:e4:b9: ae:8c:f4:1e:67:87:00:a0:19:76:d1:70:15:05:8c: 72:a0:6c:de:b5:c0:a8:6a:62:12:85:36:88:b2:13: 36:b1:31:71:cc:80:cb:68:74:67:af:12:64:71:33: 72:25:41:c1:24:b4:00:c0:a1:ce:2b:86:8c:e3:26: 7a:a9:f0:a5:b0:36:3f:32:db:4c:11:1a:d4:56:9f: 9f:1a:54:82:0b:35:68:5e:1c:d5:24:34:60:39:50: aa:41:3f:02:5c:89:01:7a:60:1f:d7:c4:7e:0e:3c: ec:b5:fa:68:43:fd:98:23:41:02:ce:a2:fa:d7:2c: 17:3f:72:c9:5d:83:14:54:55:fc:17:37:8d:00:72: 4a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C8:E5:64:66:C2:68:B1:CC:14:DF:FF:6C:A8:2C:E3:E4:A5:C5:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8e8fa5e-c66c-395e-b819-56d247bfd1c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:b8:da:79:7b:e6:0f:03:b6:a8:15:99:cc:b8:3b:65:82:ae: 04:e6:86:7c:8a:08:5b:6a:ca:25:8b:5c:0b:85:60:01:9e:0c: 5e:52:bb:e7:22:13:f4:16:80:8e:57:b1:c7:f9:46:fd:a8:04: f7:8a:a2:1c:0b:f9:05:98:d4:b4:e1:30:1d:d0:d5:ee:e8:e2: d1:45:b0:d9:d9:8a:fd:53:08:21:2e:49:23:42:32:4e:73:d0: 08:b4:31:a7:ca:4a:bd:63:31:07:50:a1:82:a2:97:49:d3:16: f7:8f:40:67:1f:8e:03:02:f2:88:f1:58:9d:25:ba:0e:9f:90: 21:10:19:4b:80:b1:05:4d:83:d5:f2:2f:e6:02:59:98:7e:9d: 9f:88:e2:98:64:7a:eb:00:51:8c:bb:99:e2:9e:e7:24:28:9f: 08:dc:1f:44:fb:05:38:39:4c:80:93:b6:9c:62:86:f5:c1:5b: e9:99:83:11:ea:ae:a4:fe:80:0c:83:c5:fb:f9:27:8a:64:00: 89:44:94:81:ff:34:7b:fb:23:71:5b:51:f7:35:13:41:26:bc: aa:60:b5:dc:3b:fb:1b:eb:3c:fd:38:6c:e3:8a:69:e9:51:c1: f8:99:dd:fc:14:e1:ff:e3:9f:b5:e6:86:bd:09:2e:2b:f8:d7: 29:51:eb:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4K/6uPUPpJovRDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjJlZDJmNmEtYzFhNy00YzdhLTkyNjYtZmNlYjFkYTZkNTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq26doPjwlpGzUZPv8a4IVYEVUNeWZuDchRM f7QdpIvYoucYm0ca9uRrGsrnKdkxVqj+orTPZCNAPCZ6WheziMBDW3Koh5zRaAhd zM1nh/Bi23RBv83HUMpbc1CYXPSlZPB/kjmKipHmm6niNhhhFNLHHIGI5LmujPQe Z4cAoBl20XAVBYxyoGzetcCoamIShTaIshM2sTFxzIDLaHRnrxJkcTNyJUHBJLQA wKHOK4aM4yZ6qfClsDY/MttMERrUVp+fGlSCCzVoXhzVJDRgOVCqQT8CXIkBemAf 18R+DjzstfpoQ/2YI0ECzqL61ywXP3LJXYMUVFX8FzeNAHJKAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLI5WRmwmixzBTf/2yoLOPkpcWnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDhlOGZhNWUtYzY2Yy0z OTVlLWI4MTktNTZkMjQ3YmZkMWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB242nl75g8DtqgVmcy4O2WCrgTmhnyKCFtqyiWLXAuFYAGeDF5Su+ci E/QWgI5Xscf5Rv2oBPeKohwL+QWY1LThMB3Q1e7o4tFFsNnZiv1TCCEuSSNCMk5z 0Ai0MafKSr1jMQdQoYKil0nTFvePQGcfjgMC8ojxWJ0lug6fkCEQGUuAsQVNg9Xy L+YCWZh+nZ+I4phkeusAUYy7meKe5yQonwjcH0T7BTg5TICTtpxihvXBW+mZgxHq rqT+gAyDxfv5J4pkAIlElIH/NHv7I3FbUfc1E0EmvKpgtdw7+xvrPP04bOOKaelR wfiZ3fwU4f/jn7Xmhr0JLiv41ylR65I= -----END CERTIFICATE-----Generated at Thu Mar 26 13:08:30 2026 by rpki-client