$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9ea6be2-38c6-3b3e-abc9-28c5032ef50c.roa File: d9ea6be2-38c6-3b3e-abc9-28c5032ef50c.roa (raw, json) Hash identifier: Ky0f+oGh2WdZbUi0yZBtxAUTORl8RVaYz1M8fp28EPM= Subject key identifier: BC:1C:ED:8B:9B:9E:CC:B5:4E:8C:C6:7A:96:97:6A:44:CC:CB:11:A9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B387485D9292AA9D8B28 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9ea6be2-38c6-3b3e-abc9-28c5032ef50c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b3:87:48:5d:92:92:aa:9d:8b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ecce43e3-0225-4444-b1eb-0c3afcc8d7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:62:39:da:29:75:4e:9d:33:7d:2c:a7:08:f0: d4:35:92:76:5e:3c:54:8f:5d:4f:bd:26:0d:b8:48: 4e:b8:48:f8:45:2f:30:8e:49:bf:ab:42:3c:0d:23: ef:b8:3f:89:41:1f:b7:68:81:0d:01:fa:63:b8:63: a5:a8:a2:11:cf:7b:44:69:9a:99:75:f5:9b:55:45: f0:18:fb:79:3b:8c:b7:a5:64:ae:3a:45:1e:80:cb: 4a:f0:1c:72:42:cb:8c:38:ab:c1:54:7c:f1:74:ef: 27:98:45:1f:45:a5:02:e5:4d:5b:28:32:93:57:26: bb:be:4b:b9:3b:f1:34:ad:5f:b2:72:dd:46:92:48: 37:c0:b8:4e:50:fd:22:47:a6:d3:fb:62:c5:94:a6: 5c:d6:01:10:4b:1a:95:fe:db:c5:e0:90:4e:1c:71: 8f:21:8e:e0:ab:f2:25:78:cb:7a:25:e0:a4:76:2d: 0e:aa:ab:95:cd:66:1b:58:30:6c:13:48:d6:43:b0: b3:b3:4c:bd:dc:a9:80:f6:2c:f9:e2:15:6d:9f:fa: 75:b8:25:cd:3a:b4:bf:4a:bf:b9:82:a9:27:f4:34: cf:3c:2b:df:36:03:fb:c6:d3:bd:5a:ab:91:df:d2: 7d:60:a2:23:51:20:4a:22:14:1b:74:36:8a:a3:e5: 25:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1C:ED:8B:9B:9E:CC:B5:4E:8C:C6:7A:96:97:6A:44:CC:CB:11:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9ea6be2-38c6-3b3e-abc9-28c5032ef50c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:69:8b:a8:fd:6f:a8:65:a1:10:e2:d6:dc:a0:48:0c:dd:6a: ab:85:bb:90:f3:12:0c:bc:69:d5:fd:bf:14:f3:65:ab:50:36: c8:4c:dd:66:71:da:c2:2e:64:9d:bb:7d:0c:ad:eb:71:51:1d: bb:84:2c:bb:ce:4c:e6:70:62:72:80:b0:ba:0d:4a:24:2e:1a: 30:98:a6:79:db:39:e4:5c:e9:f4:0e:48:28:6e:77:2d:82:4f: f8:1f:73:a5:5a:c8:54:a3:68:99:ca:96:03:fe:2d:cf:42:76: 6b:52:44:b6:5c:9f:8f:b3:74:75:b3:f2:62:6f:5e:22:f0:21: 3f:3e:af:4c:cd:ca:f6:e4:59:b5:72:0a:11:29:98:41:49:c3: 5d:98:ec:26:0a:2c:65:67:01:71:e2:b9:69:a8:16:aa:dd:fc: 85:fc:e0:be:3e:79:09:d0:00:14:a3:e4:c8:ee:41:19:e5:9a: b9:fb:e3:c2:46:77:bb:42:2c:91:46:4c:d3:c9:af:7b:c8:70: ed:da:00:a7:d5:d8:6c:1b:a5:3e:a4:6f:8f:01:38:02:c9:d0: f4:09:a0:83:67:59:b1:29:99:e2:28:2a:77:2f:23:bf:97:91: 76:93:5a:a8:2f:09:ab:ec:f2:11:47:c8:db:7c:12:30:34:37: 09:1d:33:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LOHSF2SkqqdiygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZWNjZTQzZTMtMDIyNS00NDQ0LWIxZWItMGMzYWZjYzhkN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGI52il1Tp0zfSynCPDUNZJ2XjxUj11PvSYN uEhOuEj4RS8wjkm/q0I8DSPvuD+JQR+3aIENAfpjuGOlqKIRz3tEaZqZdfWbVUXw GPt5O4y3pWSuOkUegMtK8BxyQsuMOKvBVHzxdO8nmEUfRaUC5U1bKDKTVya7vku5 O/E0rV+yct1Gkkg3wLhOUP0iR6bT+2LFlKZc1gEQSxqV/tvF4JBOHHGPIY7gq/Il eMt6JeCkdi0OqquVzWYbWDBsE0jWQ7Czs0y93KmA9iz54hVtn/p1uCXNOrS/Sr+5 gqkn9DTPPCvfNgP7xtO9WquR39J9YKIjUSBKIhQbdDaKo+UluQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwc7Yubnsy1TozGepaXakTMyxGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDllYTZiZTItMzhjNi0z YjNlLWFiYzktMjhjNTAzMmVmNTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANlpi6j9b6hloRDi1tygSAzdaquFu5DzEgy8adX9vxTzZatQNshM3WZx 2sIuZJ27fQyt63FRHbuELLvOTOZwYnKAsLoNSiQuGjCYpnnbOeRc6fQOSChudy2C T/gfc6VayFSjaJnKlgP+Lc9CdmtSRLZcn4+zdHWz8mJvXiLwIT8+r0zNyvbkWbVy ChEpmEFJw12Y7CYKLGVnAXHiuWmoFqrd/IX84L4+eQnQABSj5MjuQRnlmrn748JG d7tCLJFGTNPJr3vIcO3aAKfV2GwbpT6kb48BOALJ0PQJoINnWbEpmeIoKncvI7+X kXaTWqgvCavs8hFHyNt8EjA0NwkdM3g= -----END CERTIFICATE-----Generated at Thu Mar 26 13:40:30 2026 by rpki-client