$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd1dba0e-f641-3e4b-a15f-856b852cf2ed.roa File: dd1dba0e-f641-3e4b-a15f-856b852cf2ed.roa (raw, json) Hash identifier: TtsnHvfwFAe1UG6VzDfgaWeZOvT0dU84iurOcLXHkeE= Subject key identifier: 35:22:38:2D:50:A0:1F:36:48:87:AD:73:19:C5:4E:0E:2F:5E:B0:21 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0697D4B07D31B975AA400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd1dba0e-f641-3e4b-a15f-856b852cf2ed.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:69:7d:4b:07:d3:1b:97:5a:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=e88df84f-453c-474b-808b-e5b9b42b6665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7a:e4:2e:d0:e8:72:31:9e:d7:3f:58:d2:00: 3a:17:12:98:ef:f5:06:96:97:b8:02:78:5f:e4:b8: ff:6c:de:f1:45:c2:89:ca:83:83:84:d2:54:20:9c: a9:02:59:81:c3:fa:bc:ba:1c:a1:e7:9b:e2:4c:04: 32:e9:df:d4:ae:d7:e3:46:d3:11:9b:cd:4c:81:b4: bc:9e:29:e0:e3:9d:b9:bb:0a:bf:65:9d:2c:8f:0e: 83:63:08:30:7b:4d:32:a8:50:f0:66:52:23:0d:36: e2:c5:ee:98:8d:c2:c6:33:af:bc:a7:38:26:a9:68: e3:ff:32:73:81:26:58:15:ba:bb:93:2a:df:c7:ca: 26:0c:f0:88:d1:58:f6:d3:45:5e:07:33:66:23:1f: 19:58:25:f0:ff:a9:c5:3b:0b:22:ce:53:db:7e:6d: b7:af:9f:c3:79:32:d1:78:d9:e1:d1:3f:92:e9:d1: c6:a0:af:38:ae:9e:54:b7:e9:f2:a9:f2:d1:9f:80: be:59:8b:da:ab:4c:6d:e9:54:94:1f:d0:cf:8a:aa: 07:3e:79:3f:d9:c8:80:3e:1f:33:2a:28:90:67:3f: 82:e0:31:a2:56:43:f5:db:7e:43:42:9c:f8:bb:58: a5:30:cc:2f:e7:eb:d4:ee:54:a9:e7:29:fb:1c:dc: 3b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:22:38:2D:50:A0:1F:36:48:87:AD:73:19:C5:4E:0E:2F:5E:B0:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd1dba0e-f641-3e4b-a15f-856b852cf2ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:02:02:f2:d8:79:5c:54:45:c5:24:de:a5:1a:c9:2a:d2:a2: 06:ba:4b:c4:12:60:28:ad:cc:6f:25:e3:d6:b9:13:ed:52:09: 47:37:86:37:dc:cd:dc:77:10:35:d6:e5:26:ea:4a:de:a7:30: c0:b2:bb:2b:6d:c8:d7:da:ac:2b:ad:fe:e0:98:23:11:8f:bd: 01:dd:e9:7a:82:d9:64:29:52:b3:75:cd:bd:30:6b:38:fc:cc: a1:e0:e8:37:71:bc:a3:e0:25:dd:c4:b5:1a:a2:cb:38:0f:17: a0:39:5e:91:51:05:89:84:0d:bd:1d:c3:75:8a:26:7f:ed:90: 05:25:f9:f6:cb:10:4f:17:b1:73:18:62:29:49:15:58:a6:48: 38:fb:0c:77:89:b5:b9:67:0f:ee:b5:12:34:26:2d:db:14:52: 14:9d:74:a1:db:94:fb:25:83:08:57:38:70:be:6a:67:d0:4b: be:c7:2b:ad:13:bd:3a:e7:d0:bb:14:ea:4e:3b:c5:6a:05:29: 49:3b:1c:d3:46:25:f8:7c:0c:f7:e4:31:c6:7c:cc:d3:de:f2: f7:4f:4b:8c:19:78:a4:fb:23:a3:99:43:c1:40:eb:0e:1e:5d: 5c:0f:0d:fd:d4:39:b2:a3:a6:64:95:3e:fc:3c:66:be:08:0f: 77:7a:82:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Gl9SwfTG5dapAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZTg4ZGY4NGYtNDUzYy00NzRiLTgwOGItZTViOWI0MmI2NjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3rkLtDocjGe1z9Y0gA6FxKY7/UGlpe4Anhf 5Lj/bN7xRcKJyoODhNJUIJypAlmBw/q8uhyh55viTAQy6d/UrtfjRtMRm81MgbS8 ning4525uwq/ZZ0sjw6DYwgwe00yqFDwZlIjDTbixe6YjcLGM6+8pzgmqWjj/zJz gSZYFbq7kyrfx8omDPCI0Vj200VeBzNmIx8ZWCXw/6nFOwsizlPbfm23r5/DeTLR eNnh0T+S6dHGoK84rp5Ut+nyqfLRn4C+WYvaq0xt6VSUH9DPiqoHPnk/2ciAPh8z KiiQZz+C4DGiVkP1235DQpz4u1ilMMwv5+vU7lSp5yn7HNw7RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUiOC1QoB82SIetcxnFTg4vXrAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGQxZGJhMGUtZjY0MS0z ZTRiLWExNWYtODU2Yjg1MmNmMmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0CAvLYeVxURcUk3qUaySrSoga6S8QSYCitzG8l49a5E+1SCUc3hjfc zdx3EDXW5SbqSt6nMMCyuyttyNfarCut/uCYIxGPvQHd6XqC2WQpUrN1zb0wazj8 zKHg6DdxvKPgJd3EtRqiyzgPF6A5XpFRBYmEDb0dw3WKJn/tkAUl+fbLEE8XsXMY YilJFVimSDj7DHeJtblnD+61EjQmLdsUUhSddKHblPslgwhXOHC+amfQS77HK60T vTrn0LsU6k47xWoFKUk7HNNGJfh8DPfkMcZ8zNPe8vdPS4wZeKT7I6OZQ8FA6w4e XVwPDf3UObKjpmSVPvw8Zr4ID3d6grw= -----END CERTIFICATE-----Generated at Thu Mar 26 13:42:24 2026 by rpki-client