$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ddb495f4-e786-35e8-a411-017aa3cd9084.roa File: ddb495f4-e786-35e8-a411-017aa3cd9084.roa (raw, json) Hash identifier: 8X+SSmfHNJvi6H8zhOz04YR/bnrhDjkprJelrf7ZVLk= Subject key identifier: B6:E2:C6:2B:6C:D9:0C:2D:DC:DD:C6:83:B9:1B:02:75:3E:92:B8:69 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E06605E49CF2C0E1EEC800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ddb495f4-e786-35e8-a411-017aa3cd9084.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:66:05:e4:9c:f2:c0:e1:ee:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=20b8abf8-9278-47e8-981e-d1cd049c678c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:43:54:c5:ff:2b:21:02:be:29:57:0d:81:9e: f7:93:2c:d4:91:5c:87:00:c5:e2:2e:66:3c:2b:5d: 95:c2:f1:d3:88:4f:d5:a3:9b:02:b1:3d:41:e3:cd: a5:d9:fa:b5:f4:23:56:df:d3:fc:f0:00:b6:97:8c: f6:fa:7e:b7:a6:ed:f5:dd:3b:57:bc:0d:27:9a:c2: 78:0e:18:57:bb:6c:2f:40:24:36:a5:d4:5e:b3:18: 4e:69:c4:ef:45:c7:ad:e8:53:d8:d0:af:0f:6c:79: 56:46:0c:a7:4b:02:67:35:7e:10:78:c4:74:88:c9: b4:45:8e:c0:a7:f4:a9:13:9f:8d:8a:f5:25:84:5e: ba:fb:f5:b2:e9:b7:cc:aa:c8:5c:3a:39:b6:4b:bf: d6:4a:1a:93:65:00:33:80:21:ef:a2:cf:65:8d:9f: f2:86:c3:c3:13:51:de:49:5c:1b:db:3e:05:91:a7: a1:ca:d4:ed:e8:48:a2:2e:27:67:7a:87:cb:f8:55: 3d:29:cb:7d:43:1a:64:a3:4f:4f:ce:89:b9:8e:12: cc:0f:a6:82:c5:e0:04:32:10:ba:b5:2b:89:76:26: 84:85:d5:5a:d4:8a:f0:d9:b0:ac:43:a7:5d:50:6d: e5:97:33:60:a3:af:48:c5:c2:2f:2d:78:96:4d:74: 99:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E2:C6:2B:6C:D9:0C:2D:DC:DD:C6:83:B9:1B:02:75:3E:92:B8:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ddb495f4-e786-35e8-a411-017aa3cd9084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:42:7f:8b:b4:61:17:c0:8c:c1:a2:c3:e4:87:5b:fd:9a:14: db:c7:56:95:55:64:34:af:a0:2a:3c:33:49:c8:6c:53:34:15: b2:a0:ff:e9:ed:43:c3:9f:2f:f6:0a:51:80:4b:99:3e:21:d6: 5f:96:0a:b4:c5:39:1d:c7:c2:67:54:bf:2d:a0:2f:ef:f3:36: 3f:72:c4:d9:fd:5d:f5:fc:30:e4:bd:bf:d5:ca:e2:f3:e1:0c: 89:07:d0:f2:3c:5b:71:15:ba:88:5a:d0:61:c4:ba:e7:aa:91: 46:ad:00:d6:4b:70:5b:ed:ae:2a:6d:04:0e:a6:7a:1a:bf:97: 21:63:e3:a2:a2:41:bc:1e:52:1f:be:ed:c9:5b:b5:5a:6d:a6: a0:fc:01:63:8a:ae:a9:fd:e9:79:89:44:cc:ca:a3:14:95:54: 5d:ef:34:cd:10:a3:fc:6a:e7:03:08:5c:53:b8:0f:43:10:6d: 18:8b:95:f6:fd:15:23:0a:da:c4:c6:2c:4d:91:fe:c8:33:8d: eb:70:28:38:9a:91:bb:25:f3:74:1d:16:6e:c8:83:a5:90:df: 4b:24:a5:33:d1:fe:af:ea:2b:a6:79:d4:df:ba:4f:0a:dc:73: 7d:b4:2b:25:56:16:12:b1:13:f0:ac:52:0c:4d:f6:e9:bf:9a: 6b:c1:1d:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GYF5JzywOHuyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjBiOGFiZjgtOTI3OC00N2U4LTk4MWUtZDFjZDA0OWM2NzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0NUxf8rIQK+KVcNgZ73kyzUkVyHAMXiLmY8 K12VwvHTiE/Vo5sCsT1B482l2fq19CNW39P88AC2l4z2+n63pu313TtXvA0nmsJ4 DhhXu2wvQCQ2pdResxhOacTvRcet6FPY0K8PbHlWRgynSwJnNX4QeMR0iMm0RY7A p/SpE5+NivUlhF66+/Wy6bfMqshcOjm2S7/WShqTZQAzgCHvos9ljZ/yhsPDE1He SVwb2z4FkaehytTt6EiiLidneofL+FU9Kct9Qxpko09Pzom5jhLMD6aCxeAEMhC6 tSuJdiaEhdVa1Irw2bCsQ6ddUG3llzNgo69IxcIvLXiWTXSZAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbixits2Qwt3N3Gg7kbAnU+krhpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGRiNDk1ZjQtZTc4Ni0z NWU4LWE0MTEtMDE3YWEzY2Q5MDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5Cf4u0YRfAjMGiw+SHW/2aFNvHVpVVZDSvoCo8M0nIbFM0FbKg/+nt Q8OfL/YKUYBLmT4h1l+WCrTFOR3HwmdUvy2gL+/zNj9yxNn9XfX8MOS9v9XK4vPh DIkH0PI8W3EVuoha0GHEuueqkUatANZLcFvtriptBA6mehq/lyFj46KiQbweUh++ 7clbtVptpqD8AWOKrqn96XmJRMzKoxSVVF3vNM0Qo/xq5wMIXFO4D0MQbRiLlfb9 FSMK2sTGLE2R/sgzjetwKDiakbsl83QdFm7Ig6WQ30skpTPR/q/qK6Z51N+6Twrc c320KyVWFhKxE/CsUgxN9um/mmvBHXw= -----END CERTIFICATE-----Generated at Thu Mar 26 04:46:02 2026 by rpki-client