$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df84a301-ddf7-363a-b7e0-95c54bbfb27b.roa File: df84a301-ddf7-363a-b7e0-95c54bbfb27b.roa (raw, json) Hash identifier: 759b7hGvwEhfOVVlczVtJbFd+/wo6wLlKbni/gIpGgk= Subject key identifier: 58:A2:55:92:AB:56:7C:22:8F:12:32:27:66:4C:F4:1E:55:19:CB:97 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFF7DDE87897BD01D5700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df84a301-ddf7-363a-b7e0-95c54bbfb27b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:ff:7d:de:87:89:7b:d0:1d:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=18506616-88bc-49a3-b741-30fecafc979d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a7:0e:16:b0:5e:da:1c:42:a8:31:c2:5b:5f: ea:4e:41:5f:45:d8:47:31:0b:16:3c:bb:09:89:2a: 01:82:14:a6:7d:a9:b2:22:f9:70:f9:4f:23:b8:d6: 32:28:0c:bd:2c:5c:ea:77:bc:37:0d:8c:77:c5:d1: 3e:07:21:23:15:f7:ee:40:bd:7c:0e:1c:1d:f8:f9: 5c:c0:1d:80:72:6a:f2:0b:2a:92:e9:81:fb:11:d7: a7:4d:20:de:b9:24:ad:5e:67:b6:ee:8f:68:9c:a8: fd:44:2e:af:78:95:9a:e3:db:18:56:d3:e2:50:81: 1c:20:cb:c7:5c:d4:e8:bd:81:46:40:21:cb:d3:06: 89:69:7a:91:4a:7c:a6:14:88:cd:09:13:d0:e9:24: ab:3c:5d:5e:e5:57:52:42:d7:f9:7e:f6:a2:76:cb: a1:5f:e1:8e:2c:78:f9:4a:27:79:c2:41:6e:f9:bc: 7a:54:8e:fd:d5:9d:ef:e6:e6:3e:61:30:e6:c8:95: 93:3e:4b:34:28:84:a5:32:26:d6:24:e0:df:64:08: b5:27:92:47:db:10:5d:5f:30:04:6f:dc:d8:9d:cc: 49:4a:ac:a4:db:4c:ad:3a:c7:9c:b8:34:1d:e9:18: 81:e3:4d:44:49:84:36:e2:8c:17:bf:6b:27:98:ce: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A2:55:92:AB:56:7C:22:8F:12:32:27:66:4C:F4:1E:55:19:CB:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df84a301-ddf7-363a-b7e0-95c54bbfb27b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:a8:02:66:c6:d2:15:96:03:cd:93:29:6b:44:dc:8c:9b:0c: 8a:ef:e8:6e:b4:14:c2:6f:0a:df:e9:ca:cf:87:c2:df:81:87: 43:a0:f2:ab:b9:a3:6b:99:d7:60:fb:8c:56:cc:b3:2d:ce:e4: 13:bf:0e:31:a2:f2:f2:1e:f1:d1:57:33:75:ad:97:8c:e7:a4: 00:98:9e:83:a7:44:ee:95:ab:76:50:22:2a:01:9c:5f:cc:50: e0:69:56:58:1d:37:b5:d5:8f:58:7c:f5:fd:6d:04:d1:12:b2: 34:fd:8e:44:1f:c4:39:19:43:ed:1b:4e:56:13:75:b7:ba:98: 83:86:6b:76:f5:53:ee:ce:ef:9e:4f:5d:2d:f9:ff:d1:f7:99: 51:ea:01:a9:dc:fc:8e:e5:1b:0e:a9:ca:70:6b:3f:23:62:bf: 2f:1c:6f:e1:0c:58:fa:5a:d1:88:3f:d3:97:4c:c8:8f:d6:47: 15:08:95:29:38:b6:0a:89:eb:6c:de:2b:59:f3:74:68:6a:ce: 94:da:37:64:c2:66:43:dd:85:26:45:88:81:05:50:b8:2c:4c: ca:97:03:c3:74:dd:c6:2e:2f:a8:37:36:ff:d0:fa:43:1a:d8: 61:5c:28:f3:91:bc:5f:1f:f9:ed:84:ab:29:0b:68:5a:4d:7c: 28:de:5b:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/993oeJe9AdVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTg1MDY2MTYtODhiYy00OWEzLWI3NDEtMzBmZWNhZmM5NzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKcOFrBe2hxCqDHCW1/qTkFfRdhHMQsWPLsJ iSoBghSmfamyIvlw+U8juNYyKAy9LFzqd7w3DYx3xdE+ByEjFffuQL18Dhwd+Plc wB2AcmryCyqS6YH7EdenTSDeuSStXme27o9onKj9RC6veJWa49sYVtPiUIEcIMvH XNTovYFGQCHL0waJaXqRSnymFIjNCRPQ6SSrPF1e5VdSQtf5fvaidsuhX+GOLHj5 Sid5wkFu+bx6VI791Z3v5uY+YTDmyJWTPks0KISlMibWJODfZAi1J5JH2xBdXzAE b9zYncxJSqyk20ytOsecuDQd6RiB401ESYQ24owXv2snmM4tgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiiVZKrVnwijxIyJ2ZM9B5VGcuXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGY4NGEzMDEtZGRmNy0z NjNhLWI3ZTAtOTVjNTRiYmZiMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMaoAmbG0hWWA82TKWtE3IybDIrv6G60FMJvCt/pys+Hwt+Bh0Og8qu5 o2uZ12D7jFbMsy3O5BO/DjGi8vIe8dFXM3Wtl4znpACYnoOnRO6Vq3ZQIioBnF/M UOBpVlgdN7XVj1h89f1tBNESsjT9jkQfxDkZQ+0bTlYTdbe6mIOGa3b1U+7O755P XS35/9H3mVHqAanc/I7lGw6pynBrPyNivy8cb+EMWPpa0Yg/05dMyI/WRxUIlSk4 tgqJ62zeK1nzdGhqzpTaN2TCZkPdhSZFiIEFULgsTMqXA8N03cYuL6g3Nv/Q+kMa 2GFcKPORvF8f+e2EqykLaFpNfCjeW7c= -----END CERTIFICATE-----Generated at Thu Mar 26 06:04:45 2026 by rpki-client