$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0a7d5a3-1f82-3c49-9350-35e7bc61718a.roa File: e0a7d5a3-1f82-3c49-9350-35e7bc61718a.roa (raw, json) Hash identifier: 3Jhht9+otdkkxDGRhHPbLY7kplz8//tq8xrisJbTc/A= Subject key identifier: 33:92:1D:0A:93:73:58:1F:66:D4:F7:B9:8D:6C:AE:DF:5A:9F:10:5E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFAC953411272AFABE5C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0a7d5a3-1f82-3c49-9350-35e7bc61718a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fa:c9:53:41:12:72:af:ab:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=166207c5-2189-45f6-a471-47d8e369d580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d2:fd:64:46:82:db:6c:45:ef:1e:9f:40:2c: 47:e6:c3:e8:31:47:40:cd:ed:ff:21:97:bd:d4:5a: bc:34:62:f6:30:6d:e2:8b:d3:92:69:d7:4b:39:ff: a5:b8:f0:73:9a:c3:ce:0d:34:6e:04:e8:f4:e6:ff: 02:a0:ab:f6:6d:ff:6f:62:ac:4f:42:12:53:1a:dc: 84:39:64:4b:75:18:88:a2:3f:a5:45:83:b0:de:4f: dc:f9:3a:c5:9f:04:92:dd:27:ec:18:d8:c9:98:a2: 5e:14:e3:14:08:58:e1:ae:0b:90:4d:5e:bb:00:f5: 09:f9:3a:d3:a8:ad:04:48:6c:08:1e:1c:a9:ed:bf: df:7e:37:e2:80:1e:78:ef:a3:bd:af:2f:7f:07:ee: 41:95:64:be:8a:27:7b:47:2a:87:1e:78:5f:4f:8c: 71:cd:52:78:6b:d4:64:56:77:d2:68:87:49:ba:29: 6f:12:f4:e2:d6:6a:7c:06:9e:64:32:fd:26:5a:33: e5:b9:ca:fd:72:0d:10:80:2c:b9:d3:6e:34:ec:89: d2:73:df:73:2f:cc:b4:5e:25:3e:b8:8a:3a:11:b9: 0d:b4:a3:7b:75:07:5c:ba:39:22:a2:85:f5:94:28: e4:ed:e5:b4:80:5a:df:1d:0f:d2:14:2a:bd:22:8d: e0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:92:1D:0A:93:73:58:1F:66:D4:F7:B9:8D:6C:AE:DF:5A:9F:10:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0a7d5a3-1f82-3c49-9350-35e7bc61718a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:67:32:a9:d2:a4:fa:63:e0:90:6e:3f:89:71:5e:78:5b:e6: a1:ee:c1:d0:10:3d:05:20:5b:a2:9c:ad:b7:4c:3b:51:e0:65: 6d:4e:62:5a:70:a0:ec:6f:0c:de:9a:a4:1e:d0:87:0c:31:ce: 5e:1b:58:4b:6f:21:85:1d:8c:f1:b9:fc:bb:30:84:0a:e3:f3: c7:8c:eb:b8:31:7c:13:54:90:70:d6:83:66:b3:55:a6:f5:dd: 3a:94:d1:1f:b5:d3:20:05:c1:72:52:d4:0d:ff:e3:82:75:14: ef:0b:44:9b:a4:34:0b:57:32:2d:30:c9:67:01:11:ee:cb:61: 07:51:ca:d9:3b:f2:40:b4:3d:28:5a:dd:eb:62:c4:3d:0b:01: 72:99:2b:7c:d7:67:bf:4a:3a:f4:c4:19:80:98:32:c5:93:f6: 85:24:90:0c:e1:a1:13:bf:bb:00:2d:95:88:3b:31:9d:9c:80: 8c:b1:c5:d0:2d:49:3c:74:f0:cd:07:08:68:d6:2b:3e:e6:23: 61:bb:92:d7:14:7d:fe:d2:7b:a6:f5:13:2c:3d:12:3e:e5:75: af:c9:65:52:26:f2:09:9b:e7:fd:4c:65:53:31:32:c0:54:34: 28:b8:11:ac:ac:8d:ee:fe:39:12:be:43:79:2a:46:55:5a:25: b6:1c:8b:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/rJU0EScq+r5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTY2MjA3YzUtMjE4OS00NWY2LWE0NzEtNDdkOGUzNjlkNTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdL9ZEaC22xF7x6fQCxH5sPoMUdAze3/IZe9 1Fq8NGL2MG3ii9OSaddLOf+luPBzmsPODTRuBOj05v8CoKv2bf9vYqxPQhJTGtyE OWRLdRiIoj+lRYOw3k/c+TrFnwSS3SfsGNjJmKJeFOMUCFjhrguQTV67APUJ+TrT qK0ESGwIHhyp7b/ffjfigB5476O9ry9/B+5BlWS+iid7RyqHHnhfT4xxzVJ4a9Rk VnfSaIdJuilvEvTi1mp8Bp5kMv0mWjPlucr9cg0QgCy502407InSc99zL8y0XiU+ uIo6EbkNtKN7dQdcujkiooX1lCjk7eW0gFrfHQ/SFCq9Io3gawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOSHQqTc1gfZtT3uY1srt9anxBeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTBhN2Q1YTMtMWY4Mi0z YzQ5LTkzNTAtMzVlN2JjNjE3MThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxnMqnSpPpj4JBuP4lxXnhb5qHuwdAQPQUgW6KcrbdMO1HgZW1OYlpw oOxvDN6apB7Qhwwxzl4bWEtvIYUdjPG5/LswhArj88eM67gxfBNUkHDWg2azVab1 3TqU0R+10yAFwXJS1A3/44J1FO8LRJukNAtXMi0wyWcBEe7LYQdRytk78kC0PSha 3etixD0LAXKZK3zXZ79KOvTEGYCYMsWT9oUkkAzhoRO/uwAtlYg7MZ2cgIyxxdAt STx08M0HCGjWKz7mI2G7ktcUff7Se6b1Eyw9Ej7lda/JZVIm8gmb5/1MZVMxMsBU NCi4Eaysje7+ORK+Q3kqRlVaJbYciwA= -----END CERTIFICATE-----Generated at Thu Mar 26 16:30:35 2026 by rpki-client