$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e3a9b647-f41b-35d3-8c81-fa036a52454b.roa File: e3a9b647-f41b-35d3-8c81-fa036a52454b.roa (raw, json) Hash identifier: 6nzjPqN3Bqwwl1+s1OPmEdHILmi68dlha12Nim8xwno= Subject key identifier: 6A:32:F5:9C:EE:30:A9:3E:F8:34:26:48:2E:0A:D2:E7:F5:57:11:AF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFBCD96261FB8E3B421AB0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e3a9b647-f41b-35d3-8c81-fa036a52454b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:bc:d9:62:61:fb:8e:3b:42:1a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=e8e7dbb4-6ebd-4194-bd85-67444148872a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0f:50:92:d3:c4:4d:03:04:58:a3:6c:b5:33: fc:a7:70:ae:15:90:47:97:b1:cd:0e:a4:c2:51:f7: 96:cf:c2:7e:5f:6b:fd:51:7f:a9:fe:67:fe:9c:bb: 12:37:bc:d1:52:89:4e:96:e7:bf:5d:89:b0:e6:b9: aa:4a:e7:d9:95:c3:91:7f:6b:8a:a1:55:f5:9d:07: 5a:f0:ad:63:b3:6c:58:ce:fe:c3:7d:c7:71:2e:3d: 24:40:4d:e5:2d:58:99:dc:48:24:9e:f0:e8:d0:18: e5:bc:62:a6:14:d4:d1:22:3a:e7:0f:af:9e:6b:af: d6:39:06:87:9f:0d:04:76:62:84:ec:83:87:3a:77: e1:11:d0:66:0b:f7:7c:29:6c:00:63:60:6f:25:77: 9e:fa:95:99:0f:34:0e:c0:64:76:48:3f:c0:d1:4e: 0a:92:29:f3:c3:c1:64:2a:e8:d7:9b:96:0e:c5:d9: 62:60:cb:b2:0c:a1:60:20:4d:5f:03:f4:5d:73:cb: 88:44:ad:d2:2c:6d:45:06:b7:27:8e:35:8b:be:71: 6d:da:55:37:ff:47:f0:e6:33:ea:73:1d:d0:b0:5b: 31:4b:ef:8d:be:8d:f3:35:b9:9f:52:47:5c:37:22: 9a:59:3f:5c:da:15:de:30:0d:1b:07:53:f5:e4:fd: 39:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:32:F5:9C:EE:30:A9:3E:F8:34:26:48:2E:0A:D2:E7:F5:57:11:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e3a9b647-f41b-35d3-8c81-fa036a52454b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:b7:17:b8:95:06:46:be:6c:0c:f1:f6:b3:b3:73:87:c6:0c: fa:26:b1:e5:ed:2c:55:cc:82:a0:0a:8c:10:2d:35:98:8b:06: c4:2a:d9:aa:36:89:68:76:f6:34:90:61:e7:ba:0b:e6:ba:2a: df:fb:97:0c:ca:d0:5b:8d:7e:7a:54:32:a6:39:f0:ab:c5:61: 0f:e3:a4:d5:22:02:72:3b:76:72:87:2f:f4:9d:54:8e:70:52: 5c:b7:c7:0f:32:11:46:a2:be:97:3a:f2:6c:6f:27:9d:28:ea: b8:db:cb:1a:64:09:d2:06:5a:4e:18:05:b5:b2:1d:cf:75:13: ce:49:a5:d2:15:60:8c:64:67:ce:f4:51:1f:47:f7:c7:e1:66: b8:1c:ea:5d:8b:0b:5a:26:95:4f:ff:04:87:c0:94:19:45:8c: 08:ec:55:36:f1:13:4f:65:8a:e3:c5:1f:25:5a:29:db:c6:0e: 8f:d0:04:8a:61:21:86:9f:1d:44:0c:17:3f:63:fb:2f:51:0d: a0:2f:a2:07:b9:fd:70:5b:78:7d:bd:8f:05:54:9c:51:05:d5: be:57:4b:2e:aa:93:e1:65:36:16:da:9a:7c:26:f9:64:40:3b: 11:1e:ad:f0:a4:ee:94:af:ab:ce:d4:8e:dd:fd:be:a2:e5:25: 14:3f:96:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37zZYmH7jjtCGrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZThlN2RiYjQtNmViZC00MTk0LWJkODUtNjc0NDQxNDg4NzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ9QktPETQMEWKNstTP8p3CuFZBHl7HNDqTC UfeWz8J+X2v9UX+p/mf+nLsSN7zRUolOlue/XYmw5rmqSufZlcORf2uKoVX1nQda 8K1js2xYzv7DfcdxLj0kQE3lLViZ3EgknvDo0BjlvGKmFNTRIjrnD6+ea6/WOQaH nw0EdmKE7IOHOnfhEdBmC/d8KWwAY2BvJXee+pWZDzQOwGR2SD/A0U4Kkinzw8Fk KujXm5YOxdliYMuyDKFgIE1fA/Rdc8uIRK3SLG1FBrcnjjWLvnFt2lU3/0fw5jPq cx3QsFsxS++Nvo3zNbmfUkdcNyKaWT9c2hXeMA0bB1P15P05nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoy9ZzuMKk++DQmSC4K0uf1VxGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTNhOWI2NDctZjQxYi0z NWQzLThjODEtZmEwMzZhNTI0NTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALy3F7iVBka+bAzx9rOzc4fGDPomseXtLFXMgqAKjBAtNZiLBsQq2ao2 iWh29jSQYee6C+a6Kt/7lwzK0FuNfnpUMqY58KvFYQ/jpNUiAnI7dnKHL/SdVI5w Uly3xw8yEUaivpc68mxvJ50o6rjbyxpkCdIGWk4YBbWyHc91E85JpdIVYIxkZ870 UR9H98fhZrgc6l2LC1omlU//BIfAlBlFjAjsVTbxE09liuPFHyVaKdvGDo/QBIph IYafHUQMFz9j+y9RDaAvoge5/XBbeH29jwVUnFEF1b5XSy6qk+FlNhbamnwm+WRA OxEerfCk7pSvq87Ujt39vqLlJRQ/lnE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:41:49 2026 by rpki-client