$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4a10b15-7743-39ef-8760-d58f10a1a5ef.roa File: e4a10b15-7743-39ef-8760-d58f10a1a5ef.roa (raw, json) Hash identifier: ZQ9CPTDABKMkgvWtZCaMnQhgcJLq2wLHO9iWSbriNTc= Subject key identifier: BD:A3:E0:DD:74:A2:A5:B8:9B:D1:3C:4B:1D:C9:1F:3F:76:5D:D6:26 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFCECD9A1995E146F6580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4a10b15-7743-39ef-8760-d58f10a1a5ef.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fc:ec:d9:a1:99:5e:14:6f:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3ed73e29-2447-42cd-9423-a83740e5d6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f0:e6:9b:84:2f:42:d5:f1:b6:f7:67:dd:7e: 95:af:2d:b9:1d:7d:76:b5:0f:18:4b:9e:62:38:d4: a9:f8:0c:f8:c5:aa:2e:77:e9:83:5b:64:2e:96:e3: c8:33:de:e8:8f:a1:29:a4:72:f7:4b:9a:20:30:63: ea:49:75:f8:61:8f:aa:ab:6e:fe:16:ea:57:ff:01: 75:ed:86:e0:30:93:6e:2b:14:25:4f:2b:e7:6a:13: 66:f5:26:18:12:8c:ea:ce:8b:6c:7a:d4:f2:2c:78: e7:49:af:46:4f:b8:36:fa:f6:af:81:7e:3c:a4:fa: 81:5e:c2:f3:9d:06:88:db:e5:00:f4:d2:3d:bf:43: 6f:e0:59:a8:49:4c:07:91:93:0d:16:cc:f7:4f:64: b3:70:0a:9a:b6:36:e4:cb:38:13:1d:ab:b2:c5:cb: d6:bd:36:0b:e4:34:e3:55:47:57:68:38:35:97:b9: 8b:ac:44:e9:96:54:5a:61:4b:bf:e0:43:1d:3c:e1: 04:95:c0:6b:c3:69:76:c5:bf:f9:ac:89:d8:6a:81: 5a:41:8d:f6:06:75:0b:d3:8a:1f:7f:18:25:11:74: ae:f0:8f:28:9c:6b:f3:7d:27:11:d8:e7:78:31:15: f2:2a:8e:14:b6:43:92:57:52:e2:35:c3:0a:ac:44: ef:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A3:E0:DD:74:A2:A5:B8:9B:D1:3C:4B:1D:C9:1F:3F:76:5D:D6:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4a10b15-7743-39ef-8760-d58f10a1a5ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:2f:97:e0:ee:08:82:13:1f:96:fc:5a:5d:8a:17:34:ce:d8: 57:09:3d:54:d9:86:cc:90:97:ad:dd:3c:f5:a6:86:1a:0f:a1: d1:7f:6f:b5:5d:68:a8:37:9e:65:2c:51:72:0c:fa:e0:85:83: 27:94:19:c3:7b:3c:ba:c8:8b:26:bb:fc:4c:27:e2:71:85:bf: 9a:c8:a3:9a:83:2b:e2:0c:ae:52:59:b0:35:67:d5:37:20:a7: d1:c1:7a:06:97:f7:b0:b2:69:b3:06:f7:a8:20:af:13:c1:fb: 20:46:d8:8f:26:b5:2f:59:26:c6:b5:78:b7:89:bc:9a:56:19: a1:00:7e:ce:16:32:2f:10:2c:6f:0d:e8:2c:b5:06:c5:a1:24: 93:e7:8f:03:df:43:ce:e3:10:6a:8c:06:89:61:ed:4a:46:17: 67:88:08:60:e8:a4:53:e1:46:60:8f:7f:a5:44:20:99:74:5c: 7d:9d:42:4d:56:12:1c:b5:2b:b2:4c:36:13:92:3f:d8:c7:99: 8e:7a:11:8f:63:12:fe:6e:b2:4d:c3:a5:01:11:96:ca:03:c3: ef:90:d1:6d:2b:3b:19:be:79:40:22:dc:05:dd:4a:ae:0a:bd: c5:52:b3:2d:56:f1:ee:72:be:23:e9:6d:6a:4d:53:7a:25:3f: bf:4f:58:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/zs2aGZXhRvZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk M2VkNzNlMjktMjQ0Ny00MmNkLTk0MjMtYTgzNzQwZTVkNmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/Dmm4QvQtXxtvdn3X6Vry25HX12tQ8YS55i ONSp+Az4xaoud+mDW2QuluPIM97oj6EppHL3S5ogMGPqSXX4YY+qq27+FupX/wF1 7YbgMJNuKxQlTyvnahNm9SYYEozqzotsetTyLHjnSa9GT7g2+vavgX48pPqBXsLz nQaI2+UA9NI9v0Nv4FmoSUwHkZMNFsz3T2SzcAqatjbkyzgTHauyxcvWvTYL5DTj VUdXaDg1l7mLrETpllRaYUu/4EMdPOEElcBrw2l2xb/5rInYaoFaQY32BnUL04of fxglEXSu8I8onGvzfScR2Od4MRXyKo4UtkOSV1LiNcMKrETvjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2j4N10oqW4m9E8Sx3JHz92XdYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTRhMTBiMTUtNzc0My0z OWVmLTg3NjAtZDU4ZjEwYTFhNWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkvl+DuCIITH5b8Wl2KFzTO2FcJPVTZhsyQl63dPPWmhhoPodF/b7Vd aKg3nmUsUXIM+uCFgyeUGcN7PLrIiya7/Ewn4nGFv5rIo5qDK+IMrlJZsDVn1Tcg p9HBegaX97CyabMG96ggrxPB+yBG2I8mtS9ZJsa1eLeJvJpWGaEAfs4WMi8QLG8N 6Cy1BsWhJJPnjwPfQ87jEGqMBolh7UpGF2eICGDopFPhRmCPf6VEIJl0XH2dQk1W Ehy1K7JMNhOSP9jHmY56EY9jEv5usk3DpQERlsoDw++Q0W0rOxm+eUAi3AXdSq4K vcVSsy1W8e5yviPpbWpNU3olP79PWN4= -----END CERTIFICATE-----Generated at Thu Mar 26 16:27:51 2026 by rpki-client