$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e55e17b8-86ac-3e59-8e5b-f9ff9cc8918c.roa File: e55e17b8-86ac-3e59-8e5b-f9ff9cc8918c.roa (raw, json) Hash identifier: JEidOVxVDhq5EGCTFHoRjkq705FyF+dhHYTUCcBFSHU= Subject key identifier: C0:FC:F4:FD:8E:50:26:4E:8D:BB:29:83:A2:CC:1A:96:03:5D:E9:00 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E00246C22FAD548A334F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e55e17b8-86ac-3e59-8e5b-f9ff9cc8918c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:02:46:c2:2f:ad:54:8a:33:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=01bec31c-3f86-45d5-be7a-435f1ef6b376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c1:a6:26:27:4f:e4:f1:db:a9:18:30:fa:af: f7:18:06:93:f4:21:69:6a:e2:fa:2a:0c:07:78:1c: 6c:1c:d5:4c:84:7d:bd:33:61:b5:85:93:c9:16:7a: dd:73:9b:cf:79:03:4f:20:0d:74:e1:63:ed:ff:a3: f6:d4:4a:a7:e3:74:c2:1e:71:11:22:69:44:b6:ef: db:04:dc:8a:7f:e7:bf:64:f5:7c:eb:7e:7a:60:6a: 44:ff:a9:29:93:be:95:2f:93:9c:6b:fa:50:a6:b2: 6d:79:84:31:57:17:e7:b4:01:6e:e5:f9:04:1b:e5: 89:d5:76:05:0a:fb:be:66:94:5d:ae:97:ff:d5:91: a5:ce:bd:6c:24:81:a2:38:15:bf:1b:64:d7:13:b9: d8:37:65:53:e1:e7:3e:57:72:16:a0:e9:19:de:9c: 53:1a:a5:6f:37:c1:85:13:36:ca:89:00:45:31:3e: b7:17:90:5a:8b:69:cc:96:eb:b7:e6:bc:1e:b0:ce: a6:61:5f:ed:fa:85:57:90:d5:ca:6f:8b:55:0c:4b: b0:c0:28:8c:07:80:19:18:85:eb:70:34:4f:3e:c5: 31:e7:17:c7:dc:b6:a4:a6:e3:8d:49:ce:dc:26:b4: 78:b5:5b:49:25:2e:72:76:20:d3:cd:1b:6e:a7:66: 94:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FC:F4:FD:8E:50:26:4E:8D:BB:29:83:A2:CC:1A:96:03:5D:E9:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e55e17b8-86ac-3e59-8e5b-f9ff9cc8918c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ce:82:18:68:a6:3f:15:a9:8e:13:5d:ce:04:4f:f1:b0:7c: 3d:67:91:6e:e5:d5:a5:c5:fa:98:b5:55:29:a3:c5:6e:4c:93: fe:7b:b3:32:a5:b4:74:f0:aa:a1:35:64:44:b8:29:a5:72:6a: da:81:85:30:a5:44:fc:e6:47:2e:5c:8a:2e:6a:41:03:ca:08: 5d:fc:52:67:6b:4e:15:0d:98:94:f8:b9:f4:3d:3b:06:a9:31: e9:3e:12:5e:14:54:96:f2:76:d3:1d:50:2a:5f:0a:02:6f:c5: d1:7e:a1:9d:df:ef:f4:4a:b3:26:1a:3c:44:34:6c:e8:b1:d0: a5:f1:a7:25:42:4e:86:eb:59:23:24:03:e8:8e:4a:51:7f:df: d2:84:de:fa:b0:5f:57:42:dd:a3:fa:f2:15:4d:6d:88:14:74: 5c:21:c0:a7:67:50:85:bd:ec:0c:81:54:85:30:f1:2c:1f:35: 7e:94:26:23:4b:64:94:41:a5:0a:68:19:bd:37:4c:6d:78:13: d8:45:e1:29:58:15:c3:38:9a:02:2b:f1:90:da:c3:85:15:af: 22:6a:f1:21:af:25:f1:2b:eb:d8:3b:09:17:1b:db:8b:a6:8f: fd:60:e1:46:99:a6:05:8c:f6:84:9c:c8:aa:ea:9e:48:f1:45: 9a:a3:03:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4AJGwi+tVIozT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDFiZWMzMWMtM2Y4Ni00NWQ1LWJlN2EtNDM1ZjFlZjZiMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMGmJidP5PHbqRgw+q/3GAaT9CFpauL6KgwH eBxsHNVMhH29M2G1hZPJFnrdc5vPeQNPIA104WPt/6P21Eqn43TCHnERImlEtu/b BNyKf+e/ZPV86356YGpE/6kpk76VL5Oca/pQprJteYQxVxfntAFu5fkEG+WJ1XYF Cvu+ZpRdrpf/1ZGlzr1sJIGiOBW/G2TXE7nYN2VT4ec+V3IWoOkZ3pxTGqVvN8GF EzbKiQBFMT63F5Bai2nMluu35rwesM6mYV/t+oVXkNXKb4tVDEuwwCiMB4AZGIXr cDRPPsUx5xfH3LakpuONSc7cJrR4tVtJJS5ydiDTzRtup2aU1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMD89P2OUCZOjbspg6LMGpYDXekAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTU1ZTE3YjgtODZhYy0z ZTU5LThlNWItZjlmZjljYzg5MThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrOghhopj8VqY4TXc4ET/GwfD1nkW7l1aXF+pi1VSmjxW5Mk/57szKl tHTwqqE1ZES4KaVyatqBhTClRPzmRy5cii5qQQPKCF38UmdrThUNmJT4ufQ9Owap Mek+El4UVJbydtMdUCpfCgJvxdF+oZ3f7/RKsyYaPEQ0bOix0KXxpyVCTobrWSMk A+iOSlF/39KE3vqwX1dC3aP68hVNbYgUdFwhwKdnUIW97AyBVIUw8SwfNX6UJiNL ZJRBpQpoGb03TG14E9hF4SlYFcM4mgIr8ZDaw4UVryJq8SGvJfEr69g7CRcb24um j/1g4UaZpgWM9oScyKrqnkjxRZqjAwQ= -----END CERTIFICATE-----Generated at Thu Mar 26 17:04:15 2026 by rpki-client