$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef74273e-fe4e-3654-a848-f0968a83d37c.roa File: ef74273e-fe4e-3654-a848-f0968a83d37c.roa (raw, json) Hash identifier: byXrZ5H0y/22oEsTU+Y4TBpZ2+WfJI5VLkjVYAHHkTY= Subject key identifier: 8F:01:57:A3:FE:62:7B:D6:67:3D:B5:18:4E:EB:15:8C:3E:DC:E9:FD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B177DAC824C69FF1C000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef74273e-fe4e-3654-a848-f0968a83d37c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b1:77:da:c8:24:c6:9f:f1:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d1ffaa92-2ec0-4744-84e6-9311aafc913b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a7:5b:9b:27:ab:71:82:af:91:97:d8:71:72: 3c:17:99:ce:9f:ec:2b:78:8a:c5:64:de:dd:61:d4: 77:27:2e:ab:45:09:fc:76:77:7a:5c:65:4a:bb:a2: 50:1f:ed:c5:6c:1e:96:67:3f:5b:ef:f3:30:7b:2f: 4a:c9:6d:66:b7:f9:39:75:46:01:14:92:1e:f5:74: 39:cc:a9:be:7f:dc:a0:e6:af:4c:d4:26:02:bc:27: ee:a4:9c:cf:d8:b0:c4:4e:13:20:63:da:ad:e3:52: 14:af:12:c5:62:d9:f5:7b:a1:05:1f:20:14:16:52: e3:ae:22:32:d0:3b:7e:3a:aa:fc:7a:d5:62:fe:ee: 85:1a:76:6d:87:50:9e:c3:2f:6d:70:11:97:51:21: fa:23:8c:31:cf:60:af:92:3f:54:6f:64:bd:6e:5c: e8:d0:bc:d6:07:b1:ee:3b:f6:0e:da:a8:ab:25:36: 9b:32:3d:61:fd:a7:1a:52:85:b5:56:9f:7d:07:83: ae:36:76:47:33:f9:a3:c8:87:09:ab:d0:cb:ae:7b: b1:1b:44:df:b9:ad:3c:67:17:92:7a:43:ac:23:1b: 0e:59:06:a7:39:bc:0a:bb:15:7e:4b:26:77:09:b2: f4:23:64:99:37:01:bf:6a:83:26:a8:cf:8d:48:1e: 87:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:01:57:A3:FE:62:7B:D6:67:3D:B5:18:4E:EB:15:8C:3E:DC:E9:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef74273e-fe4e-3654-a848-f0968a83d37c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:26:a0:46:9f:40:cd:8c:ff:80:e5:1b:9a:ed:21:f0:03:fb: a0:b0:81:e5:29:0e:3c:88:b0:a7:57:b5:63:05:ec:fc:fa:42: 01:1e:db:a7:15:83:ad:2b:74:83:01:58:da:83:cd:fb:4c:f9: 2e:68:c4:1c:2d:eb:d8:23:63:5f:c5:ec:2e:6a:a5:8d:0c:2f: 26:72:44:83:be:c0:85:40:8c:e9:26:f0:83:7b:81:f8:20:0b: 87:a8:9f:e2:4c:63:50:3b:d0:34:c9:52:d5:e5:b0:d8:81:da: e4:e8:f0:92:6e:ec:6e:aa:5e:36:2d:4e:ea:46:3e:53:03:de: cb:92:5f:60:3e:6c:59:91:81:2b:34:37:95:42:79:bb:da:3f: a1:e9:7e:91:70:a9:68:36:69:75:64:90:5e:c1:8e:36:4d:32: 13:8d:f3:9d:99:50:8f:3d:22:8e:21:ed:e5:80:71:67:b7:6c: 79:49:bf:40:7d:ac:f7:ef:8e:70:54:a2:88:94:63:61:60:ff: 80:42:31:24:03:9c:33:3c:d2:1d:19:71:a5:ab:3a:bf:2e:c9: a9:7b:66:6c:7c:5e:90:fe:b6:55:2c:21:64:b2:89:81:4f:a3: 46:34:87:30:0d:5b:e4:4a:26:5e:6b:c1:c6:75:55:e1:0f:77: 41:de:e3:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LF32sgkxp/xwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDFmZmFhOTItMmVjMC00NzQ0LTg0ZTYtOTMxMWFhZmM5MTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KdbmyercYKvkZfYcXI8F5nOn+wreIrFZN7d YdR3Jy6rRQn8dnd6XGVKu6JQH+3FbB6WZz9b7/Mwey9KyW1mt/k5dUYBFJIe9XQ5 zKm+f9yg5q9M1CYCvCfupJzP2LDEThMgY9qt41IUrxLFYtn1e6EFHyAUFlLjriIy 0Dt+Oqr8etVi/u6FGnZth1Cewy9tcBGXUSH6I4wxz2Cvkj9Ub2S9blzo0LzWB7Hu O/YO2qirJTabMj1h/acaUoW1Vp99B4OuNnZHM/mjyIcJq9DLrnuxG0Tfua08ZxeS ekOsIxsOWQanObwKuxV+SyZ3CbL0I2SZNwG/aoMmqM+NSB6H3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8BV6P+YnvWZz21GE7rFYw+3On9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWY3NDI3M2UtZmU0ZS0z NjU0LWE4NDgtZjA5NjhhODNkMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsmoEafQM2M/4DlG5rtIfAD+6CwgeUpDjyIsKdXtWMF7Pz6QgEe26cV g60rdIMBWNqDzftM+S5oxBwt69gjY1/F7C5qpY0MLyZyRIO+wIVAjOkm8IN7gfgg C4eon+JMY1A70DTJUtXlsNiB2uTo8JJu7G6qXjYtTupGPlMD3suSX2A+bFmRgSs0 N5VCebvaP6HpfpFwqWg2aXVkkF7BjjZNMhON852ZUI89Io4h7eWAcWe3bHlJv0B9 rPfvjnBUooiUY2Fg/4BCMSQDnDM80h0ZcaWrOr8uyal7Zmx8XpD+tlUsIWSyiYFP o0Y0hzANW+RKJl5rwcZ1VeEPd0He458= -----END CERTIFICATE-----Generated at Thu Mar 26 18:21:12 2026 by rpki-client