$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/efe75c65-b465-3579-90c4-8b9b93bc366f.roa File: efe75c65-b465-3579-90c4-8b9b93bc366f.roa (raw, json) Hash identifier: kOSu2vIbN+8sajUY5QwPSwgJIMWjRm8eTY45sx+VT1g= Subject key identifier: DF:ED:AE:BC:E6:34:38:45:B7:4B:DB:1A:02:7A:57:59:E0:00:7A:88 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFB7390B98D2B9184A2500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/efe75c65-b465-3579-90c4-8b9b93bc366f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:b7:39:0b:98:d2:b9:18:4a:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6ac38b5c-7c02-4b82-befe-3b1a7ab27115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:29:69:e6:b5:d8:94:5f:71:57:89:48:4b:41: fc:b3:b8:f0:b3:43:1b:99:4c:c6:ab:fa:5b:fa:41: 57:30:c3:38:02:80:30:59:3c:3f:4e:96:43:e1:bf: a0:7a:36:ab:44:46:c8:67:4a:50:5b:63:5d:ad:7e: f4:4d:2c:fc:3c:26:a5:19:58:36:1a:0c:39:fb:d4: 93:5f:42:8e:09:5d:9c:33:1d:e5:3f:3e:9a:ae:33: 3d:cd:23:c2:bf:23:6e:28:67:c5:5c:3b:81:10:55: 3c:15:b9:20:63:a1:de:ec:ae:b1:c7:42:1a:76:44: 83:66:7c:65:d1:dc:cb:5b:10:11:e6:b4:d3:6e:55: 21:78:0a:7e:bc:86:3a:ad:8c:58:e3:9e:a9:00:ff: bf:95:c6:43:c4:5f:ab:c5:c7:97:60:af:69:83:d1: 41:5e:b6:68:4e:a4:f2:66:52:56:f6:b3:8a:86:b0: a8:ab:49:a4:91:fb:f7:55:09:cd:a7:53:a0:4d:0e: 0e:48:40:ec:9a:00:85:74:7c:f3:cc:0e:4e:b2:f6: 7b:9d:8e:ea:6e:ba:6e:9c:8c:42:34:1e:dc:bc:ef: 3e:03:3d:18:cf:4b:68:3c:64:ea:aa:1e:df:6d:b4: 87:9b:9a:45:e9:89:2b:d3:d8:b1:cc:93:3c:93:f7: 01:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:ED:AE:BC:E6:34:38:45:B7:4B:DB:1A:02:7A:57:59:E0:00:7A:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/efe75c65-b465-3579-90c4-8b9b93bc366f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:14:03:ac:55:ed:58:38:a4:f2:b8:30:65:71:65:69:29:96: a0:ac:0f:be:12:9f:a3:99:26:b8:24:cd:df:36:e1:1d:88:41: d7:6a:9c:0d:51:0b:d6:07:39:14:2a:6c:22:1b:ef:41:07:ae: b0:08:0c:37:52:86:66:61:67:0c:ff:5d:7c:09:09:54:4d:01: b7:54:8e:b0:95:76:cb:7a:f5:75:c8:b9:78:37:ba:c4:2f:8d: ac:6c:6b:1e:bc:95:5c:94:4b:df:fa:ec:46:8d:f2:77:7d:da: c6:71:46:8a:09:7d:b6:51:86:3e:52:74:54:55:50:8d:2f:8d: 89:e5:55:99:3d:b0:7d:c6:e6:47:04:ff:ea:20:8a:cc:1c:34: 2f:83:f5:1d:ad:cd:c1:7c:ee:c3:4e:48:e8:72:29:68:35:d7: c1:10:a3:21:59:3c:42:59:f9:3b:b5:ac:b3:30:cf:12:b3:6d: 69:4e:66:ee:49:62:ad:af:6e:39:99:68:50:95:17:fa:f6:97: 5e:eb:ac:4b:4f:e8:1c:5c:ee:45:17:0d:56:0d:d7:e8:88:74: 4f:a0:d4:61:81:ab:66:ca:c1:7b:d5:26:ac:5f:2f:1a:e2:95: 31:2f:c4:9d:84:df:c8:8e:2c:ce:e4:76:88:e4:e4:46:c4:d0: 51:eb:73:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37c5C5jSuRhKJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NmFjMzhiNWMtN2MwMi00YjgyLWJlZmUtM2IxYTdhYjI3MTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkClp5rXYlF9xV4lIS0H8s7jws0MbmUzGq/pb +kFXMMM4AoAwWTw/TpZD4b+gejarREbIZ0pQW2NdrX70TSz8PCalGVg2Ggw5+9ST X0KOCV2cMx3lPz6arjM9zSPCvyNuKGfFXDuBEFU8FbkgY6He7K6xx0IadkSDZnxl 0dzLWxAR5rTTblUheAp+vIY6rYxY456pAP+/lcZDxF+rxceXYK9pg9FBXrZoTqTy ZlJW9rOKhrCoq0mkkfv3VQnNp1OgTQ4OSEDsmgCFdHzzzA5OsvZ7nY7qbrpunIxC NB7cvO8+Az0Yz0toPGTqqh7fbbSHm5pF6Ykr09ixzJM8k/cB/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/trrzmNDhFt0vbGgJ6V1ngAHqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWZlNzVjNjUtYjQ2NS0z NTc5LTkwYzQtOGI5YjkzYmMzNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcUA6xV7Vg4pPK4MGVxZWkplqCsD74Sn6OZJrgkzd824R2IQddqnA1R C9YHORQqbCIb70EHrrAIDDdShmZhZwz/XXwJCVRNAbdUjrCVdst69XXIuXg3usQv jaxsax68lVyUS9/67EaN8nd92sZxRooJfbZRhj5SdFRVUI0vjYnlVZk9sH3G5kcE /+ogiswcNC+D9R2tzcF87sNOSOhyKWg118EQoyFZPEJZ+Tu1rLMwzxKzbWlOZu5J Yq2vbjmZaFCVF/r2l17rrEtP6Bxc7kUXDVYN1+iIdE+g1GGBq2bKwXvVJqxfLxri lTEvxJ2E38iOLM7kdojk5EbE0FHrc90= -----END CERTIFICATE-----Generated at Thu Mar 26 14:16:11 2026 by rpki-client