$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1ba1efd-4faa-32d7-87cd-529e1063434a.roa File: f1ba1efd-4faa-32d7-87cd-529e1063434a.roa (raw, json) Hash identifier: ONyebm7PSd5tHMWvWAVz99brcJ+dcOVmnHifFdgmWng= Subject key identifier: B5:ED:75:73:E0:29:6B:AC:39:9B:49:5F:D6:1A:F3:EF:25:A4:77:E0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E067675583B78F50DF3080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1ba1efd-4faa-32d7-87cd-529e1063434a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:67:67:55:83:b7:8f:50:df:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1cdaf3d8-b7e8-4efe-8687-86380c66c072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1f:27:46:e6:5b:d4:8a:ca:e3:47:10:d3:ce: 78:87:93:12:25:07:f3:b5:eb:cb:7f:a9:37:ea:0d: 91:0b:ae:89:7a:05:88:ac:6d:f4:e4:b1:e9:27:5e: 60:1d:b7:17:15:66:90:e8:a4:8d:87:85:e2:e9:f4: 37:e5:b7:6f:74:24:28:9f:50:73:5a:fc:1a:21:a0: 7a:bf:07:c5:1b:21:1c:a3:29:f4:2e:0f:8c:e3:65: ff:76:22:ae:e2:6b:11:84:a1:1a:e3:ad:a2:8d:7c: 8c:8a:40:aa:f5:d4:ae:61:f2:b0:d5:bb:fa:ed:80: 8d:b2:c2:ef:ab:bc:cc:35:fd:d2:70:5b:e4:6a:f8: f5:d8:2c:b7:a4:94:ad:7e:d0:f1:20:bb:e8:e2:7b: d0:ce:e5:51:d7:8b:56:1e:3f:ab:5c:52:0c:84:c9: 6d:56:4e:6f:9b:b5:fd:da:cd:98:44:ab:f2:49:26: 45:15:a0:83:26:93:f8:94:82:ef:85:17:21:e7:e0: 27:8f:f2:b8:94:6f:79:9d:57:02:bc:de:22:8f:07: 36:67:36:ac:18:7f:01:b7:10:88:96:d6:df:34:ef: 1e:dd:72:b1:f0:5c:de:08:4a:52:c3:4e:4a:dd:72: 88:0d:c7:33:b1:c9:be:5b:7e:74:bd:8c:f1:f5:8b: 85:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:ED:75:73:E0:29:6B:AC:39:9B:49:5F:D6:1A:F3:EF:25:A4:77:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1ba1efd-4faa-32d7-87cd-529e1063434a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:02:2f:44:e0:df:fe:b8:20:cb:c2:77:81:fb:0a:ca:ae:03: 62:3e:1f:51:1f:7e:09:a4:d3:50:14:6d:56:5c:18:32:32:7e: cd:1e:65:76:a1:d8:b8:5b:06:5a:2c:23:8c:bf:b1:53:87:4d: d9:ba:14:78:97:de:8b:ed:4a:7d:80:27:91:b7:a4:73:38:42: 28:8e:dc:d7:22:e9:55:a4:c1:2f:5b:52:b2:ab:ea:ff:26:96: 0b:d8:0b:63:85:02:30:56:91:2c:ca:50:16:3d:cf:ad:37:80: 7f:34:0b:ab:f2:5b:24:96:77:f5:42:85:fc:3d:ac:c0:47:68: 72:05:00:04:bf:01:68:a4:80:fa:13:c5:47:89:a9:0e:5e:f8: f2:f0:7a:19:17:d0:f4:16:db:eb:9a:2b:d7:f4:4b:7c:4e:b0: 84:1d:d4:ad:99:3c:c1:3a:21:63:f6:73:0b:f2:d2:4b:07:d5: 26:a9:54:81:1c:d2:34:96:e8:cf:cd:99:e7:e0:bf:ed:a3:3f: 89:32:41:b3:de:ff:17:e5:e1:57:a0:24:32:e1:f6:39:df:4d: 8c:70:53:58:c9:c4:01:4d:95:55:01:3c:a1:cb:56:fe:95:4f: 5d:1e:19:a3:08:52:4b:03:9b:22:4f:10:75:c1:59:2a:a5:a8: 5a:7c:bc:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GdnVYO3j1DfMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MWNkYWYzZDgtYjdlOC00ZWZlLTg2ODctODYzODBjNjZjMDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R8nRuZb1IrK40cQ0854h5MSJQfztevLf6k3 6g2RC66JegWIrG305LHpJ15gHbcXFWaQ6KSNh4Xi6fQ35bdvdCQon1BzWvwaIaB6 vwfFGyEcoyn0Lg+M42X/diKu4msRhKEa462ijXyMikCq9dSuYfKw1bv67YCNssLv q7zMNf3ScFvkavj12Cy3pJStftDxILvo4nvQzuVR14tWHj+rXFIMhMltVk5vm7X9 2s2YRKvySSZFFaCDJpP4lILvhRch5+Anj/K4lG95nVcCvN4ijwc2ZzasGH8BtxCI ltbfNO8e3XKx8FzeCEpSw05K3XKIDcczscm+W350vYzx9YuFIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXtdXPgKWusOZtJX9Ya8+8lpHfgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjFiYTFlZmQtNGZhYS0z MmQ3LTg3Y2QtNTI5ZTEwNjM0MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4CL0Tg3/64IMvCd4H7CsquA2I+H1Effgmk01AUbVZcGDIyfs0eZXah 2LhbBlosI4y/sVOHTdm6FHiX3ovtSn2AJ5G3pHM4QiiO3Nci6VWkwS9bUrKr6v8m lgvYC2OFAjBWkSzKUBY9z603gH80C6vyWySWd/VChfw9rMBHaHIFAAS/AWikgPoT xUeJqQ5e+PLwehkX0PQW2+uaK9f0S3xOsIQd1K2ZPME6IWP2cwvy0ksH1SapVIEc 0jSW6M/Nmefgv+2jP4kyQbPe/xfl4VegJDLh9jnfTYxwU1jJxAFNlVUBPKHLVv6V T10eGaMIUksDmyJPEHXBWSqlqFp8vGo= -----END CERTIFICATE-----Generated at Thu Mar 26 05:12:15 2026 by rpki-client