$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1f10e20-8d39-3ede-96ef-d4beea3c2efa.roa File: f1f10e20-8d39-3ede-96ef-d4beea3c2efa.roa (raw, json) Hash identifier: lOqFyk0d/kH8vmQPF6rpMR/PVQEgGGRuxhQfIqFaXSM= Subject key identifier: 9D:90:FE:52:85:10:56:52:A3:C6:C7:81:6F:2A:59:CB:D2:64:2D:32 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0032D1D8D02DA3CC31760 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1f10e20-8d39-3ede-96ef-d4beea3c2efa.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:03:2d:1d:8d:02:da:3c:c3:17:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a1db9948-bc62-490e-bfd2-044432b8a291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:05:a2:75:e2:b4:38:cc:7f:c9:9f:f9:e8:d9: fb:53:3f:89:e9:da:f6:f1:70:92:4b:d1:59:69:80: 32:71:6c:36:9e:d1:1a:78:41:21:6e:bd:19:77:b5: 96:d3:7f:77:03:c8:14:e6:51:1e:ac:fe:9c:09:2d: d6:bd:98:39:0c:dc:48:4c:6a:3b:15:b7:90:bb:47: b7:7d:3d:4c:d8:d2:49:4a:29:0f:a2:a7:af:11:7e: b1:c7:cc:67:b8:d5:cb:60:58:21:71:ab:ef:3c:f3: fc:ab:46:ae:cd:0e:37:64:09:b1:c0:35:9c:19:21: be:e2:76:4d:c5:45:43:78:ad:66:0b:4b:f0:22:9e: 44:0e:2d:ab:af:19:8b:62:61:14:66:c1:ef:5c:04: 69:31:9c:99:75:2b:ba:fd:10:a6:bd:e1:d6:d4:bc: 80:14:a9:b4:e2:f2:a4:7f:4e:17:ce:b4:fe:52:29: cc:b8:bf:e7:39:65:ed:d3:9c:e0:8a:4c:62:7e:70: 47:66:2a:ad:f9:6c:0d:67:30:2b:be:c2:e8:62:98: b5:ff:6e:48:36:f4:c7:1e:94:bd:10:88:37:14:2b: 82:75:cd:f7:58:37:ab:5b:5d:63:e9:a8:77:87:e2: 39:44:3e:d4:01:ed:ba:98:c0:c0:8c:a4:61:10:9b: b3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:90:FE:52:85:10:56:52:A3:C6:C7:81:6F:2A:59:CB:D2:64:2D:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1f10e20-8d39-3ede-96ef-d4beea3c2efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:8c:a3:79:70:7c:64:09:01:93:ee:05:90:87:26:23:c0:37: eb:0d:c9:8f:a7:66:8e:16:7a:68:ff:bd:ce:87:5b:6d:53:48: f2:9b:c7:c7:a5:22:8e:1e:3e:ec:aa:72:78:38:1a:a7:99:71: 9d:f3:00:17:3e:58:a1:58:f3:63:78:72:5e:00:a6:59:1b:02: 55:bc:c1:89:a5:3d:fb:14:19:26:ce:28:03:b5:43:df:cc:0f: 47:3c:08:3a:f0:95:73:a6:65:58:6c:41:ba:9c:d4:a1:a1:42: 6b:05:c0:7b:b0:63:0c:b4:8b:37:8d:b9:f1:f7:a6:31:bf:af: 7f:76:72:17:a0:8e:73:db:6e:aa:40:45:c0:8d:17:50:c9:4f: 36:db:7a:7d:0c:57:20:78:d2:04:46:a1:7f:7f:24:4b:15:72: 66:3b:eb:30:26:55:01:03:5f:22:ca:4c:8a:42:18:44:59:e4: 49:66:93:fc:8b:f7:7b:66:dd:ee:7d:48:9b:d3:f1:73:95:3a: 21:42:c5:16:c3:39:b8:2d:22:97:76:f9:68:73:a8:ad:8c:83: 25:06:97:21:f2:d3:20:96:cb:ef:27:f3:ee:54:4a:de:19:0b: 8c:b9:97:e6:df:b4:7f:0b:e6:8b:e7:ff:9c:bb:4b:0c:6d:cc: 1d:eb:e3:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4AMtHY0C2jzDF2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YTFkYjk5NDgtYmM2Mi00OTBlLWJmZDItMDQ0NDMyYjhhMjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgWideK0OMx/yZ/56Nn7Uz+J6dr28XCSS9FZ aYAycWw2ntEaeEEhbr0Zd7WW0393A8gU5lEerP6cCS3WvZg5DNxITGo7FbeQu0e3 fT1M2NJJSikPoqevEX6xx8xnuNXLYFghcavvPPP8q0auzQ43ZAmxwDWcGSG+4nZN xUVDeK1mC0vwIp5EDi2rrxmLYmEUZsHvXARpMZyZdSu6/RCmveHW1LyAFKm04vKk f04XzrT+UinMuL/nOWXt05zgikxifnBHZiqt+WwNZzArvsLoYpi1/25INvTHHpS9 EIg3FCuCdc33WDerW11j6ah3h+I5RD7UAe26mMDAjKRhEJuznQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2Q/lKFEFZSo8bHgW8qWcvSZC0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjFmMTBlMjAtOGQzOS0z ZWRlLTk2ZWYtZDRiZWVhM2MyZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASMo3lwfGQJAZPuBZCHJiPAN+sNyY+nZo4Wemj/vc6HW21TSPKbx8el Io4ePuyqcng4GqeZcZ3zABc+WKFY82N4cl4AplkbAlW8wYmlPfsUGSbOKAO1Q9/M D0c8CDrwlXOmZVhsQbqc1KGhQmsFwHuwYwy0izeNufH3pjG/r392chegjnPbbqpA RcCNF1DJTzbben0MVyB40gRGoX9/JEsVcmY76zAmVQEDXyLKTIpCGERZ5Elmk/yL 93tm3e59SJvT8XOVOiFCxRbDObgtIpd2+WhzqK2MgyUGlyHy0yCWy+8n8+5USt4Z C4y5l+bftH8L5ovn/5y7SwxtzB3r41U= -----END CERTIFICATE-----Generated at Thu Mar 26 04:26:06 2026 by rpki-client