$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f74dd42d-a02b-3bb0-b023-f4f28adc5f65.roa File: f74dd42d-a02b-3bb0-b023-f4f28adc5f65.roa (raw, json) Hash identifier: m9tVy6po8PifVMiDIZoiFtzRVLft3nIvGTKjL/To5pY= Subject key identifier: DA:0C:64:C9:0A:D9:78:76:19:DA:69:83:8B:A9:03:97:64:AA:24:59 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFB7295168B0E7B2ECE100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f74dd42d-a02b-3bb0-b023-f4f28adc5f65.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:b7:29:51:68:b0:e7:b2:ec:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=08aa3189-0294-48c9-94ed-5ec4af60ee8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:aa:e9:8b:3c:54:d4:68:9d:9f:5c:68:f0: cd:d7:02:58:db:5e:1a:d2:53:73:22:9d:04:c0:e0: 2c:0a:ac:c8:5a:d5:32:64:10:d6:18:c5:c2:ca:51: f5:b6:5d:e7:2b:d7:e8:7a:19:7e:04:29:e2:79:1c: f4:7e:01:0c:d4:43:75:c0:5e:b5:19:9a:6f:33:79: 09:57:23:d7:ff:90:e5:da:11:30:a3:1f:ac:3f:95: 2e:8c:4a:01:8e:44:68:c0:af:73:86:23:72:8a:3c: a0:22:98:a7:be:fc:40:3e:30:49:bb:5a:73:1d:d0: cc:52:36:40:42:bd:79:f2:ee:c7:99:b2:30:5e:e7: 41:b8:ad:39:48:81:18:93:a3:88:2c:a7:01:3f:d5: 95:83:ad:6e:ab:2d:0f:a6:9f:b4:68:b6:26:b4:8a: e5:1f:ab:53:bc:f3:e4:8c:b1:20:f5:2f:a4:03:b2: ef:af:04:93:c5:71:78:c4:3d:1c:c5:47:60:ec:6b: 4c:4f:3e:c4:db:2c:77:3b:7d:df:ee:2c:63:8d:a6: d3:a5:a6:ab:d1:d9:0d:02:3e:01:b0:e7:be:ab:0a: 03:c1:1a:47:19:09:83:f1:a6:c5:4d:81:71:37:5b: 86:5a:dc:32:43:aa:98:31:30:de:42:42:32:bf:be: 1d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0C:64:C9:0A:D9:78:76:19:DA:69:83:8B:A9:03:97:64:AA:24:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f74dd42d-a02b-3bb0-b023-f4f28adc5f65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:0c:db:e9:98:89:35:5a:b9:ab:50:da:ff:0f:b2:20:24:54: c2:a2:d8:58:a2:ed:38:ab:a5:23:67:a1:10:98:c3:96:69:d9: 0b:a4:de:0f:57:42:f6:03:dd:e0:6a:48:db:a0:42:b3:3f:6b: 50:94:1d:3b:12:a3:3f:e4:c3:75:4b:39:31:bd:f8:13:f4:86: 21:76:ad:b6:4e:b8:50:32:d2:92:c0:ff:b2:1b:ac:90:8b:9c: d1:67:a9:81:65:5e:12:f8:56:42:16:93:78:a2:a7:f7:a1:b4: 65:16:d6:39:fc:1f:c7:2b:f8:82:01:be:0c:d7:15:e0:46:42: 82:a9:2e:a9:8c:2d:09:91:39:a1:12:84:6a:f6:fd:3c:9e:3d: b6:e9:fe:5c:10:2c:f2:50:43:26:94:f1:4f:d5:3c:e3:30:8c: 99:e7:c2:b8:f1:f0:f4:34:80:c3:dd:78:37:b4:59:e7:0a:2c: f4:b3:f3:cc:b5:69:96:d9:08:5b:2c:e7:b7:56:d3:50:fd:b0: 40:2c:05:d4:ec:f5:12:70:a8:82:0c:aa:94:50:88:99:0b:67: 45:51:12:59:55:3a:e4:f5:d1:be:99:21:40:e8:a4:a5:32:44: a9:e2:62:71:6d:60:66:b5:b7:44:79:c0:79:5a:65:a9:f0:c7: 6c:93:ff:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37cpUWiw57Ls4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDhhYTMxODktMDI5NC00OGM5LTk0ZWQtNWVjNGFmNjBlZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXOq6Ys8VNRonZ9caPDN1wJY214a0lNzIp0E wOAsCqzIWtUyZBDWGMXCylH1tl3nK9foehl+BCnieRz0fgEM1EN1wF61GZpvM3kJ VyPX/5Dl2hEwox+sP5UujEoBjkRowK9zhiNyijygIpinvvxAPjBJu1pzHdDMUjZA Qr158u7HmbIwXudBuK05SIEYk6OILKcBP9WVg61uqy0Ppp+0aLYmtIrlH6tTvPPk jLEg9S+kA7LvrwSTxXF4xD0cxUdg7GtMTz7E2yx3O33f7ixjjabTpaar0dkNAj4B sOe+qwoDwRpHGQmD8abFTYFxN1uGWtwyQ6qYMTDeQkIyv74dLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoMZMkK2Xh2Gdppg4upA5dkqiRZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjc0ZGQ0MmQtYTAyYi0z YmIwLWIwMjMtZjRmMjhhZGM1ZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0M2+mYiTVauatQ2v8PsiAkVMKi2Fii7TirpSNnoRCYw5Zp2Quk3g9X QvYD3eBqSNugQrM/a1CUHTsSoz/kw3VLOTG9+BP0hiF2rbZOuFAy0pLA/7IbrJCL nNFnqYFlXhL4VkIWk3iip/ehtGUW1jn8H8cr+IIBvgzXFeBGQoKpLqmMLQmROaES hGr2/TyePbbp/lwQLPJQQyaU8U/VPOMwjJnnwrjx8PQ0gMPdeDe0WecKLPSz88y1 aZbZCFss57dW01D9sEAsBdTs9RJwqIIMqpRQiJkLZ0VREllVOuT10b6ZIUDopKUy RKniYnFtYGa1t0R5wHlaZanwx2yT/yA= -----END CERTIFICATE-----Generated at Thu Mar 26 17:41:36 2026 by rpki-client