$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f99da527-b425-3438-91d1-aa255a3de285.roa File: f99da527-b425-3438-91d1-aa255a3de285.roa (raw, json) Hash identifier: BR5FBmR2Gt4eVxT3IDADHLLb5h+w1Ws7XKzWm7TnER8= Subject key identifier: 4B:00:29:29:33:82:A7:78:44:0F:62:99:58:CC:E1:8D:DC:F6:6D:BD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0038DA12655834C62A200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f99da527-b425-3438-91d1-aa255a3de285.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:03:8d:a1:26:55:83:4c:62:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=e73590fc-e3ac-4361-8283-92cf9982332b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e5:ad:a6:ff:4d:70:37:5b:fe:1a:d8:6d:7b: 2d:0c:47:35:b7:c1:86:4f:39:54:c5:17:42:2e:3e: 9e:56:c4:b7:8a:ca:f7:96:87:cd:07:4f:30:7a:8f: 8a:07:70:f5:ef:27:5c:c8:71:24:14:86:1e:b6:0a: 65:2a:5b:47:03:9a:30:3f:b7:a3:d1:f4:79:5d:52: 95:f1:59:97:0e:3c:cc:68:63:74:51:dd:84:a2:9d: db:0a:76:e6:14:19:81:b4:8a:93:3a:5d:80:67:aa: 01:b9:d4:28:a0:a6:da:dd:64:d6:d2:76:cf:43:90: d4:b2:2c:fb:8e:9a:e5:75:60:e0:67:f8:dd:33:c5: 16:88:c4:a2:b5:d3:3b:d7:04:0d:87:e3:fe:3c:d3: b8:03:9f:a5:a1:aa:bf:a4:b4:4f:eb:31:22:52:a9: f6:03:33:86:38:60:18:30:8b:8b:64:7b:20:6c:bf: 01:a1:e4:c9:7e:53:62:4c:42:a7:2f:7a:61:c6:81: 99:5e:1d:87:d5:77:5f:e9:e9:60:90:5c:41:cb:5e: af:3c:fe:30:1f:e1:04:67:12:c1:00:1b:90:05:73: a9:de:be:2e:6b:79:88:ec:2c:9b:1d:c2:54:ab:73: 2d:e1:00:3f:d7:ae:43:1b:5d:38:da:95:8e:55:a6: e6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:00:29:29:33:82:A7:78:44:0F:62:99:58:CC:E1:8D:DC:F6:6D:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f99da527-b425-3438-91d1-aa255a3de285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:86:f3:b3:5a:5c:59:76:a9:26:ae:03:74:78:1d:c8:75:98: 3e:f3:08:c4:56:d1:5b:c7:59:6f:1c:f0:85:c8:41:a7:66:13: d7:2c:92:c4:79:37:87:c1:6a:3c:cf:be:9c:bc:0f:76:c7:fc: ce:62:4e:96:2f:7a:88:6a:b4:c9:b2:b9:9e:64:1e:99:e5:96: 23:43:86:92:e3:f1:64:db:63:6a:ae:0c:74:df:fc:f5:64:93: a6:15:2a:44:ed:ab:31:0c:bb:bc:ee:5c:65:70:c3:d0:63:a6: 2e:0c:a7:4c:9c:86:80:8a:7e:0c:98:b2:d1:97:ab:f4:3b:83: 6a:6d:d6:44:d5:09:9c:ac:c7:6e:19:55:cf:b7:61:36:9f:16: df:c3:d8:60:a2:a4:28:43:79:a5:77:d5:3e:e0:21:1b:3b:c0: d4:1d:44:b3:06:3e:ac:d8:0c:54:07:e5:f7:b2:4c:a3:cc:94: 4f:a1:4c:12:be:98:8e:be:41:db:9a:67:fe:7b:44:28:f1:86: 79:a6:36:d7:9b:37:21:e7:a2:9c:36:22:dc:e9:42:0f:d3:3d: 27:85:d8:75:88:58:93:37:21:df:1b:86:28:e1:58:1d:d9:58: 2d:3c:17:e6:97:87:23:0d:a0:4a:f4:0c:51:53:ca:a5:a1:3d: ba:2b:ca:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4AONoSZVg0xiogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZTczNTkwZmMtZTNhYy00MzYxLTgyODMtOTJjZjk5ODIzMzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuWtpv9NcDdb/hrYbXstDEc1t8GGTzlUxRdC Lj6eVsS3isr3lofNB08weo+KB3D17ydcyHEkFIYetgplKltHA5owP7ej0fR5XVKV 8VmXDjzMaGN0Ud2Eop3bCnbmFBmBtIqTOl2AZ6oBudQooKba3WTW0nbPQ5DUsiz7 jprldWDgZ/jdM8UWiMSitdM71wQNh+P+PNO4A5+loaq/pLRP6zEiUqn2AzOGOGAY MIuLZHsgbL8BoeTJflNiTEKnL3phxoGZXh2H1Xdf6elgkFxBy16vPP4wH+EEZxLB ABuQBXOp3r4ua3mI7CybHcJUq3Mt4QA/165DG1042pWOVabmsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsAKSkzgqd4RA9imVjM4Y3c9m29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjk5ZGE1MjctYjQyNS0z NDM4LTkxZDEtYWEyNTVhM2RlMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCG87NaXFl2qSauA3R4Hch1mD7zCMRW0VvHWW8c8IXIQadmE9csksR5 N4fBajzPvpy8D3bH/M5iTpYveohqtMmyuZ5kHpnlliNDhpLj8WTbY2quDHTf/PVk k6YVKkTtqzEMu7zuXGVww9Bjpi4Mp0ychoCKfgyYstGXq/Q7g2pt1kTVCZysx24Z Vc+3YTafFt/D2GCipChDeaV31T7gIRs7wNQdRLMGPqzYDFQH5feyTKPMlE+hTBK+ mI6+QduaZ/57RCjxhnmmNtebNyHnopw2ItzpQg/TPSeF2HWIWJM3Id8bhijhWB3Z WC08F+aXhyMNoEr0DFFTyqWhPboryio= -----END CERTIFICATE-----Generated at Fri Mar 27 01:58:02 2026 by rpki-client