$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa3fec4a-3b5b-3c46-a316-b2e4d06006c8.roa File: fa3fec4a-3b5b-3c46-a316-b2e4d06006c8.roa (raw, json) Hash identifier: L+kkIj/ok+OWX3y0l/9X9yKnlqP41n4xpb4CZN84AY8= Subject key identifier: 26:2D:00:25:CD:27:E8:97:15:A0:28:4B:11:12:6E:43:49:3B:13:A6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E067D677228695D49BE800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa3fec4a-3b5b-3c46-a316-b2e4d06006c8.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:67:d6:77:22:86:95:d4:9b:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=29f13856-121e-497a-983b-04750d396526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:25:ae:1b:48:fe:af:7e:86:91:f9:c4:dc:ec: 22:67:04:90:76:da:27:d0:3e:0b:77:c5:9f:c3:9d: f4:5e:e0:3d:da:b3:fe:f3:38:ba:49:bf:80:28:68: d5:96:44:2b:b5:c1:f8:e5:50:7d:e0:64:b2:f9:8b: 99:90:cb:d5:ce:e8:15:31:1f:80:28:52:dc:f6:0b: 72:ce:bc:29:9c:91:cd:61:83:54:9b:ef:79:26:a7: 46:93:6e:cc:24:f0:39:1c:eb:9e:99:0b:04:61:ff: 2e:a1:6f:a9:96:c8:f4:f8:8e:0d:d5:28:9f:1a:75: 60:f1:4f:97:2f:02:9c:f2:ed:0e:4a:5e:f4:48:61: de:3c:90:fc:d3:55:a3:03:b8:18:c8:9d:ad:27:18: b5:4e:91:03:b1:3e:ed:1f:c6:66:be:2c:58:2d:98: c8:c8:42:bb:77:0e:93:4c:67:a3:90:36:4c:4b:67: c6:24:6f:0c:2c:71:64:0c:41:37:0e:bf:3d:5c:ee: 34:87:e0:24:b0:54:4b:61:32:c9:90:3e:69:9d:8d: 88:3c:af:28:7b:0e:82:d7:ab:64:65:9b:19:c3:8b: b6:47:f2:2e:68:80:e3:a1:5e:5b:fb:28:3e:0d:38: d0:12:bc:24:df:75:3f:7d:74:00:f7:3a:b8:d6:c0: ae:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2D:00:25:CD:27:E8:97:15:A0:28:4B:11:12:6E:43:49:3B:13:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa3fec4a-3b5b-3c46-a316-b2e4d06006c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:59:96:6d:88:a7:b4:93:46:f1:92:9c:0b:49:07:00:83:e7: 34:05:6e:77:5d:7c:e2:54:14:ec:60:c4:c7:5e:cf:64:84:15: f8:0b:ec:94:62:10:68:87:0d:23:75:b7:df:27:dc:98:23:fd: db:08:a9:96:94:04:c5:f2:31:fa:d5:cd:fb:93:5d:83:15:71: 84:cf:8c:86:ff:54:0a:82:20:bd:d0:6d:c4:cb:e2:7b:ca:bd: 52:4e:53:8e:84:e1:f2:b3:86:97:72:44:8a:93:c5:24:95:34: a5:4a:c6:df:af:38:d5:cf:25:05:05:44:99:e0:5d:25:57:4e: 09:e7:f6:44:4a:04:3a:96:00:aa:1e:f0:3d:3c:d6:3c:5a:74: 85:3d:ec:18:96:f4:3d:d7:5e:8f:0e:b6:a2:a0:73:d7:34:84: 70:00:99:7e:5e:42:33:74:30:5e:82:9e:40:b6:41:d7:b7:32: 50:b7:9d:b7:ae:d9:ac:c8:99:fc:f1:ea:4c:14:6a:0e:b3:f7: fc:4b:26:83:36:2d:63:81:cd:d6:93:4f:63:46:58:f1:2f:6b: ab:ac:77:44:09:f5:6a:7f:1a:a9:2b:76:4d:17:4b:e4:b1:f5: fb:94:2d:16:f6:c8:7f:6b:3f:5b:69:d1:fd:59:2f:3c:35:d6: e2:fa:bb:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GfWdyKGldSb6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjlmMTM4NTYtMTIxZS00OTdhLTk4M2ItMDQ3NTBkMzk2NTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiWuG0j+r36GkfnE3OwiZwSQdton0D4Ld8Wf w530XuA92rP+8zi6Sb+AKGjVlkQrtcH45VB94GSy+YuZkMvVzugVMR+AKFLc9gty zrwpnJHNYYNUm+95JqdGk27MJPA5HOuemQsEYf8uoW+plsj0+I4N1SifGnVg8U+X LwKc8u0OSl70SGHePJD801WjA7gYyJ2tJxi1TpEDsT7tH8ZmvixYLZjIyEK7dw6T TGejkDZMS2fGJG8MLHFkDEE3Dr89XO40h+AksFRLYTLJkD5pnY2IPK8oew6C16tk ZZsZw4u2R/IuaIDjoV5b+yg+DTjQErwk33U/fXQA9zq41sCuJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYtACXNJ+iXFaAoSxESbkNJOxOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmEzZmVjNGEtM2I1Yi0z YzQ2LWEzMTYtYjJlNGQwNjAwNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZZlm2Ip7STRvGSnAtJBwCD5zQFbnddfOJUFOxgxMdez2SEFfgL7JRi EGiHDSN1t98n3Jgj/dsIqZaUBMXyMfrVzfuTXYMVcYTPjIb/VAqCIL3QbcTL4nvK vVJOU46E4fKzhpdyRIqTxSSVNKVKxt+vONXPJQUFRJngXSVXTgnn9kRKBDqWAKoe 8D081jxadIU97BiW9D3XXo8OtqKgc9c0hHAAmX5eQjN0MF6CnkC2Qde3MlC3nbeu 2azImfzx6kwUag6z9/xLJoM2LWOBzdaTT2NGWPEva6usd0QJ9Wp/Gqkrdk0XS+Sx 9fuULRb2yH9rP1tp0f1ZLzw11uL6u58= -----END CERTIFICATE-----Generated at Thu Mar 26 04:37:13 2026 by rpki-client