$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffe9dff8-0944-3e58-9da5-ce8b6f5f1481.roa File: ffe9dff8-0944-3e58-9da5-ce8b6f5f1481.roa (raw, json) Hash identifier: 3COhAXxc9G+XHNvPqVbVuT7eGxEVnY9UKfQZ8cBcpik= Subject key identifier: 68:20:65:A0:56:D6:79:79:2A:E9:C4:DF:4C:6B:3B:40:66:30:47:13 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0BA85D998CF617E33FE20 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffe9dff8-0944-3e58-9da5-ce8b6f5f1481.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ba:85:d9:98:cf:61:7e:33:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6d502d88-b594-4a25-af68-d4d9229e5b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:65:e0:65:72:00:a9:ae:f8:3f:64:bc:f9:d0: ca:59:d9:aa:5a:3e:a7:e3:21:31:b4:3f:d7:9a:84: 5b:bc:af:81:83:7c:e5:bb:e9:22:cf:4c:1f:f9:04: 8e:b9:47:2e:e2:24:e5:67:fe:de:f1:99:c7:5a:25: 3c:94:95:25:63:7c:20:6e:8e:48:35:06:2a:67:ce: c5:95:cc:a5:e7:a2:6b:90:6c:1c:76:f3:08:45:72: ae:6b:ff:3f:c8:44:99:ac:38:19:cc:90:db:1c:56: 21:d6:2e:d9:56:6d:8f:aa:19:8b:bc:3a:44:89:13: 14:ba:1f:ec:3c:be:b9:45:ba:13:24:d9:bf:d0:59: 24:46:09:d5:a6:fe:01:c9:36:03:f0:e8:5f:21:6b: 69:a9:d6:5d:fe:42:d9:24:e1:3d:c5:0a:f3:83:73: 30:b2:ac:e0:83:8d:94:74:ef:fb:d4:9b:69:62:76: 20:07:9c:5a:1c:d2:5c:96:f4:af:51:0c:dc:08:8b: 33:d3:69:99:d3:00:3a:e0:29:36:75:b6:fd:94:f7: 44:14:7c:96:c5:82:24:b1:15:e2:cc:62:06:80:c7: 79:14:ba:b6:99:a8:b2:6c:cf:62:90:28:f4:93:29: d9:0c:6e:4d:b6:38:2c:80:39:b5:51:83:2e:5a:38: 1a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:20:65:A0:56:D6:79:79:2A:E9:C4:DF:4C:6B:3B:40:66:30:47:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffe9dff8-0944-3e58-9da5-ce8b6f5f1481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:7a:14:39:be:73:5c:ca:e2:0a:b3:17:b8:4e:5e:78:e0:01: 1e:70:17:2c:34:68:6d:87:a7:97:b8:a4:98:28:eb:2e:a4:81: 8c:04:93:e8:e0:75:5c:cc:57:cc:01:07:4a:62:48:27:d4:75: 8e:df:d0:62:1c:b1:62:1a:cb:41:91:83:6a:72:3c:63:73:1e: e8:28:04:42:d0:1e:fb:42:72:07:c9:e2:c0:58:d4:30:63:05: c9:c8:f8:85:1e:3a:57:a8:d5:45:70:98:00:34:4d:d4:3e:50: 1f:1b:f2:e4:33:56:c4:84:0c:6c:f9:c8:67:d9:71:3d:51:2c: 7c:df:c5:52:fb:d0:74:91:81:bb:8f:39:df:7b:a7:37:33:89: d1:4c:9d:0f:ff:3b:b2:91:e8:e3:ed:d6:d8:b1:41:47:52:f4: 92:eb:bc:53:ee:df:b7:e3:85:e5:af:57:44:45:cc:37:32:9a: 8a:b5:b2:1e:c6:43:bd:e5:7f:23:2a:20:43:de:d2:97:eb:03: d4:25:4a:a5:9d:89:78:a9:a5:4c:bb:1a:45:5b:df:b4:b3:8d: 5c:2d:4d:6c:a8:b7:49:c5:bc:97:3f:d4:73:59:1a:8d:6a:46: e7:bd:be:61:49:8d:1c:8c:a2:ef:ab:95:6b:d2:50:f0:07:31: 2a:3c:e5:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LqF2ZjPYX4z/iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NmQ1MDJkODgtYjU5NC00YTI1LWFmNjgtZDRkOTIyOWU1YjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2XgZXIAqa74P2S8+dDKWdmqWj6n4yExtD/X moRbvK+Bg3zlu+kiz0wf+QSOuUcu4iTlZ/7e8ZnHWiU8lJUlY3wgbo5INQYqZ87F lcyl56JrkGwcdvMIRXKua/8/yESZrDgZzJDbHFYh1i7ZVm2PqhmLvDpEiRMUuh/s PL65RboTJNm/0FkkRgnVpv4ByTYD8OhfIWtpqdZd/kLZJOE9xQrzg3Mwsqzgg42U dO/71JtpYnYgB5xaHNJclvSvUQzcCIsz02mZ0wA64Ck2dbb9lPdEFHyWxYIksRXi zGIGgMd5FLq2maiybM9ikCj0kynZDG5NtjgsgDm1UYMuWjgaVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGggZaBW1nl5KunE30xrO0BmMEcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmZlOWRmZjgtMDk0NC0z ZTU4LTlkYTUtY2U4YjZmNWYxNDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD16FDm+c1zK4gqzF7hOXnjgAR5wFyw0aG2Hp5e4pJgo6y6kgYwEk+jg dVzMV8wBB0piSCfUdY7f0GIcsWIay0GRg2pyPGNzHugoBELQHvtCcgfJ4sBY1DBj BcnI+IUeOleo1UVwmAA0TdQ+UB8b8uQzVsSEDGz5yGfZcT1RLHzfxVL70HSRgbuP Od97pzczidFMnQ//O7KR6OPt1tixQUdS9JLrvFPu37fjheWvV0RFzDcymoq1sh7G Q73lfyMqIEPe0pfrA9QlSqWdiXippUy7GkVb37SzjVwtTWyot0nFvJc/1HNZGo1q Rue9vmFJjRyMou+rlWvSUPAHMSo85fs= -----END CERTIFICATE-----Generated at Thu Mar 26 08:03:37 2026 by rpki-client