$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fff87f68-9573-3200-ab5e-ec76f0b20812.roa File: fff87f68-9573-3200-ab5e-ec76f0b20812.roa (raw, json) Hash identifier: QKshUJzDTwLwddZUVwWnaeWQJFmgjRIIZiiE+bSqRHk= Subject key identifier: 9D:86:36:F5:08:1F:D5:86:B2:AC:C5:7D:C9:CB:38:6E:EF:02:CC:23 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0A7C61734EA70D648FE20 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fff87f68-9573-3200-ab5e-ec76f0b20812.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 162.72.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:a7:c6:17:34:ea:70:d6:48:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5c24d156-c02e-432b-b53e-b5d0b4ee749a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f9:b4:9f:25:17:71:1d:94:de:03:7e:c2:4c: 17:05:11:0d:53:cf:ad:e2:35:53:a1:ab:42:a1:e0: e2:4c:61:54:be:7c:dc:d8:70:25:65:a6:bc:d0:bf: f0:65:04:0e:ba:0d:88:cc:dc:12:cc:19:d8:58:7a: 5f:76:ed:49:55:9e:ee:0e:b3:0e:01:f8:11:16:2d: 6c:c6:61:fc:e9:15:d2:95:ec:3f:33:15:4b:2b:3b: e7:9c:0c:ad:f7:3a:48:64:91:e4:a3:9c:10:c9:26: 0d:d6:82:01:e8:06:b6:2c:1b:23:4c:fc:70:07:fa: aa:8a:c8:fb:e5:8a:9e:1f:46:09:83:d9:82:ac:03: c1:c9:3e:76:9f:91:07:62:fd:14:fc:51:9c:7d:bf: a2:28:56:4e:c2:ef:3d:45:8e:c5:65:91:6c:cb:d3: 65:92:e0:b6:60:ab:2c:f8:5f:89:85:3a:5d:20:50: 5a:36:08:7b:2e:28:bd:84:7b:85:3e:d7:27:41:fc: 8c:28:95:6c:9c:2f:61:39:7a:78:71:47:97:a4:4d: 11:55:cd:42:ea:2a:43:e7:69:48:6c:42:54:d7:64: 81:e3:f2:9f:1f:18:bd:e0:82:9f:93:c8:ae:43:b0: fd:c5:7a:84:df:96:4d:fe:29:e5:1d:c1:6e:bd:db: d0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:86:36:F5:08:1F:D5:86:B2:AC:C5:7D:C9:CB:38:6E:EF:02:CC:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fff87f68-9573-3200-ab5e-ec76f0b20812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b9:30:e4:11:60:5d:a7:10:63:30:bc:e8:63:96:c0:e1:a4: af:da:00:cc:2f:69:01:d8:25:2a:80:44:4e:49:11:71:eb:93: d9:c5:c2:6c:81:17:80:db:6e:8e:98:63:2c:cd:f6:cd:c2:0f: 83:f7:dd:67:53:b7:a5:b8:c2:76:6d:66:29:0f:ee:10:2d:7e: 61:56:c8:0a:8f:a6:65:0b:7e:6f:db:d0:83:64:40:31:c5:b8: 60:a1:98:65:2f:b1:a2:3d:fe:f4:c8:5e:b6:55:b2:3e:7c:d5: b9:56:a6:3f:68:3b:56:40:9a:70:60:55:19:b8:8e:ad:f1:6d: b4:b9:33:b0:f7:2e:d1:d3:b8:7e:56:9e:1b:83:57:66:70:95: a0:99:63:09:85:44:f4:b2:dd:9c:dd:1e:d6:3d:ac:8a:bf:ac: 3d:dd:20:59:a7:f6:ae:68:4a:70:3b:ff:d5:dd:2a:ba:86:50: 36:14:42:7b:28:52:aa:ec:aa:6e:64:13:85:36:5b:f0:47:7f: 49:6d:e5:77:cc:4a:ae:ec:7c:15:03:3c:11:de:e1:77:71:31: ae:26:26:7d:42:86:d6:ca:85:44:00:08:14:3f:22:01:6c:37: 7f:b1:71:e3:43:db:2b:2a:c5:c1:d2:3c:e3:1b:99:27:f7:e9: d3:38:de:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4KfGFzTqcNZI/iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NWMyNGQxNTYtYzAyZS00MzJiLWI1M2UtYjVkMGI0ZWU3NDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pm0nyUXcR2U3gN+wkwXBRENU8+t4jVToatC oeDiTGFUvnzc2HAlZaa80L/wZQQOug2IzNwSzBnYWHpfdu1JVZ7uDrMOAfgRFi1s xmH86RXSlew/MxVLKzvnnAyt9zpIZJHko5wQySYN1oIB6Aa2LBsjTPxwB/qqisj7 5YqeH0YJg9mCrAPByT52n5EHYv0U/FGcfb+iKFZOwu89RY7FZZFsy9NlkuC2YKss +F+JhTpdIFBaNgh7Lii9hHuFPtcnQfyMKJVsnC9hOXp4cUeXpE0RVc1C6ipD52lI bEJU12SB4/KfHxi94IKfk8iuQ7D9xXqE35ZN/inlHcFuvdvQVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2GNvUIH9WGsqzFfcnLOG7vAswjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmZmODdmNjgtOTU3My0z MjAwLWFiNWUtZWM3NmYwYjIwODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokhXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq5MOQRYF2nEGMwvOhjlsDhpK/aAMwvaQHYJSqARE5JEXHrk9nFwmyB F4Dbbo6YYyzN9s3CD4P33WdTt6W4wnZtZikP7hAtfmFWyAqPpmULfm/b0INkQDHF uGChmGUvsaI9/vTIXrZVsj581blWpj9oO1ZAmnBgVRm4jq3xbbS5M7D3LtHTuH5W nhuDV2ZwlaCZYwmFRPSy3ZzdHtY9rIq/rD3dIFmn9q5oSnA7/9XdKrqGUDYUQnso Uqrsqm5kE4U2W/BHf0lt5XfMSq7sfBUDPBHe4XdxMa4mJn1ChtbKhUQACBQ/IgFs N3+xceND2ysqxcHSPOMbmSf36dM43vc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:30:56 2026 by rpki-client