$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a855de-2f56-30f4-b7d6-ad843411b4b9.roa File: 10a855de-2f56-30f4-b7d6-ad843411b4b9.roa (raw, json) Hash identifier: i+mkSTZiv3n/ioJprjvCAaPKQHlGN/efxe1uXJfpj88= Subject key identifier: 10:AC:82:26:C7:E0:45:C2:54:A0:91:6A:C2:8D:19:EC:BE:16:53:FC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFD956A0117ACB02BD116 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a855de-2f56-30f4-b7d6-ad843411b4b9.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fd:95:6a:01:17:ac:b0:2b:d1:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=60e977eb-505d-4fc8-ad4a-250806ecd58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bb:a0:9b:49:0c:46:7f:13:16:00:12:e8:b3: 3f:83:69:c1:0a:22:e5:c3:4c:d6:a5:34:59:f6:cb: dd:e7:1e:7a:97:e2:fd:c8:e9:be:fd:ab:55:7b:6d: 5e:cb:20:1f:e4:62:7c:b2:f0:3c:33:bf:9b:8f:51: 7c:29:83:8b:1d:ba:c7:d2:c9:a9:6c:35:58:e5:5f: 49:6a:f4:f6:03:95:56:c0:90:83:d6:25:06:e9:8d: 28:5f:9c:99:9d:64:e0:df:25:b1:d9:c2:1d:2b:ed: 17:2f:f7:0b:56:52:42:a7:43:7e:47:0a:d8:3e:20: cb:67:17:10:5f:12:6b:f2:c6:c5:cb:32:76:8d:ff: c5:f8:d0:98:95:de:f2:fa:96:2d:a9:0f:7f:7a:fc: 10:62:56:d1:5f:4d:a3:9c:2e:9c:87:0e:98:01:2a: 4a:01:79:54:10:87:a8:ae:ce:63:d8:3c:55:27:b7: e5:29:6a:26:52:e3:c2:4c:af:b1:77:cd:b3:62:9e: 1a:98:c1:f9:82:84:a4:d3:88:db:ad:2d:e7:6d:29: 57:0a:d7:4f:1e:ad:96:8b:c8:ca:56:2d:92:5e:d3: 52:4a:a1:d2:d8:0f:25:a9:8f:73:f3:34:3f:22:01: ce:21:41:52:82:ef:69:f4:dd:70:0b:6a:56:0f:89: c6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AC:82:26:C7:E0:45:C2:54:A0:91:6A:C2:8D:19:EC:BE:16:53:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a855de-2f56-30f4-b7d6-ad843411b4b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:95:c5:79:32:b1:08:2a:a7:4c:e0:5d:a2:72:b5:58:c7:18: 3b:32:2a:80:30:2a:82:20:b0:c2:cf:6a:45:c1:05:47:a7:33: 1d:27:b2:94:49:1e:29:ba:60:56:a3:50:31:11:05:40:7b:74: 0e:99:18:5d:04:29:24:09:bf:2c:9c:d7:e0:fd:db:cb:15:b9: d1:cf:25:e9:62:eb:23:10:95:e7:97:0f:69:bb:2a:50:2e:f3: 41:8f:a5:06:60:c4:53:76:69:d6:3c:20:4e:fe:00:9c:97:ec: c1:62:79:ba:af:a2:cd:e2:8b:07:c0:08:91:78:6d:d7:37:6e: 67:3a:46:1f:d5:11:da:2f:a4:97:ee:de:04:ab:e2:23:a7:02: c0:14:41:3c:3a:56:d5:eb:19:9a:c7:b3:7f:d9:da:a0:5b:a5: 1d:8f:8a:e2:8a:c5:ed:9b:01:aa:fe:56:02:de:68:12:64:8b: 2f:0b:73:16:8e:2f:65:36:3a:66:80:1f:97:ef:8f:d2:5c:54: ba:39:63:59:11:bb:87:c1:2d:e1:68:e4:14:ce:ef:c5:b6:f6: 4c:f2:87:fe:1b:c6:05:21:62:68:38:cf:73:53:c8:d6:cf:08: 6b:97:0d:37:ff:8f:2d:76:40:c3:c7:03:34:88:1e:72:90:6f: f5:05:0c:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/2VagEXrLAr0RYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjBlOTc3ZWItNTA1ZC00ZmM4LWFkNGEtMjUwODA2ZWNkNThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbugm0kMRn8TFgAS6LM/g2nBCiLlw0zWpTRZ 9svd5x56l+L9yOm+/atVe21eyyAf5GJ8svA8M7+bj1F8KYOLHbrH0smpbDVY5V9J avT2A5VWwJCD1iUG6Y0oX5yZnWTg3yWx2cIdK+0XL/cLVlJCp0N+RwrYPiDLZxcQ XxJr8sbFyzJ2jf/F+NCYld7y+pYtqQ9/evwQYlbRX02jnC6chw6YASpKAXlUEIeo rs5j2DxVJ7flKWomUuPCTK+xd82zYp4amMH5goSk04jbrS3nbSlXCtdPHq2Wi8jK Vi2SXtNSSqHS2A8lqY9z8zQ/IgHOIUFSgu9p9N1wC2pWD4nGBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCsgibH4EXCVKCRasKNGey+FlP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTBhODU1ZGUtMmY1Ni0z MGY0LWI3ZDYtYWQ4NDM0MTFiNGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmVxXkysQgqp0zgXaJytVjHGDsyKoAwKoIgsMLPakXBBUenMx0nspRJ Him6YFajUDERBUB7dA6ZGF0EKSQJvyyc1+D928sVudHPJeli6yMQleeXD2m7KlAu 80GPpQZgxFN2adY8IE7+AJyX7MFiebqvos3iiwfACJF4bdc3bmc6Rh/VEdovpJfu 3gSr4iOnAsAUQTw6VtXrGZrHs3/Z2qBbpR2PiuKKxe2bAar+VgLeaBJkiy8LcxaO L2U2OmaAH5fvj9JcVLo5Y1kRu4fBLeFo5BTO78W29kzyh/4bxgUhYmg4z3NTyNbP CGuXDTf/jy12QMPHAzSIHnKQb/UFDNk= -----END CERTIFICATE-----Generated at Fri Mar 13 05:52:36 2026 by rpki-client