$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10c5d345-1978-3460-a9d2-dc39e20ff406.roa File: 10c5d345-1978-3460-a9d2-dc39e20ff406.roa (raw, json) Hash identifier: EjQ8JVlw+DiRpnMumoh8OkM/5zwsbf8qBl9zG55wYVc= Subject key identifier: 13:80:2F:74:0C:15:EA:07:DF:E0:A8:A5:5E:7D:78:46:1B:5F:28:2A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E004F36818351387D711C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10c5d345-1978-3460-a9d2-dc39e20ff406.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:04:f3:68:18:35:13:87:d7:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a7ac19a0-b71e-4bf3-b424-a92c9a9f7656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:07:fd:ca:39:12:c3:65:90:a1:e6:c2:32:de: c5:64:ae:ac:3e:82:cf:3f:a6:f8:a6:8a:23:d6:4f: bd:d4:87:15:3f:c4:1f:81:e0:58:0f:b7:4d:4e:91: 43:b9:02:a8:a6:b2:cd:75:46:5b:6c:a5:40:65:22: eb:f4:f9:7c:fd:68:7f:98:15:66:eb:d7:90:6a:4a: 0e:aa:c1:85:65:63:a3:b1:e0:b6:5b:5d:be:ce:03: 42:fd:aa:97:bb:3a:28:c6:74:99:05:50:08:3b:35: f6:11:88:8f:30:9d:13:68:ea:8d:99:0a:a9:a6:52: d4:37:0d:fa:79:3f:4c:e3:32:87:a9:de:72:a6:3a: 90:14:5d:cc:f9:bf:15:b6:34:09:98:47:69:e7:18: 36:35:f4:14:92:3d:89:f0:50:22:18:44:9e:b2:bb: c9:58:69:d7:ff:79:42:ca:72:0e:e6:34:23:3e:4f: 53:1c:d2:6a:ab:04:30:66:25:7a:df:cf:b1:55:37: cf:10:73:d2:c7:49:17:3f:17:a8:c8:35:4e:12:ea: 2c:04:1a:90:64:e5:c4:85:41:00:6a:99:e3:a0:52: 04:19:ee:b3:74:df:f9:36:d4:08:1b:7b:8f:16:33: 0d:95:91:84:3b:63:79:53:72:e7:e1:37:01:73:e4: ac:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:80:2F:74:0C:15:EA:07:DF:E0:A8:A5:5E:7D:78:46:1B:5F:28:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10c5d345-1978-3460-a9d2-dc39e20ff406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:3e:24:7a:07:37:e7:c6:d6:2a:79:08:d6:8f:56:7f:2e:eb: a8:e5:fa:dc:aa:3f:1e:f6:b4:c4:bc:3b:87:88:f4:15:77:33: 52:87:1d:ad:68:7b:d3:bb:63:e9:68:d0:49:a7:21:49:50:73: c5:09:a2:67:6b:42:2c:46:f8:79:a1:16:18:9c:fc:e8:cd:a4: 91:45:b4:5e:f7:79:ad:60:1b:a5:74:79:5f:5b:a1:b7:1c:d6: 03:87:d5:d4:2a:4e:df:f2:be:b9:b7:bb:c9:fc:0b:e5:aa:3a: 46:73:20:e7:64:a5:d0:80:d3:51:df:07:c6:aa:de:ed:b4:44: b9:8f:07:d3:7d:1b:2b:3c:31:67:6c:8b:32:d5:68:40:89:fb: 08:f0:c7:7c:91:65:ed:bf:ea:47:a5:c5:fc:b4:49:50:da:6f: 99:61:11:a1:fd:a3:44:bd:ca:b2:78:f8:6c:4b:f2:97:10:7c: 67:18:59:4a:b0:e9:5c:43:6a:41:78:a6:1c:b4:db:6d:e8:d6: ba:9b:02:e3:94:47:8c:33:db:2f:cc:c6:b0:a3:e5:63:94:84: 3b:74:bf:18:4c:de:de:4b:1f:50:98:cc:44:0e:f4:c0:7f:97: 9a:48:b1:af:36:ea:0e:5e:87:11:e8:d3:99:a1:5e:ed:f1:42: d7:e1:2d:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4ATzaBg1E4fXEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YTdhYzE5YTAtYjcxZS00YmYzLWI0MjQtYTkyYzlhOWY3NjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAf9yjkSw2WQoebCMt7FZK6sPoLPP6b4pooj 1k+91IcVP8QfgeBYD7dNTpFDuQKoprLNdUZbbKVAZSLr9Pl8/Wh/mBVm69eQakoO qsGFZWOjseC2W12+zgNC/aqXuzooxnSZBVAIOzX2EYiPMJ0TaOqNmQqpplLUNw36 eT9M4zKHqd5ypjqQFF3M+b8VtjQJmEdp5xg2NfQUkj2J8FAiGESesrvJWGnX/3lC ynIO5jQjPk9THNJqqwQwZiV638+xVTfPEHPSx0kXPxeoyDVOEuosBBqQZOXEhUEA apnjoFIEGe6zdN/5NtQIG3uPFjMNlZGEO2N5U3Ln4TcBc+SsEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOAL3QMFeoH3+CopV59eEYbXygqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTBjNWQzNDUtMTk3OC0z NDYwLWE5ZDItZGMzOWUyMGZmNDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM+JHoHN+fG1ip5CNaPVn8u66jl+tyqPx72tMS8O4eI9BV3M1KHHa1o e9O7Y+lo0EmnIUlQc8UJomdrQixG+HmhFhic/OjNpJFFtF73ea1gG6V0eV9bobcc 1gOH1dQqTt/yvrm3u8n8C+WqOkZzIOdkpdCA01HfB8aq3u20RLmPB9N9Gys8MWds izLVaECJ+wjwx3yRZe2/6kelxfy0SVDab5lhEaH9o0S9yrJ4+GxL8pcQfGcYWUqw 6VxDakF4phy0223o1rqbAuOUR4wz2y/MxrCj5WOUhDt0vxhM3t5LH1CYzEQO9MB/ l5pIsa826g5ehxHo05mhXu3xQtfhLRM= -----END CERTIFICATE-----Generated at Fri Mar 13 05:52:40 2026 by rpki-client