$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17e38567-d7a8-3785-88e8-65dc6ba74930.roa File: 17e38567-d7a8-3785-88e8-65dc6ba74930.roa (raw, json) Hash identifier: N+RXPVcO31Sbtsd/6oQMWJAM7OcugOQU/Zh/qBOL20c= Subject key identifier: 46:D3:2C:2B:16:78:19:97:85:91:16:82:1B:AB:F0:1E:90:3B:35:2A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B7AB1D4E269F3821E2C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17e38567-d7a8-3785-88e8-65dc6ba74930.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b7:ab:1d:4e:26:9f:38:21:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=cbb84edc-6860-413e-b999-4cc84928880c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:21:be:7e:d8:b6:d9:9a:57:f3:5a:4a:3d:a3: 42:8c:bb:27:27:0c:1b:1c:17:f0:7d:59:33:85:35: ce:0f:18:fe:77:cd:05:ec:10:26:0b:43:bd:58:f8: a3:10:de:34:55:a7:ce:f9:a4:70:f2:aa:f0:0a:d9: 3c:db:ea:0d:a4:79:d9:5b:8a:d5:63:70:96:51:05: ec:a8:71:c8:36:b3:d2:96:5b:02:7f:8e:a2:c6:e4: 89:92:52:40:36:ad:4c:02:63:19:b3:fe:1c:21:3c: a2:29:e4:08:83:ef:9a:4d:2b:82:86:a0:2f:64:bb: c6:c7:8f:b1:3d:e2:74:fe:9d:08:ac:8b:f8:1b:58: 9e:1b:f0:c2:4a:29:6d:98:15:69:c9:49:9f:dd:5f: 4a:2e:55:67:4a:26:72:61:6a:e0:ad:11:37:93:73: aa:f2:24:1f:aa:20:b7:55:bc:02:da:99:16:e6:c2: af:5c:87:2d:54:52:40:ba:0b:99:68:95:b1:63:47: 83:c7:03:77:8b:80:a4:89:5b:d2:81:90:23:60:6e: 93:d3:01:8b:1b:52:26:3f:6b:4e:5d:c2:be:ea:96: 58:5c:e4:66:27:26:0e:7d:9e:d8:34:e7:b5:26:77: 9f:e0:11:49:3f:fd:a0:01:6e:02:ac:ad:71:96:1c: dd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D3:2C:2B:16:78:19:97:85:91:16:82:1B:AB:F0:1E:90:3B:35:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17e38567-d7a8-3785-88e8-65dc6ba74930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a4:76:ac:ae:80:f7:fe:e8:b4:5b:90:5f:17:6f:3b:ea:39: 99:4a:76:b0:4e:c4:54:bf:15:2b:00:85:ff:1f:6f:c6:5f:5f: 63:bd:26:23:74:28:6b:56:79:6e:da:96:b6:19:0e:f8:64:b2: 37:7f:7c:75:f1:a4:f1:96:4d:36:8c:b7:59:2e:97:0f:cf:ee: 57:f7:47:8e:5c:a2:bb:00:61:2a:2d:09:3e:9f:76:33:d0:c2: 0e:a7:a8:12:6e:37:21:d7:d5:96:be:a7:83:0d:34:33:02:5f: 37:1b:e4:ae:90:98:7f:72:b6:16:af:0c:52:0f:e4:9f:72:3c: ce:03:3f:7e:0e:6d:01:d2:ae:16:b5:2e:7a:6d:47:82:6b:56: 51:f6:3d:5d:da:a5:73:e4:45:20:f5:0d:4a:89:6e:eb:74:a4: 5c:26:19:75:a8:18:c2:50:a7:d4:7d:61:14:92:8c:1e:a1:f8: 80:03:33:ab:ba:69:68:45:5f:f6:c0:66:c0:42:71:49:99:32: 4b:8d:bf:1a:73:b7:10:8b:d8:0c:03:eb:db:b4:69:ce:89:62: 54:33:c7:78:54:2f:4d:8a:57:2a:dc:b8:da:d5:a1:29:ab:47: 91:c6:ca:6c:38:cb:93:0a:43:ca:d1:44:33:ac:00:47:53:00: f2:20:46:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LerHU4mnzgh4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2JiODRlZGMtNjg2MC00MTNlLWI5OTktNGNjODQ5Mjg4ODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiG+fti22ZpX81pKPaNCjLsnJwwbHBfwfVkz hTXODxj+d80F7BAmC0O9WPijEN40VafO+aRw8qrwCtk82+oNpHnZW4rVY3CWUQXs qHHINrPSllsCf46ixuSJklJANq1MAmMZs/4cITyiKeQIg++aTSuChqAvZLvGx4+x PeJ0/p0IrIv4G1ieG/DCSiltmBVpyUmf3V9KLlVnSiZyYWrgrRE3k3Oq8iQfqiC3 VbwC2pkW5sKvXIctVFJAuguZaJWxY0eDxwN3i4CkiVvSgZAjYG6T0wGLG1ImP2tO XcK+6pZYXORmJyYOfZ7YNOe1Jnef4BFJP/2gAW4CrK1xlhzdvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbTLCsWeBmXhZEWghur8B6QOzUqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTdlMzg1NjctZDdhOC0z Nzg1LTg4ZTgtNjVkYzZiYTc0OTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABikdqyugPf+6LRbkF8XbzvqOZlKdrBOxFS/FSsAhf8fb8ZfX2O9JiN0 KGtWeW7alrYZDvhksjd/fHXxpPGWTTaMt1kulw/P7lf3R45corsAYSotCT6fdjPQ wg6nqBJuNyHX1Za+p4MNNDMCXzcb5K6QmH9ythavDFIP5J9yPM4DP34ObQHSrha1 LnptR4JrVlH2PV3apXPkRSD1DUqJbut0pFwmGXWoGMJQp9R9YRSSjB6h+IADM6u6 aWhFX/bAZsBCcUmZMkuNvxpztxCL2AwD69u0ac6JYlQzx3hUL02KVyrcuNrVoSmr R5HGymw4y5MKQ8rRRDOsAEdTAPIgRsI= -----END CERTIFICATE-----Generated at Fri Mar 13 05:53:38 2026 by rpki-client