$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21249c04-184a-348a-8117-43a314e9ce2a.roa File: 21249c04-184a-348a-8117-43a314e9ce2a.roa (raw, json) Hash identifier: 5Ss+akjX/sLwgmZdd+HEmtZMzBzZAAICFwPEpLuu9Ao= Subject key identifier: 96:DB:E1:71:2A:33:AE:E8:A8:17:99:F9:20:9A:69:ED:CF:25:05:2D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFC4E930313A87BC9EF80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21249c04-184a-348a-8117-43a314e9ce2a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fc:4e:93:03:13:a8:7b:c9:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c6ad5ab0-09ab-4951-92ae-479d2e8b2474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8d:5f:4d:3c:65:09:14:96:dd:35:b3:c1:dc: b3:e3:89:92:27:d4:e6:f1:7f:7c:98:66:e4:69:32: e4:b6:57:6f:2e:93:a5:0a:c1:bd:94:80:b5:67:8a: 7b:b4:9c:10:56:8d:f0:a6:2c:a5:87:a7:b6:40:eb: 68:c8:d8:5e:fb:78:b3:3f:04:09:bb:fe:a0:7b:97: 0a:ed:15:58:b9:db:da:e1:a3:8c:0a:52:07:88:40: cb:69:4b:f8:73:1d:93:84:a1:24:8b:b3:f9:d4:8d: ad:80:e5:0c:7d:65:e4:8f:41:3b:38:2c:64:a1:ef: f7:b0:2a:05:ca:50:c5:14:40:66:37:6f:ff:a1:8f: de:6a:45:fb:ca:62:be:e3:0e:2a:b2:58:56:1a:9d: 2f:17:67:cf:b3:6f:0b:46:ae:91:dc:f3:21:ff:7c: a4:d2:b5:11:47:81:55:99:e8:43:41:68:9f:c8:08: ab:9d:ad:b9:41:25:25:5e:6d:1b:8a:7d:9c:a0:67: 1e:b4:c8:74:1e:eb:84:cc:db:b9:33:fe:6b:0f:f7: 43:b4:36:7e:50:5d:52:be:21:56:69:2b:af:f5:da: 8c:48:12:5e:76:69:d3:98:36:52:ca:7e:c7:2c:8b: 79:04:e5:88:29:8a:69:09:d6:1f:4b:90:2d:fa:03: 0b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DB:E1:71:2A:33:AE:E8:A8:17:99:F9:20:9A:69:ED:CF:25:05:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21249c04-184a-348a-8117-43a314e9ce2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:ee:42:8b:b5:52:73:ad:b3:c5:53:2d:ca:d3:11:cc:54:4d: f6:89:10:ae:c8:7d:8a:22:de:92:e9:29:6d:b2:73:7c:75:8e: ac:eb:ac:f9:27:69:1b:cf:de:d5:f6:a9:f9:8e:7c:43:39:31: 23:a0:6d:28:5d:61:3f:36:32:ab:8a:a1:2c:c9:7c:73:53:35: 68:65:b0:07:62:92:f9:0f:a0:66:d1:c8:a3:fd:3c:99:3f:a6: 13:a3:89:6b:91:bd:c6:15:4a:8c:14:9a:9c:5b:5a:f1:c9:d9: 33:a1:eb:c8:f0:32:ec:92:1d:ca:29:70:ff:b9:07:bd:85:1b: 6c:ba:40:c8:4e:2f:da:7e:e1:da:9b:75:28:6c:8c:58:a4:02: 86:e6:aa:bb:44:8d:a3:4d:52:48:ed:ff:82:d5:95:4c:f7:62: 10:7d:76:7d:d5:47:b9:82:d6:0c:c1:72:1f:b9:82:5a:51:7d: 9d:d7:72:63:b8:8a:ee:a3:08:e0:5e:56:fb:84:b8:cf:c5:ed: 56:36:05:64:09:2a:5d:3c:7a:1f:d5:9e:7a:e1:07:a8:e3:e1: 88:4c:da:5f:c3:72:48:ac:52:3e:66:33:6f:06:bf:c4:76:8d: c5:80:fa:2e:53:4b:a6:94:e6:04:de:d6:9d:51:b4:06:1f:a6: e8:80:b8:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/xOkwMTqHvJ74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YzZhZDVhYjAtMDlhYi00OTUxLTkyYWUtNDc5ZDJlOGIyNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio1fTTxlCRSW3TWzwdyz44mSJ9Tm8X98mGbk aTLktldvLpOlCsG9lIC1Z4p7tJwQVo3wpiylh6e2QOtoyNhe+3izPwQJu/6ge5cK 7RVYudva4aOMClIHiEDLaUv4cx2ThKEki7P51I2tgOUMfWXkj0E7OCxkoe/3sCoF ylDFFEBmN2//oY/eakX7ymK+4w4qslhWGp0vF2fPs28LRq6R3PMh/3yk0rURR4FV mehDQWifyAirna25QSUlXm0bin2coGcetMh0HuuEzNu5M/5rD/dDtDZ+UF1SviFW aSuv9dqMSBJedmnTmDZSyn7HLIt5BOWIKYppCdYfS5At+gMLjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbb4XEqM67oqBeZ+SCaae3PJQUtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjEyNDljMDQtMTg0YS0z NDhhLTgxMTctNDNhMzE0ZTljZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/uQou1UnOts8VTLcrTEcxUTfaJEK7IfYoi3pLpKW2yc3x1jqzrrPkn aRvP3tX2qfmOfEM5MSOgbShdYT82MquKoSzJfHNTNWhlsAdikvkPoGbRyKP9PJk/ phOjiWuRvcYVSowUmpxbWvHJ2TOh68jwMuySHcopcP+5B72FG2y6QMhOL9p+4dqb dShsjFikAobmqrtEjaNNUkjt/4LVlUz3YhB9dn3VR7mC1gzBch+5glpRfZ3XcmO4 iu6jCOBeVvuEuM/F7VY2BWQJKl08eh/VnnrhB6jj4YhM2l/DckisUj5mM28Gv8R2 jcWA+i5TS6aU5gTe1p1RtAYfpuiAuPM= -----END CERTIFICATE-----Generated at Fri Mar 13 05:53:12 2026 by rpki-client