$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2af33beb-28bf-3e20-8796-37fd8256bd13.roa File: 2af33beb-28bf-3e20-8796-37fd8256bd13.roa (raw, json) Hash identifier: i69OOMBK3bdJgUZzrZ9Z3JDHyNuVNbG7dU8L2lWak+g= Subject key identifier: 96:FF:CB:F1:C5:49:06:54:46:9F:0D:DC:5C:ED:11:94:F9:6F:1F:2B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFF41B3053BCA22E959C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2af33beb-28bf-3e20-8796-37fd8256bd13.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:ff:41:b3:05:3b:ca:22:e9:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=8e73369a-8ad3-44d3-96ae-b5efc39551d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bd:fc:d4:ae:d8:54:b1:59:3c:88:20:ef:91: db:c0:ef:3d:f3:9c:e5:ee:74:35:cc:5e:45:6e:ab: ff:cb:8a:83:a4:34:b6:e7:54:1c:99:de:e6:09:af: db:a4:0a:5f:21:bc:ec:08:c9:9a:65:7e:5a:55:88: 0d:ef:60:6b:2c:48:0e:45:b3:67:16:dc:aa:07:1d: a5:11:d0:ae:05:2d:2c:92:29:a4:26:82:5c:11:b8: db:e3:b2:52:35:6c:23:5f:43:2a:06:1d:a6:0e:e6: 22:ee:9f:c6:b5:79:e0:2d:c2:70:93:74:7f:d3:2b: e3:cb:1a:0a:24:4e:98:cd:bf:e1:36:c1:99:45:06: f2:3c:49:cd:fe:02:c2:55:76:b2:c9:ac:f4:78:aa: c5:4e:89:ae:39:8e:8e:e2:d2:d9:09:7d:04:03:36: 11:af:a1:b0:04:01:d2:56:b4:01:88:f2:1d:0b:69: 09:8f:98:66:65:8c:3b:c7:db:8c:e8:d6:18:31:60: 94:4e:16:da:f2:fd:c7:e6:21:10:a4:31:1d:e8:1d: e9:c5:da:ec:ef:71:37:83:21:6a:88:0c:86:69:34: d9:20:90:06:66:d7:d1:52:d0:79:45:91:44:7c:44: b1:3c:5c:6a:f9:1c:8f:fb:c0:b8:bf:23:4a:d1:60: 04:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FF:CB:F1:C5:49:06:54:46:9F:0D:DC:5C:ED:11:94:F9:6F:1F:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2af33beb-28bf-3e20-8796-37fd8256bd13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:29:bb:d1:da:b7:f2:e2:50:f4:81:d9:57:14:94:61:fe:10: 4a:1d:94:a9:ef:87:a2:e9:2b:a0:28:06:61:a9:3c:3d:91:4a: e5:31:ae:22:5a:b2:48:62:ec:6c:5d:0d:80:df:ad:96:df:7b: 63:a6:f6:4d:20:d7:28:0f:75:8e:98:e6:6a:9a:13:99:56:a7: 75:5e:e4:76:9d:e9:9a:ff:31:21:26:eb:49:a4:6c:88:ad:cf: c6:af:84:24:d7:27:6c:ef:25:58:fd:95:05:ab:ec:55:69:6d: d1:0e:32:a6:35:e0:9d:69:18:49:fc:6a:a4:54:60:66:79:75: 6f:a9:64:07:50:7d:91:b7:61:cd:46:09:46:df:24:40:f2:36: b8:7c:c9:74:42:19:92:10:77:41:d7:c7:fe:78:89:7f:25:12: 12:d5:41:10:dc:77:c2:aa:4e:9f:c8:f7:60:83:c8:2c:52:63: 09:1b:a4:ca:f6:ab:e1:c8:aa:78:cc:4b:bd:a9:f1:fb:cc:df: 94:c6:2e:10:0f:04:48:76:9b:64:64:8e:2e:c4:89:ee:42:f5: 39:7d:ce:82:03:a3:28:f3:2b:a7:8c:de:de:6f:6a:fb:8e:94: 38:5e:70:a7:82:6e:bb:d9:49:b4:27:dc:34:7b:1e:5f:09:aa: 7c:f1:68:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/9BswU7yiLpWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OGU3MzM2OWEtOGFkMy00NGQzLTk2YWUtYjVlZmMzOTU1MWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr381K7YVLFZPIgg75HbwO8985zl7nQ1zF5F bqv/y4qDpDS251Qcmd7mCa/bpApfIbzsCMmaZX5aVYgN72BrLEgORbNnFtyqBx2l EdCuBS0skimkJoJcEbjb47JSNWwjX0MqBh2mDuYi7p/GtXngLcJwk3R/0yvjyxoK JE6Yzb/hNsGZRQbyPEnN/gLCVXayyaz0eKrFTomuOY6O4tLZCX0EAzYRr6GwBAHS VrQBiPIdC2kJj5hmZYw7x9uM6NYYMWCUThba8v3H5iEQpDEd6B3pxdrs73E3gyFq iAyGaTTZIJAGZtfRUtB5RZFEfESxPFxq+RyP+8C4vyNK0WAEawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJb/y/HFSQZURp8N3FztEZT5bx8rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmFmMzNiZWItMjhiZi0z ZTIwLTg3OTYtMzdmZDgyNTZiZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACopu9Hat/LiUPSB2VcUlGH+EEodlKnvh6LpK6AoBmGpPD2RSuUxriJa skhi7GxdDYDfrZbfe2Om9k0g1ygPdY6Y5mqaE5lWp3Ve5Had6Zr/MSEm60mkbIit z8avhCTXJ2zvJVj9lQWr7FVpbdEOMqY14J1pGEn8aqRUYGZ5dW+pZAdQfZG3Yc1G CUbfJEDyNrh8yXRCGZIQd0HXx/54iX8lEhLVQRDcd8KqTp/I92CDyCxSYwkbpMr2 q+HIqnjMS72p8fvM35TGLhAPBEh2m2Rkji7Eie5C9Tl9zoIDoyjzK6eM3t5vavuO lDhecKeCbrvZSbQn3DR7Hl8JqnzxaNA= -----END CERTIFICATE-----Generated at Fri Mar 13 05:52:43 2026 by rpki-client