$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3550bdcc-8b9f-3964-967e-cb878cee07fa.roa File: 3550bdcc-8b9f-3964-967e-cb878cee07fa.roa (raw, json) Hash identifier: 2b7VNNPo2i2i0nx/KA19pab7yPAxjMAIfnx5oIq713A= Subject key identifier: 16:16:CB:18:4C:8A:BB:23:8C:A9:DD:01:75:50:20:1F:BD:E4:C1:88 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFDF10DFA06888C6F6B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3550bdcc-8b9f-3964-967e-cb878cee07fa.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fd:f1:0d:fa:06:88:8c:6f:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=89a64414-f99a-437a-b60c-2c93d6691428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a3:73:f7:b5:97:7d:60:37:5e:79:f5:cb:bb: 59:d5:b9:6a:e4:05:06:ed:4f:08:4b:75:31:e8:61: df:08:66:58:34:32:69:4b:dc:3e:c9:49:64:34:e7: 17:2b:7d:80:00:a5:3a:87:99:f6:32:c3:cb:11:9a: c0:da:18:07:35:f1:e9:ca:32:9f:36:f4:4a:7b:1a: ed:64:a5:bc:17:dc:b5:d3:71:0b:e1:a3:01:b5:55: 95:92:83:c9:89:a4:9c:49:35:57:d0:55:ac:de:6c: c7:bd:96:e6:ff:95:55:dd:38:81:6a:a6:3d:d4:32: a4:fb:2a:de:b2:58:7a:b5:57:bf:0c:be:6d:89:0b: ef:8c:80:30:54:0a:61:c6:84:b6:e2:d0:44:de:df: 0b:fe:e4:5b:2d:d4:05:cf:c9:7e:b7:c1:d8:b3:26: 6f:69:80:0e:6b:eb:b1:c2:6a:c5:50:ed:00:32:a5: 97:f7:83:6f:fd:29:8d:2c:af:5e:26:48:cc:1f:74: b0:19:12:c9:47:f5:a0:ad:3a:3d:6e:42:4a:a3:b3: 3e:fc:7c:77:18:a5:38:67:bd:d8:96:55:93:6e:54: b3:3e:31:20:93:fe:49:1e:2e:e1:c1:77:0d:a6:fd: f8:f2:62:e2:04:de:d3:51:55:37:29:24:af:fb:a1: 78:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:16:CB:18:4C:8A:BB:23:8C:A9:DD:01:75:50:20:1F:BD:E4:C1:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3550bdcc-8b9f-3964-967e-cb878cee07fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:60:3c:83:76:40:55:f3:49:51:54:33:0d:95:33:69:7b:5a: 52:aa:f0:ce:9b:71:30:fc:44:4d:89:d1:e0:e9:21:2a:71:9b: 27:f5:bc:17:6a:4f:8c:1c:d8:3f:43:04:e0:73:76:51:60:8c: d8:1b:c8:9d:ae:2f:7b:a5:73:77:36:e0:c1:5d:0a:a3:8e:30: ac:25:cb:44:1e:00:d4:c0:b3:d6:59:57:b8:a6:34:3c:38:0d: 01:82:a9:a0:f4:4c:ec:09:f4:81:ca:a6:9c:02:fa:67:29:f3: b8:4d:f3:92:96:cd:57:c3:cc:7d:2e:36:4b:22:84:92:8c:c0: 6e:5e:ac:91:97:91:41:40:23:83:9b:aa:b6:b1:ba:fd:68:bf: 5c:f7:23:3d:fd:56:29:8b:17:a9:2e:29:f6:c0:b8:46:ce:66: af:78:2e:34:5d:12:30:27:d3:81:61:fd:5f:20:0b:58:79:bf: 62:9f:5d:99:aa:87:68:af:bc:4f:50:81:3e:9a:b4:f2:5e:45: 68:ec:d0:f1:90:2b:5e:0a:0c:8d:1d:19:51:82:c7:e8:37:e9: 19:c7:7f:9b:aa:db:f1:8a:10:0b:02:44:76:80:35:59:2a:e8: 6b:14:dd:ff:62:b3:de:1d:e7:45:3e:48:de:7d:50:90:8b:65: 2b:75:1e:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/3xDfoGiIxvawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ODlhNjQ0MTQtZjk5YS00MzdhLWI2MGMtMmM5M2Q2NjkxNDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KNz97WXfWA3Xnn1y7tZ1blq5AUG7U8IS3Ux 6GHfCGZYNDJpS9w+yUlkNOcXK32AAKU6h5n2MsPLEZrA2hgHNfHpyjKfNvRKexrt ZKW8F9y103EL4aMBtVWVkoPJiaScSTVX0FWs3mzHvZbm/5VV3TiBaqY91DKk+yre slh6tVe/DL5tiQvvjIAwVAphxoS24tBE3t8L/uRbLdQFz8l+t8HYsyZvaYAOa+ux wmrFUO0AMqWX94Nv/SmNLK9eJkjMH3SwGRLJR/WgrTo9bkJKo7M+/Hx3GKU4Z73Y llWTblSzPjEgk/5JHi7hwXcNpv348mLiBN7TUVU3KSSv+6F4SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYWyxhMirsjjKndAXVQIB+95MGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzU1MGJkY2MtOGI5Zi0z OTY0LTk2N2UtY2I4NzhjZWUwN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPL9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5gPIN2QFXzSVFUMw2VM2l7WlKq8M6bcTD8RE2J0eDpISpxmyf1vBdq T4wc2D9DBOBzdlFgjNgbyJ2uL3ulc3c24MFdCqOOMKwly0QeANTAs9ZZV7imNDw4 DQGCqaD0TOwJ9IHKppwC+mcp87hN85KWzVfDzH0uNksihJKMwG5erJGXkUFAI4Ob qraxuv1ov1z3Iz39VimLF6kuKfbAuEbOZq94LjRdEjAn04Fh/V8gC1h5v2KfXZmq h2ivvE9QgT6atPJeRWjs0PGQK14KDI0dGVGCx+g36RnHf5uq2/GKEAsCRHaANVkq 6GsU3f9is94d50U+SN59UJCLZSt1HvY= -----END CERTIFICATE-----Generated at Fri Mar 13 05:51:30 2026 by rpki-client