$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a89969d-cb44-3660-b08d-0ac39c358c16.roa File: 3a89969d-cb44-3660-b08d-0ac39c358c16.roa (raw, json) Hash identifier: uvK1pybhUBXVh5lihmXPPvzbMp+YqP29ZBxwCelMJFY= Subject key identifier: FA:87:A3:D6:93:00:46:AC:C6:73:2F:C0:11:10:01:75:E5:64:9E:47 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B861CA709BB78CA7F4E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a89969d-cb44-3660-b08d-0ac39c358c16.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b8:61:ca:70:9b:b7:8c:a7:f4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=7d61f617-b18c-494d-8a5c-d0a59423eab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b3:b3:dd:a7:ec:81:e8:d3:e5:41:25:9a:d8: a4:72:3d:4d:19:ec:ac:0d:8a:0c:6d:dc:44:54:f9: b5:50:1c:43:0b:89:c6:69:46:6a:4f:34:3b:cd:f6: 30:02:d3:69:b6:1b:63:3d:fd:7e:8e:6a:b8:64:33: 67:2d:51:fe:d4:31:ab:a6:45:f8:ad:6d:86:42:9e: d6:2c:51:0e:71:33:9e:c9:ef:4d:62:50:1c:5e:af: 7f:9a:62:37:4f:fa:0d:3c:a5:93:5b:3d:18:8e:73: 2d:5e:4c:d5:91:a6:00:8c:f0:21:72:e4:11:4d:c9: 50:64:5f:7d:1a:55:e5:cb:c9:0e:78:f6:72:3a:59: e5:bb:b3:7e:19:1d:01:4f:c5:d5:12:29:27:6b:76: da:e9:e5:e5:cb:c6:e7:23:58:fd:14:e1:f6:b0:bb: aa:2e:8d:74:30:02:a2:18:a7:d3:a4:d2:e0:30:ed: 8b:9b:37:e0:56:21:6d:3d:2f:93:eb:ed:48:db:64: b2:37:9c:14:60:6f:f2:3f:29:47:1a:98:22:ae:69: 0a:df:29:f7:87:a4:68:89:c6:87:14:78:02:9d:68: a5:9e:48:8f:61:2c:f3:f7:01:13:f0:2c:10:02:14: 26:c8:50:c7:d5:25:1b:36:00:47:71:a2:fc:38:11: 83:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:87:A3:D6:93:00:46:AC:C6:73:2F:C0:11:10:01:75:E5:64:9E:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a89969d-cb44-3660-b08d-0ac39c358c16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:b4:42:f1:73:5e:29:33:98:8f:77:f6:1f:d0:d2:ad:6d:f7: 95:d1:29:cb:bc:67:17:bc:8b:39:bb:49:50:ee:e3:dd:e0:c0: 74:fa:e2:3b:02:41:28:f6:57:e9:eb:15:31:18:ce:1e:e8:1f: bb:0b:ae:6c:e4:17:d4:f5:56:39:4d:75:0d:8d:49:7c:76:ac: 45:c9:fe:44:23:e9:95:29:81:f7:21:cb:b1:3d:4a:6c:ac:16: b5:20:1e:31:1f:f7:7d:db:ee:c8:31:6c:45:13:57:8b:4c:e2: e2:42:fc:1f:34:c4:e6:d8:af:2a:4a:22:cc:cf:53:28:d0:bb: 58:49:21:81:e5:7b:50:c0:b4:e4:65:d2:53:42:25:cf:67:ed: 1b:1d:49:04:80:cf:2b:d5:61:5c:74:6e:90:ef:ef:4a:e3:04: 38:95:39:19:7f:4b:a0:88:5c:a8:60:1d:4c:c4:55:7b:b4:f5: c1:7a:ad:ed:c7:10:21:84:32:02:3b:3b:cd:8b:3e:31:d0:40: 87:5c:85:db:56:5a:de:14:d9:a3:93:1f:9b:c5:3e:61:7c:20: a0:3f:5a:49:5d:16:54:5b:88:5c:01:f6:77:35:d5:ff:f4:c0: 92:31:2a:fd:95:32:39:56:15:67:e7:68:9f:8f:b2:70:a0:9d: 6a:f9:bb:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LhhynCbt4yn9OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk N2Q2MWY2MTctYjE4Yy00OTRkLThhNWMtZDBhNTk0MjNlYWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLOz3afsgejT5UElmtikcj1NGeysDYoMbdxE VPm1UBxDC4nGaUZqTzQ7zfYwAtNpthtjPf1+jmq4ZDNnLVH+1DGrpkX4rW2GQp7W LFEOcTOeye9NYlAcXq9/mmI3T/oNPKWTWz0YjnMtXkzVkaYAjPAhcuQRTclQZF99 GlXly8kOePZyOlnlu7N+GR0BT8XVEikna3ba6eXly8bnI1j9FOH2sLuqLo10MAKi GKfTpNLgMO2LmzfgViFtPS+T6+1I22SyN5wUYG/yPylHGpgirmkK3yn3h6RoicaH FHgCnWilnkiPYSzz9wET8CwQAhQmyFDH1SUbNgBHcaL8OBGDuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqHo9aTAEasxnMvwBEQAXXlZJ5HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2E4OTk2OWQtY2I0NC0z NjYwLWIwOGQtMGFjMzljMzU4YzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK60QvFzXikzmI939h/Q0q1t95XRKcu8Zxe8izm7SVDu493gwHT64jsC QSj2V+nrFTEYzh7oH7sLrmzkF9T1VjlNdQ2NSXx2rEXJ/kQj6ZUpgfchy7E9Smys FrUgHjEf933b7sgxbEUTV4tM4uJC/B80xObYrypKIszPUyjQu1hJIYHle1DAtORl 0lNCJc9n7RsdSQSAzyvVYVx0bpDv70rjBDiVORl/S6CIXKhgHUzEVXu09cF6re3H ECGEMgI7O82LPjHQQIdchdtWWt4U2aOTH5vFPmF8IKA/WkldFlRbiFwB9nc11f/0 wJIxKv2VMjlWFWfnaJ+PsnCgnWr5u3Q= -----END CERTIFICATE-----Generated at Fri Mar 13 05:51:58 2026 by rpki-client