$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3d73f02d-20a5-3a22-907d-af2f013eb6ad.roa File: 3d73f02d-20a5-3a22-907d-af2f013eb6ad.roa (raw, json) Hash identifier: QGzwcdwxoRhXevQPF0CVhgb4aDn9tTG4qyEAX+4M1ko= Subject key identifier: 22:43:4B:52:55:A7:53:D3:F4:7F:95:B5:C5:47:9C:6A:39:5E:C5:98 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E001734F3F4686DE64BF40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3d73f02d-20a5-3a22-907d-af2f013eb6ad.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:01:73:4f:3f:46:86:de:64:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0a44bebe-97ce-4273-8225-28dc6e2b2b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:b3:7e:22:c7:ea:be:f1:e2:c5:dd:10:bc: 90:19:6f:08:4a:ed:65:db:49:f2:96:6c:26:3c:cc: 13:a3:75:51:b1:d2:d1:1c:45:be:69:31:13:53:f5: 15:bf:d9:c0:3c:5a:45:a2:1b:fa:93:a6:28:14:47: 27:7b:17:83:f9:9f:17:1e:0b:02:2e:03:f9:88:19: df:32:94:1b:41:6e:65:92:c8:5d:0f:56:7a:54:6b: b5:da:27:0a:4d:4a:40:02:c1:8a:dd:0b:75:69:a0: 16:d6:91:27:bc:d5:ce:7d:c1:cb:1f:1b:3b:28:62: 2b:67:bb:bd:11:50:d1:30:1e:25:69:4c:7f:8b:0d: 7f:e6:f9:ea:70:a3:11:3c:06:3f:99:27:e1:93:1d: 65:26:a6:37:41:55:59:2e:1d:a3:8d:77:aa:1b:06: c6:50:01:8e:c1:c6:01:70:b8:bc:6e:41:36:ca:26: cd:7e:06:bc:4b:9d:08:8c:e0:2c:8f:31:63:a9:38: 4b:5d:9a:62:45:5e:c6:64:d5:e4:e7:1b:83:e8:b5: a1:e9:39:73:95:4e:b4:ff:d1:4a:22:7b:3a:98:db: fe:fa:96:80:8b:46:a2:df:08:86:d0:ae:1b:f4:2b: f9:7c:62:fb:fc:c4:fe:10:56:71:ab:0c:37:51:b1: d6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:43:4B:52:55:A7:53:D3:F4:7F:95:B5:C5:47:9C:6A:39:5E:C5:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3d73f02d-20a5-3a22-907d-af2f013eb6ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ce:c5:3c:41:e7:d2:e3:a6:05:e5:d8:8e:fc:ad:15:27:dd: 5a:43:35:34:9c:46:5e:64:ce:40:1e:4d:d7:e5:66:da:29:70: 4c:5b:d0:61:09:46:6c:dd:5c:87:30:c7:64:de:b1:c9:1c:66: 2c:12:6b:d1:f7:41:25:45:9f:9b:13:b2:71:be:04:a0:a2:16: 62:87:59:69:3d:64:67:89:cf:39:54:2c:28:8d:f2:1d:47:92: 5e:6b:ef:d1:fd:57:b5:d7:f2:a6:7b:98:dc:7a:2c:42:d2:90: ba:46:8b:6f:a0:a8:94:a0:9e:c7:07:62:d2:f2:91:8b:36:ec: 5c:6b:b0:83:fa:6b:0f:e0:78:0d:f6:12:2f:5f:3e:a9:40:9c: d2:52:ee:03:b1:70:28:dc:62:cc:ca:a1:75:a2:75:ee:25:65: 26:5f:0e:ba:e4:53:92:5b:84:80:cc:a7:f8:23:2c:37:a8:e2: 51:b3:0c:ea:0a:2e:fb:41:06:34:c9:b0:bd:c9:47:61:2c:0f: ff:d5:af:80:bf:43:07:12:0f:48:5d:d2:57:e8:dd:c9:e5:d8: b1:71:96:b5:05:5d:1c:f8:1d:24:f1:76:31:6e:ab:08:a1:b2: 81:a8:8a:dd:6d:a0:14:a4:6e:6c:94:9a:fc:c0:bd:76:e9:4f: 17:14:0f:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4AFzTz9Ght5kv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MGE0NGJlYmUtOTdjZS00MjczLTgyMjUtMjhkYzZlMmIyYjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFmzfiLH6r7x4sXdELyQGW8ISu1l20nylmwm PMwTo3VRsdLRHEW+aTETU/UVv9nAPFpFohv6k6YoFEcnexeD+Z8XHgsCLgP5iBnf MpQbQW5lkshdD1Z6VGu12icKTUpAAsGK3Qt1aaAW1pEnvNXOfcHLHxs7KGIrZ7u9 EVDRMB4laUx/iw1/5vnqcKMRPAY/mSfhkx1lJqY3QVVZLh2jjXeqGwbGUAGOwcYB cLi8bkE2yibNfga8S50IjOAsjzFjqThLXZpiRV7GZNXk5xuD6LWh6TlzlU60/9FK Ins6mNv++paAi0ai3wiG0K4b9Cv5fGL7/MT+EFZxqww3UbHWPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJDS1JVp1PT9H+VtcVHnGo5XsWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2Q3M2YwMmQtMjBhNS0z YTIyLTkwN2QtYWYyZjAxM2ViNmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLOxTxB59LjpgXl2I78rRUn3VpDNTScRl5kzkAeTdflZtopcExb0GEJ RmzdXIcwx2TesckcZiwSa9H3QSVFn5sTsnG+BKCiFmKHWWk9ZGeJzzlULCiN8h1H kl5r79H9V7XX8qZ7mNx6LELSkLpGi2+gqJSgnscHYtLykYs27FxrsIP6aw/geA32 Ei9fPqlAnNJS7gOxcCjcYszKoXWide4lZSZfDrrkU5JbhIDMp/gjLDeo4lGzDOoK LvtBBjTJsL3JR2EsD//Vr4C/QwcSD0hd0lfo3cnl2LFxlrUFXRz4HSTxdjFuqwih soGoit1toBSkbmyUmvzAvXbpTxcUDxE= -----END CERTIFICATE-----Generated at Fri Mar 13 05:52:28 2026 by rpki-client