$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/438239bd-ffa5-3739-be76-61c3fe8b13b8.roa File: 438239bd-ffa5-3739-be76-61c3fe8b13b8.roa (raw, json) Hash identifier: X8NYxlhIpdpQmVtt2LZh012FgHqI1bu0kIQqZq+O0WU= Subject key identifier: 54:18:BD:8D:3B:8B:A3:54:2A:43:6F:3C:8C:88:32:33:78:9F:5A:3E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B5CAD038CA5D2DEFC980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/438239bd-ffa5-3739-be76-61c3fe8b13b8.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b5:ca:d0:38:ca:5d:2d:ef:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f863a1be-fa7a-44df-ba96-761792d097c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:db:db:01:cf:7f:b2:74:55:50:11:e4:1f:81: 8c:db:c9:e9:f7:50:42:ca:e7:d1:da:96:16:92:01: 74:55:1b:cd:93:f3:15:15:f0:27:b5:b0:16:dd:7c: a6:38:8f:ca:95:8c:82:0d:01:cd:08:b8:3b:51:9a: 52:a8:cd:d5:2c:36:80:9c:db:5a:74:71:b4:c7:a8: de:6e:4f:3e:d8:81:bc:f2:62:cf:00:30:ce:ba:f2: 1a:c6:7b:d0:b9:ae:0d:15:a4:49:60:c1:9b:4e:a2: c0:8d:ab:64:ac:d4:ca:3b:cc:cd:47:88:39:9c:d2: c6:17:5a:e4:b0:40:81:a5:d7:f2:81:c6:69:03:81: f7:9b:89:4f:52:eb:0e:88:5d:c9:50:91:e2:1e:18: 21:35:e2:70:67:e1:7a:28:d7:ad:e3:25:9f:6b:e3: 0c:ab:f3:71:a9:3b:32:6d:44:1a:ab:b7:e4:b3:65: 20:18:6b:23:65:b2:1e:af:1c:6c:b3:a6:cd:33:f9: 27:dc:17:7c:55:c8:ec:92:e8:fe:c5:73:a1:b2:e7: 17:58:08:6e:e1:9d:1a:7b:7f:48:0d:4b:bb:92:c0: 26:0d:a3:c2:5d:92:6e:76:e3:5f:fd:36:3f:f8:45: 82:e7:54:99:e0:8a:40:7a:fb:c4:af:bc:a8:a5:5a: 27:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:18:BD:8D:3B:8B:A3:54:2A:43:6F:3C:8C:88:32:33:78:9F:5A:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/438239bd-ffa5-3739-be76-61c3fe8b13b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:de:b5:e9:77:d2:8f:ec:d7:36:58:cf:6c:3f:b4:87:4a:75: d5:d2:7d:a6:72:46:e9:4e:36:cc:c2:ac:59:8c:cc:9b:8d:08: 1f:26:4d:b2:7a:d9:cf:ba:e1:88:f4:af:19:16:15:3f:a8:77: e2:a0:6b:9a:29:da:54:23:39:c7:73:16:bb:dc:ac:a5:d4:8b: 3d:ad:99:39:4e:5e:8c:a0:49:a7:89:17:a5:98:49:dd:b8:38: ea:07:79:dc:2f:9b:79:c4:a5:6d:dc:b7:fe:f5:54:21:39:9e: 01:ba:ae:2e:e8:82:6a:36:1d:9b:98:49:41:d0:d2:fd:a4:20: 75:2f:e6:9e:c2:3f:da:0d:bd:a6:87:d6:3f:64:03:69:24:d3: ed:31:af:36:df:f4:34:fb:51:4d:51:76:bd:fe:e3:7e:d1:41: be:ae:a3:1e:8d:38:63:4c:7a:6e:7d:92:66:f3:d8:77:a6:27: 14:be:d9:32:b9:74:5c:5d:da:64:d7:67:d4:37:4e:bd:52:90: 16:b7:28:3f:26:0c:3b:75:96:91:ee:e4:cb:2d:95:2a:72:a9: 7f:15:ad:11:ec:96:78:05:ac:59:70:dd:03:d7:b5:62:d5:74: 6a:3d:94:bb:6f:b2:a4:0d:84:8d:47:fa:4b:35:12:e0:e5:41: 06:70:d4:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LXK0DjKXS3vyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Zjg2M2ExYmUtZmE3YS00NGRmLWJhOTYtNzYxNzkyZDA5N2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9vbAc9/snRVUBHkH4GM28np91BCyufR2pYW kgF0VRvNk/MVFfAntbAW3XymOI/KlYyCDQHNCLg7UZpSqM3VLDaAnNtadHG0x6je bk8+2IG88mLPADDOuvIaxnvQua4NFaRJYMGbTqLAjatkrNTKO8zNR4g5nNLGF1rk sECBpdfygcZpA4H3m4lPUusOiF3JUJHiHhghNeJwZ+F6KNet4yWfa+MMq/NxqTsy bUQaq7fks2UgGGsjZbIerxxss6bNM/kn3Bd8Vcjskuj+xXOhsucXWAhu4Z0ae39I DUu7ksAmDaPCXZJuduNf/TY/+EWC51SZ4IpAevvEr7yopVon1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQYvY07i6NUKkNvPIyIMjN4n1o+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDM4MjM5YmQtZmZhNS0z NzM5LWJlNzYtNjFjM2ZlOGIxM2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbetel30o/s1zZYz2w/tIdKddXSfaZyRulONszCrFmMzJuNCB8mTbJ6 2c+64Yj0rxkWFT+od+Kga5op2lQjOcdzFrvcrKXUiz2tmTlOXoygSaeJF6WYSd24 OOoHedwvm3nEpW3ct/71VCE5ngG6ri7ogmo2HZuYSUHQ0v2kIHUv5p7CP9oNvaaH 1j9kA2kk0+0xrzbf9DT7UU1Rdr3+437RQb6uox6NOGNMem59kmbz2HemJxS+2TK5 dFxd2mTXZ9Q3Tr1SkBa3KD8mDDt1lpHu5MstlSpyqX8VrRHslngFrFlw3QPXtWLV dGo9lLtvsqQNhI1H+ks1EuDlQQZw1B4= -----END CERTIFICATE-----Generated at Fri Mar 13 05:52:26 2026 by rpki-client