$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b34b751-4177-3847-8988-657a9993c157.roa File: 4b34b751-4177-3847-8988-657a9993c157.roa (raw, json) Hash identifier: sMBQWfHTfsaxGTg41Q6EkPL/I+phbdPjHRe1327A4eo= Subject key identifier: 76:91:BC:6D:ED:46:27:E4:1A:68:2C:B3:B5:A9:D8:34:8E:31:94:5B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B88C1C5CEB05F0F03D00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b34b751-4177-3847-8988-657a9993c157.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b8:8c:1c:5c:eb:05:f0:f0:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=888fa2c2-7d2c-4105-8858-f6c04b0d5870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:56:a1:1d:ae:e7:1f:aa:00:9f:52:75:13:b5: 62:fb:8e:d0:fb:2b:69:c4:26:4b:34:1e:f1:1e:68: 41:d4:82:87:03:21:3a:37:1d:83:e5:dd:44:30:0e: 63:57:65:2d:b8:12:a2:6d:4a:df:5e:3e:e7:49:56: 17:72:20:c9:12:03:14:07:31:32:c6:fe:f8:89:30: e6:75:42:36:96:60:c1:a2:79:48:49:94:7a:a8:fe: 15:f6:df:4a:78:dc:8f:26:e0:9d:a4:43:23:bd:61: 98:60:3e:63:d4:cd:b5:6b:9e:f2:ab:05:89:be:34: 3b:6c:0d:99:3c:a6:57:77:cc:a3:b5:b1:ac:98:f7: 9a:9d:ad:82:33:8d:5e:8a:ba:7e:22:2c:a1:20:22: 13:da:a2:5f:e1:90:d0:77:a4:d2:72:56:c5:99:f9: 4a:c1:5a:7f:1a:7d:08:c4:4c:3e:0f:20:57:fe:fa: 7b:5e:3b:bc:7f:c1:72:b5:90:0a:20:04:63:03:32: ab:15:a0:fa:8d:71:b5:46:bf:3a:cc:76:51:42:3e: 89:47:68:4b:cf:dc:67:af:a8:cf:be:1b:59:ee:49: 69:a6:63:dc:d4:cb:48:62:10:06:3e:8e:d0:08:5b: f9:dc:e9:26:53:e1:1a:03:d6:4a:2d:1d:03:65:9e: 69:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:91:BC:6D:ED:46:27:E4:1A:68:2C:B3:B5:A9:D8:34:8E:31:94:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b34b751-4177-3847-8988-657a9993c157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:f4:2d:fd:f6:aa:9c:70:52:b2:fb:ff:75:c1:4e:a7:6a:10: 52:42:a4:06:89:c9:4f:a6:a3:28:70:1e:5d:e7:38:e7:d9:b0: 32:8a:90:e6:77:bc:36:1c:06:3f:81:99:e0:be:78:74:76:72: 50:5c:c1:13:f5:50:8d:85:03:1d:c5:2b:0d:5e:34:8a:d6:c2: 59:fe:91:10:f9:4b:12:aa:ba:06:48:a6:d5:fc:41:86:33:1e: 98:5e:81:86:3c:58:8f:26:9b:46:eb:8c:62:cd:09:2b:d3:45: 7a:39:80:60:9c:eb:70:15:90:5b:ea:00:8a:5f:10:9b:df:52: da:36:da:d6:a4:46:8f:38:fb:e1:87:90:d5:8c:3a:b2:86:ee: cc:95:a7:d2:47:ce:d3:20:80:ea:fe:f7:24:cb:a0:93:13:6a: 89:59:13:65:fd:54:1a:8f:35:1b:9a:de:7b:df:1c:b9:7a:9a: 8d:cc:c6:d2:85:7c:a8:38:71:ad:5f:74:1d:fe:4d:8a:80:f7: 8f:a3:0d:66:97:92:cc:18:20:fd:28:72:1a:97:f7:1f:fa:86: 18:9f:19:b2:b7:d6:83:ff:a8:fc:bd:7c:7b:e6:f4:38:aa:01: af:fe:25:93:f9:37:e2:0a:02:0e:bb:21:6c:c0:3e:f6:8f:32: de:a5:9d:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LiMHFzrBfDwPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ODg4ZmEyYzItN2QyYy00MTA1LTg4NTgtZjZjMDRiMGQ1ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVahHa7nH6oAn1J1E7Vi+47Q+ytpxCZLNB7x HmhB1IKHAyE6Nx2D5d1EMA5jV2UtuBKibUrfXj7nSVYXciDJEgMUBzEyxv74iTDm dUI2lmDBonlISZR6qP4V9t9KeNyPJuCdpEMjvWGYYD5j1M21a57yqwWJvjQ7bA2Z PKZXd8yjtbGsmPeana2CM41eirp+IiyhICIT2qJf4ZDQd6TSclbFmflKwVp/Gn0I xEw+DyBX/vp7Xju8f8FytZAKIARjAzKrFaD6jXG1Rr86zHZRQj6JR2hLz9xnr6jP vhtZ7klppmPc1MtIYhAGPo7QCFv53OkmU+EaA9ZKLR0DZZ5pzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaRvG3tRifkGmgss7Wp2DSOMZRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGIzNGI3NTEtNDE3Ny0z ODQ3LTg5ODgtNjU3YTk5OTNjMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMj0Lf32qpxwUrL7/3XBTqdqEFJCpAaJyU+moyhwHl3nOOfZsDKKkOZ3 vDYcBj+BmeC+eHR2clBcwRP1UI2FAx3FKw1eNIrWwln+kRD5SxKqugZIptX8QYYz HphegYY8WI8mm0brjGLNCSvTRXo5gGCc63AVkFvqAIpfEJvfUto22takRo84++GH kNWMOrKG7syVp9JHztMggOr+9yTLoJMTaolZE2X9VBqPNRua3nvfHLl6mo3MxtKF fKg4ca1fdB3+TYqA94+jDWaXkswYIP0ochqX9x/6hhifGbK31oP/qPy9fHvm9Diq Aa/+JZP5N+IKAg67IWzAPvaPMt6lnRs= -----END CERTIFICATE-----Generated at Fri Mar 13 05:53:11 2026 by rpki-client