$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/571c7d43-5b10-3329-aada-d50fb7e35814.roa File: 571c7d43-5b10-3329-aada-d50fb7e35814.roa (raw, json) Hash identifier: PrFfthm0+5Go7ebh+kD4Nab1F3jJ7zGgL4avOVdeW7g= Subject key identifier: A9:34:CE:42:C9:2F:F8:C9:74:74:28:A5:41:C1:47:08:02:75:D0:33 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E080ECB936EF35586FE280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/571c7d43-5b10-3329-aada-d50fb7e35814.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 75.106.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:80:ec:b9:36:ef:35:58:6f:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=9af52a14-887b-4ef6-90dc-8d7ebdba7048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1d:37:7f:95:73:ba:d0:78:e8:e3:7d:d3:2b: 61:c6:a7:ca:f4:ba:de:57:da:8c:31:4a:02:1e:a7: 6b:4b:f2:a9:ac:49:c7:1c:4c:52:f5:64:15:c4:f5: 7a:6e:62:99:59:e8:6f:6a:27:fb:14:05:bd:4e:35: 8b:11:52:dc:07:58:fa:96:35:c7:db:b7:c2:77:8d: e9:8e:87:3d:5f:6f:0f:ab:90:42:04:6b:3e:e9:d4: 68:7d:cc:1b:9a:13:70:1b:30:66:f3:eb:12:3c:e9: 43:45:63:66:3d:db:da:e7:80:c3:26:e8:88:12:77: fe:5e:7a:2a:90:f5:d9:20:25:14:a6:b8:c8:c0:7a: e6:e0:03:7b:f6:e4:97:91:ca:ae:b7:a1:af:27:6f: 77:1c:e2:60:a4:3c:0d:45:84:89:c3:71:eb:cc:00: 1b:3e:21:e9:d5:ba:f1:7d:ff:2f:7b:63:39:e6:4b: 83:31:a6:3e:c2:a5:6c:c2:13:f2:dd:4b:48:a3:87: 66:bd:d6:7b:7b:ac:59:da:03:13:4a:a4:ff:a6:a0: c6:dc:e7:86:fc:8b:7a:39:9f:16:e0:2e:c8:71:75: 6a:9d:80:df:38:4a:c2:08:51:3f:6e:6a:df:13:b7: 43:9e:f5:b9:60:66:33:9d:f1:e8:a3:a1:f5:31:65: e0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:34:CE:42:C9:2F:F8:C9:74:74:28:A5:41:C1:47:08:02:75:D0:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/571c7d43-5b10-3329-aada-d50fb7e35814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.106.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:30:16:59:cf:42:6e:bd:ca:b6:16:14:db:db:8b:0e:70:0e: 1e:a9:2f:de:2b:d1:aa:83:27:93:25:18:01:28:ae:11:ed:2d: f8:83:e8:b0:15:40:a1:71:0a:b9:fb:99:32:6d:e9:a7:3c:81: 26:4f:36:22:c8:4b:ce:5f:35:d7:7a:f5:20:6f:1e:bd:46:68: 6b:d3:41:08:7b:51:a1:a6:69:97:e3:c8:64:7c:7c:49:d6:62: 5b:14:45:e0:11:a3:c7:5c:25:20:ee:b0:aa:f6:89:f9:69:5a: 30:69:a7:78:59:e4:bb:ec:92:67:68:12:0e:1b:f5:b4:6f:e2: 50:68:c8:5e:2c:4a:9c:c9:6f:08:f0:5a:59:b7:cf:a0:9f:88: 39:93:d3:0f:9a:e8:85:d3:61:7e:34:f5:63:9d:db:5c:16:03: d4:89:6c:67:ff:64:11:26:0a:eb:be:8d:d1:79:b3:83:47:3c: e6:c4:10:6f:b1:d2:25:f2:d1:7f:ae:e4:bf:5b:a4:20:fe:55: c5:3b:5f:d8:ac:7b:33:78:b8:c4:26:b5:53:0b:24:de:1c:81: 05:bc:25:6a:de:c1:35:c6:76:aa:83:bb:57:70:a9:0f:8c:b5: c1:62:f1:d4:6c:59:db:73:e8:40:82:0b:2f:81:f4:f0:c9:4c: a5:01:a7:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4IDsuTbvNVhv4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OWFmNTJhMTQtODg3Yi00ZWY2LTkwZGMtOGQ3ZWJkYmE3MDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR03f5VzutB46ON90ythxqfK9LreV9qMMUoC HqdrS/KprEnHHExS9WQVxPV6bmKZWehvaif7FAW9TjWLEVLcB1j6ljXH27fCd43p joc9X28Pq5BCBGs+6dRofcwbmhNwGzBm8+sSPOlDRWNmPdva54DDJuiIEnf+Xnoq kPXZICUUprjIwHrm4AN79uSXkcqut6GvJ293HOJgpDwNRYSJw3HrzAAbPiHp1brx ff8ve2M55kuDMaY+wqVswhPy3UtIo4dmvdZ7e6xZ2gMTSqT/pqDG3OeG/It6OZ8W 4C7IcXVqnYDfOErCCFE/bmrfE7dDnvW5YGYznfHoo6H1MWXg0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKk0zkLJL/jJdHQopUHBRwgCddAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTcxYzdkNDMtNWIxMC0z MzI5LWFhZGEtZDUwZmI3ZTM1ODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2qsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANIwFlnPQm69yrYWFNvbiw5wDh6pL94r0aqDJ5MlGAEorhHtLfiD6LAV QKFxCrn7mTJt6ac8gSZPNiLIS85fNdd69SBvHr1GaGvTQQh7UaGmaZfjyGR8fEnW YlsUReARo8dcJSDusKr2iflpWjBpp3hZ5LvskmdoEg4b9bRv4lBoyF4sSpzJbwjw Wlm3z6CfiDmT0w+a6IXTYX409WOd21wWA9SJbGf/ZBEmCuu+jdF5s4NHPObEEG+x 0iXy0X+u5L9bpCD+VcU7X9isezN4uMQmtVMLJN4cgQW8JWrewTXGdqqDu1dwqQ+M tcFi8dRsWdtz6ECCCy+B9PDJTKUBp8w= -----END CERTIFICATE-----Generated at Fri Mar 13 05:54:34 2026 by rpki-client