$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa File: 5a906593-7518-3717-93a1-36f415626e0f.roa (raw, json) Hash identifier: Wa5T1LUekm2yWX2gYe8sBjKugGWdvIaK2WFedLScH9o= Subject key identifier: 61:BC:D4:08:EC:DE:EB:13:94:12:5F:39:C4:40:D2:27:48:E9:FC:D2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0B9FA0145F24CAF704E80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:b9:fa:01:45:f2:4c:af:70:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=24f25ac2-bb58-44f7-aee4-11adb5549bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fd:85:ce:ec:41:eb:61:31:03:98:03:56:9e: bf:c1:d1:79:a0:a6:5c:28:9d:92:e6:c1:df:23:1a: 8b:1e:8b:3b:dd:6e:17:0d:8a:e2:42:4d:1a:81:e3: fb:61:a2:39:a0:94:58:1a:a1:dd:62:c7:00:07:e1: 62:3f:c5:3c:8b:26:24:4f:1b:c5:42:60:d2:76:17: bd:ce:0c:bb:d2:4b:f8:81:68:c4:8d:87:21:f4:5d: c1:5e:35:f3:db:fa:c2:69:61:aa:a6:e6:2f:5a:ae: f6:51:c5:50:f1:a4:25:59:fc:9f:af:06:ef:60:46: 10:95:05:6f:5d:4f:03:40:46:f3:9b:a6:2e:e0:f1: 86:8e:a1:ba:c3:82:60:4e:4c:91:14:8b:50:9c:93: f4:d0:f8:2b:e4:04:2c:2e:b6:ea:39:40:4f:4f:b7: bd:79:8d:dc:28:95:43:4a:52:a2:bb:24:5e:18:fa: e1:cd:94:27:84:3a:da:1c:41:8a:f5:79:b4:c0:fc: 50:35:40:91:03:6c:07:07:20:ca:23:d8:88:a6:3a: b4:be:ab:76:30:42:31:d2:be:37:a9:15:40:57:6a: 5f:86:f5:a3:e3:67:ff:64:7f:8c:71:ea:bf:74:1d: 42:fe:ae:e4:7a:a8:7c:28:74:9f:8f:59:d4:29:7a: b7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BC:D4:08:EC:DE:EB:13:94:12:5F:39:C4:40:D2:27:48:E9:FC:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:bc:2b:58:f3:b1:5a:4d:bc:b4:ff:b8:ec:57:59:46:6a:84: aa:06:61:5b:a4:8e:34:d3:b2:d8:32:7a:5f:d2:9b:6c:0f:9d: 25:3e:99:d3:c3:6d:40:80:c3:f0:30:21:d6:7e:ed:3a:45:5c: cc:c8:8c:29:4b:01:bb:04:11:75:26:17:65:14:7a:38:a1:32: 4b:3d:75:ba:4e:74:e7:95:39:07:8c:26:b6:89:af:ee:b2:30: 5e:66:fc:31:61:35:86:36:a8:f1:54:24:be:ac:4f:47:18:5d: 65:a5:2e:79:ac:8d:63:70:c0:d6:b3:07:b2:d1:c9:e8:61:1c: 1a:8e:b1:0a:d0:57:8b:39:bb:7e:b1:f0:36:71:08:95:d2:ba: bd:58:ce:f0:1c:5c:61:bc:b8:c1:66:8f:40:f1:d8:b3:7d:ac: f9:cc:9a:5d:ae:bb:37:37:64:d2:2e:83:f3:45:30:30:e6:6d: f7:81:72:c4:e0:e8:ba:83:a1:92:5b:a9:31:5c:e6:2b:c5:60: 65:6c:09:34:51:72:7e:ac:b6:f1:45:b1:69:bf:02:2c:54:df: 01:56:72:0c:5f:ae:ed:5f:23:78:95:35:95:94:32:8f:f2:b0: ab:bf:9e:14:a9:e0:34:cd:b2:62:6a:8c:0a:13:b4:6c:aa:40: ca:fd:78:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Ln6AUXyTK9wToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjRmMjVhYzItYmI1OC00NGY3LWFlZTQtMTFhZGI1NTQ5YmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/2FzuxB62ExA5gDVp6/wdF5oKZcKJ2S5sHf IxqLHos73W4XDYriQk0ageP7YaI5oJRYGqHdYscAB+FiP8U8iyYkTxvFQmDSdhe9 zgy70kv4gWjEjYch9F3BXjXz2/rCaWGqpuYvWq72UcVQ8aQlWfyfrwbvYEYQlQVv XU8DQEbzm6Yu4PGGjqG6w4JgTkyRFItQnJP00Pgr5AQsLrbqOUBPT7e9eY3cKJVD SlKiuyReGPrhzZQnhDraHEGK9Xm0wPxQNUCRA2wHByDKI9iIpjq0vqt2MEIx0r43 qRVAV2pfhvWj42f/ZH+Mceq/dB1C/q7keqh8KHSfj1nUKXq3oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGG81Ajs3usTlBJfOcRA0idI6fzSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWE5MDY1OTMtNzUxOC0z NzE3LTkzYTEtMzZmNDE1NjI2ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC8K1jzsVpNvLT/uOxXWUZqhKoGYVukjjTTstgyel/Sm2wPnSU+mdPD bUCAw/AwIdZ+7TpFXMzIjClLAbsEEXUmF2UUejihMks9dbpOdOeVOQeMJraJr+6y MF5m/DFhNYY2qPFUJL6sT0cYXWWlLnmsjWNwwNazB7LRyehhHBqOsQrQV4s5u36x 8DZxCJXSur1YzvAcXGG8uMFmj0Dx2LN9rPnMml2uuzc3ZNIug/NFMDDmbfeBcsTg 6LqDoZJbqTFc5ivFYGVsCTRRcn6stvFFsWm/AixU3wFWcgxfru1fI3iVNZWUMo/y sKu/nhSp4DTNsmJqjAoTtGyqQMr9eP4= -----END CERTIFICATE-----Generated at Fri Mar 13 05:53:48 2026 by rpki-client