$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6c95262a-7b32-3ba4-a9f0-0f9ac7d75030.roa File: 6c95262a-7b32-3ba4-a9f0-0f9ac7d75030.roa (raw, json) Hash identifier: pd5xdG9NjCzw7vr2ngxtS3ZC20qdHvUDi61QCP2TTXY= Subject key identifier: 40:2F:FA:D1:85:C7:FC:EF:60:35:B2:DE:2E:75:23:5A:B7:A9:8C:91 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E00254472E30C9F27E9300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6c95262a-7b32-3ba4-a9f0-0f9ac7d75030.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:02:54:47:2e:30:c9:f2:7e:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=df9d7924-baf4-4502-b8e1-d9155613bc1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:25:1b:cf:60:b5:a6:9f:54:14:62:67:9b:40: ae:22:e1:80:d2:f3:76:83:04:d7:61:81:9f:83:4c: d6:59:6f:b7:7a:c9:d4:f6:c3:31:30:82:7d:d0:99: 93:f5:ec:88:fd:a3:d8:74:97:6b:74:32:39:fb:18: 97:99:9c:f1:c4:0c:86:89:ab:98:b1:a3:35:89:db: 03:2c:24:09:70:9a:4b:57:f8:fc:7a:90:9b:f4:06: bd:12:b3:ed:bc:b0:85:d4:d6:72:9d:70:3e:82:13: f8:9c:f3:50:8c:64:50:7e:2b:67:2b:32:d3:28:e8: a2:2d:46:dd:6f:af:82:a8:f6:ce:85:e7:c2:9f:54: 56:e6:2a:25:3a:74:ce:48:db:26:4a:f7:2b:e7:bf: 7e:7b:f1:a1:62:79:1b:ba:d2:a4:d0:21:f9:64:f4: cc:1c:fe:fc:c3:76:e8:c2:43:5e:0d:1d:b5:61:ae: d5:01:23:ee:83:32:24:11:fe:82:02:98:77:70:6f: a8:1e:e7:60:9a:53:f2:70:ef:dc:82:ce:49:44:30: 75:33:d6:a4:58:ad:a0:91:1b:e5:69:bd:d1:05:04: 0f:df:8d:16:2f:db:34:01:fa:9c:7f:47:db:fb:40: 04:f4:60:8f:e2:c7:64:f2:3f:05:91:03:fa:5f:b8: a5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2F:FA:D1:85:C7:FC:EF:60:35:B2:DE:2E:75:23:5A:B7:A9:8C:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6c95262a-7b32-3ba4-a9f0-0f9ac7d75030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ba:4a:53:23:0f:94:7f:44:fd:54:2e:75:55:b7:7a:40:66: e5:28:00:a3:a3:c5:64:99:43:b6:ee:6b:23:76:cc:b5:22:c9: f7:1b:44:66:31:c0:66:2c:8b:78:6b:0b:48:be:89:fe:03:ba: a8:c4:7f:5c:82:4d:be:ab:b4:1f:9c:e4:c5:47:82:51:e4:b7: 23:8c:4e:be:00:c5:11:3d:0e:f4:f0:e3:91:f4:e2:9e:4c:37: 6b:84:27:d1:cb:e9:eb:b5:28:bb:cc:af:7b:25:9c:7f:c3:f0: ea:28:ee:45:c2:1c:7a:38:0e:9a:be:f1:44:20:04:84:99:8f: e4:96:01:5e:de:55:66:08:48:7d:cb:b6:f5:52:d2:bc:98:af: 8b:20:60:b3:4a:ec:66:cd:6c:fd:d1:4b:8c:a5:13:16:7e:fc: 0e:ab:54:d3:d2:6c:31:65:8c:a0:06:43:0b:03:93:f6:2f:00: ab:ef:22:18:c2:5b:71:df:72:44:00:b6:bc:3e:a5:d4:f8:34: 9d:3a:d4:87:97:37:42:53:78:97:24:55:ef:9a:3e:1b:1b:90: ef:ec:73:bf:09:d9:6b:5f:f4:4f:a4:4f:3f:97:d0:05:68:b6: 8e:25:1e:dd:ca:ac:4a:2f:fe:30:26:1b:bb:c0:8e:87:e5:bc: e7:c4:e2:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4AJURy4wyfJ+kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGY5ZDc5MjQtYmFmNC00NTAyLWI4ZTEtZDkxNTU2MTNiYzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSUbz2C1pp9UFGJnm0CuIuGA0vN2gwTXYYGf g0zWWW+3esnU9sMxMIJ90JmT9eyI/aPYdJdrdDI5+xiXmZzxxAyGiauYsaM1idsD LCQJcJpLV/j8epCb9Aa9ErPtvLCF1NZynXA+ghP4nPNQjGRQfitnKzLTKOiiLUbd b6+CqPbOhefCn1RW5iolOnTOSNsmSvcr579+e/GhYnkbutKk0CH5ZPTMHP78w3bo wkNeDR21Ya7VASPugzIkEf6CAph3cG+oHudgmlPycO/cgs5JRDB1M9akWK2gkRvl ab3RBQQP340WL9s0Afqcf0fb+0AE9GCP4sdk8j8FkQP6X7iltwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAv+tGFx/zvYDWy3i51I1q3qYyRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmM5NTI2MmEtN2IzMi0z YmE0LWE5ZjAtMGY5YWM3ZDc1MDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAK6SlMjD5R/RP1ULnVVt3pAZuUoAKOjxWSZQ7buayN2zLUiyfcbRGYx wGYsi3hrC0i+if4DuqjEf1yCTb6rtB+c5MVHglHktyOMTr4AxRE9DvTw45H04p5M N2uEJ9HL6eu1KLvMr3slnH/D8Ooo7kXCHHo4Dpq+8UQgBISZj+SWAV7eVWYISH3L tvVS0ryYr4sgYLNK7GbNbP3RS4ylExZ+/A6rVNPSbDFljKAGQwsDk/YvAKvvIhjC W3HfckQAtrw+pdT4NJ061IeXN0JTeJckVe+aPhsbkO/sc78J2Wtf9E+kTz+X0AVo to4lHt3KrEov/jAmG7vAjoflvOfE4ts= -----END CERTIFICATE-----Generated at Fri Mar 13 05:53:15 2026 by rpki-client