$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/767325d8-0651-3a4a-9c01-3c9451c12937.roa File: 767325d8-0651-3a4a-9c01-3c9451c12937.roa (raw, json) Hash identifier: a2i6KgBvQtqG5EURPXCo6nYTHpkCIb/QyjNnKxATNEs= Subject key identifier: 9E:71:3C:24:A8:01:15:04:88:B5:91:38:33:8B:21:3D:0A:27:D9:87 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0007F5933A3F0F5A4C9E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/767325d8-0651-3a4a-9c01-3c9451c12937.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:00:7f:59:33:a3:f0:f5:a4:c9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1b41d24f-c6f5-43ea-9aa9-4cc11fcb9c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:65:00:94:db:12:a7:1c:a0:87:0c:10:9e:09: f5:95:ac:72:84:1f:86:d4:60:a6:0c:b8:eb:a0:19: e1:10:21:d5:d1:8e:9b:fb:4e:fb:af:08:8a:85:71: 6f:12:19:a1:f3:59:7e:79:a9:73:53:49:08:21:e2: 46:30:99:64:98:57:f0:2f:3c:ad:5c:63:f5:14:b9: 45:60:f5:d7:67:3f:c2:65:8f:7d:8a:4a:97:eb:81: c4:00:2d:35:70:74:db:e0:3c:87:87:c3:6f:d9:c8: f9:f0:b8:38:2d:16:e1:f4:76:dc:72:25:e4:39:0e: bb:7e:a3:cc:ee:b3:3f:27:d2:08:2e:e1:e9:3f:a7: 42:cf:b3:4f:08:cc:0b:ac:54:0f:5e:53:3c:47:d5: 1a:f4:6c:68:1a:4a:4c:9c:f7:c1:e9:21:ac:0c:60: 30:17:b4:20:8b:65:17:e6:6e:69:00:53:22:74:3f: ff:ec:c2:0d:72:b9:b6:78:73:7d:95:a1:23:cf:c0: a5:40:4a:3b:3d:86:ac:98:a6:fe:ad:1b:4e:6a:32: cd:2e:14:8c:ca:30:98:c9:a6:47:ed:c6:75:fb:1a: b8:c5:06:8b:b8:72:6f:45:5c:41:01:1b:1f:8c:af: c0:91:0d:55:15:2d:ca:f3:3b:2c:cd:2a:c2:8f:3c: b0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:71:3C:24:A8:01:15:04:88:B5:91:38:33:8B:21:3D:0A:27:D9:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/767325d8-0651-3a4a-9c01-3c9451c12937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:26:69:92:79:8c:92:03:6a:b6:98:9f:2a:5e:50:e8:b4:3c: c5:88:21:ff:25:db:07:7b:6b:c1:da:5a:f1:f9:e4:d9:e7:f5: e7:c3:e5:f4:a5:1e:ae:1b:60:6f:5b:fc:19:b6:24:1d:b6:97: 75:96:ab:c1:19:4c:6d:cc:82:38:b2:7b:08:ef:d1:2e:48:cb: dc:62:a2:e1:5e:d6:70:3e:9d:49:4f:9d:27:8c:10:7c:e0:47: e6:38:46:f8:34:f9:ad:51:2c:ea:03:64:49:a0:51:ec:64:58: 20:8a:46:7f:f2:3a:19:a2:d1:e0:6e:1a:5a:2e:09:4b:5c:bc: 66:70:eb:74:a9:06:b5:c8:c9:9a:fb:df:f3:c0:27:ec:04:8d: c3:20:0a:79:e5:37:e7:74:cc:92:a3:c1:95:81:02:73:8c:90: 64:21:5c:e6:11:ec:20:83:98:87:b9:06:a1:20:dc:aa:8f:cb: 20:85:73:91:17:7e:cb:2f:46:34:91:d4:22:f2:82:eb:2b:6c: a2:6f:e6:90:19:70:05:39:51:53:f9:85:b6:01:91:1b:a2:e4: fb:66:0c:5f:c3:1e:ab:83:54:fd:58:16:64:64:b5:3a:8e:28: 1d:47:f0:92:7c:a6:9c:a2:df:8e:4b:bf:1f:c3:9c:2f:16:2f: 84:97:3b:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4AB/WTOj8PWkyeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MWI0MWQyNGYtYzZmNS00M2VhLTlhYTktNGNjMTFmY2I5Yzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGUAlNsSpxyghwwQngn1laxyhB+G1GCmDLjr oBnhECHV0Y6b+077rwiKhXFvEhmh81l+ealzU0kIIeJGMJlkmFfwLzytXGP1FLlF YPXXZz/CZY99ikqX64HEAC01cHTb4DyHh8Nv2cj58Lg4LRbh9HbcciXkOQ67fqPM 7rM/J9IILuHpP6dCz7NPCMwLrFQPXlM8R9Ua9GxoGkpMnPfB6SGsDGAwF7Qgi2UX 5m5pAFMidD//7MINcrm2eHN9laEjz8ClQEo7PYasmKb+rRtOajLNLhSMyjCYyaZH 7cZ1+xq4xQaLuHJvRVxBARsfjK/AkQ1VFS3K8zsszSrCjzywawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5xPCSoARUEiLWRODOLIT0KJ9mHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzY3MzI1ZDgtMDY1MS0z YTRhLTljMDEtM2M5NDUxYzEyOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPM9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwmaZJ5jJIDaraYnypeUOi0PMWIIf8l2wd7a8HaWvH55Nnn9efD5fSl Hq4bYG9b/Bm2JB22l3WWq8EZTG3Mgjiyewjv0S5Iy9xiouFe1nA+nUlPnSeMEHzg R+Y4Rvg0+a1RLOoDZEmgUexkWCCKRn/yOhmi0eBuGlouCUtcvGZw63SpBrXIyZr7 3/PAJ+wEjcMgCnnlN+d0zJKjwZWBAnOMkGQhXOYR7CCDmIe5BqEg3KqPyyCFc5EX fssvRjSR1CLygusrbKJv5pAZcAU5UVP5hbYBkRui5PtmDF/DHquDVP1YFmRktTqO KB1H8JJ8ppyi345Lvx/DnC8WL4SXO/M= -----END CERTIFICATE-----Generated at Fri Mar 13 05:53:04 2026 by rpki-client