$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8121e307-0662-3011-9f73-836d87b97545.roa File: 8121e307-0662-3011-9f73-836d87b97545.roa (raw, json) Hash identifier: jtVK/KvROdDf9COSyjtkuN6H7lIyzMrzli3637/eesc= Subject key identifier: 02:72:1F:E8:5C:88:A9:C0:C7:97:8F:E2:72:E3:06:E8:C5:67:2A:69 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0BAC76F6C084FFFED6C2E Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8121e307-0662-3011-9f73-836d87b97545.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ba:c7:6f:6c:08:4f:ff:ed:6c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=cca632fd-7cd7-49f3-ab65-1851eff6d1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:61:b1:81:87:22:30:de:1c:41:c9:75:a0:ec: 73:c3:7f:52:09:e1:bb:3f:52:7d:cf:19:3f:1e:0f: f0:a7:1f:a0:8f:df:87:7c:80:fa:9d:d8:11:45:a9: 47:04:4b:08:4f:b3:9e:26:37:38:b6:aa:ad:a1:42: 24:f0:02:b5:a1:a1:f2:ff:d9:12:48:bf:4e:e4:c5: cf:c7:4c:dc:5d:13:8d:93:cc:a2:9f:62:54:3c:36: 8a:2a:b1:ec:91:c0:d4:ae:4a:65:ba:94:9d:4e:3b: c8:3e:e4:97:4f:f1:7b:30:90:01:51:1b:d7:90:fd: fe:2a:0f:51:4f:70:ee:28:d4:68:a0:54:47:fb:71: 95:c2:39:71:5a:a1:79:b8:d0:ee:63:77:e1:bd:13: 14:e7:c4:0e:d2:9f:c2:69:36:58:6c:47:3b:ff:0a: 98:d8:e9:69:dc:80:cf:91:81:bb:cf:46:32:71:0d: c0:4e:eb:e5:66:fa:30:57:2c:38:d5:88:6f:57:fe: 15:d4:87:38:a5:69:41:f7:11:ec:98:f0:b0:a2:5d: a9:a2:cf:3b:2a:9e:72:a8:12:23:57:86:8c:20:ca: 15:eb:7a:99:d8:75:fd:e1:84:bd:bb:eb:e3:34:d1: 11:ef:ab:a9:02:7d:77:f9:97:d0:75:7d:99:44:a2: f9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:72:1F:E8:5C:88:A9:C0:C7:97:8F:E2:72:E3:06:E8:C5:67:2A:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8121e307-0662-3011-9f73-836d87b97545.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ef:4a:9b:1a:3e:82:c0:0a:e3:5d:14:d6:5d:7e:2e:be:5d: 67:26:cf:25:c0:ad:a2:d3:a1:58:c7:2d:f0:ee:85:4b:23:68: 2e:e9:c4:fc:f0:20:50:78:69:e2:fc:a5:bb:db:77:69:75:c8: b2:3c:ac:d1:70:85:3a:6c:f3:d4:c1:f4:ad:6b:db:ed:63:ef: e3:cc:7c:26:e4:aa:28:9c:bc:75:dc:a7:0f:0c:8f:2c:6e:6d: 83:fe:0e:6d:41:5b:93:0a:44:80:b3:1e:dd:13:d2:a2:55:bf: 05:13:4d:aa:74:42:6f:d5:39:37:b1:9b:91:63:b3:d0:d2:10: 2b:fd:94:75:4b:92:08:76:91:cb:65:b0:c5:8d:dc:00:09:e7: 01:09:02:bc:ef:a0:39:b2:1b:6c:5e:02:c9:6a:b1:bc:be:d8: 6c:81:d8:b2:b6:9d:4e:11:06:4e:9e:69:49:2d:1d:4b:72:f7: 91:eb:b6:a3:84:87:b0:c8:9a:c5:51:49:d2:10:2f:71:9b:80: e3:a9:4c:03:20:a2:5a:f2:a6:77:2a:72:7a:19:79:64:6a:b7: 78:06:f4:5a:06:b8:9c:94:e3:6d:14:69:0a:e7:98:bb:1c:ae: 65:b3:5b:64:84:9e:bb:04:73:e7:c7:4c:81:8f:be:5c:f5:29: 1a:2f:c3:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LrHb2wIT//tbC4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2NhNjMyZmQtN2NkNy00OWYzLWFiNjUtMTg1MWVmZjZkMWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmGxgYciMN4cQcl1oOxzw39SCeG7P1J9zxk/ Hg/wpx+gj9+HfID6ndgRRalHBEsIT7OeJjc4tqqtoUIk8AK1oaHy/9kSSL9O5MXP x0zcXRONk8yin2JUPDaKKrHskcDUrkplupSdTjvIPuSXT/F7MJABURvXkP3+Kg9R T3DuKNRooFRH+3GVwjlxWqF5uNDuY3fhvRMU58QO0p/CaTZYbEc7/wqY2Olp3IDP kYG7z0YycQ3ATuvlZvowVyw41YhvV/4V1Ic4pWlB9xHsmPCwol2pos87Kp5yqBIj V4aMIMoV63qZ2HX94YS9u+vjNNER76upAn13+ZfQdX2ZRKL5PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJyH+hciKnAx5eP4nLjBujFZyppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODEyMWUzMDctMDY2Mi0z MDExLTlmNzMtODM2ZDg3Yjk3NTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjvSpsaPoLACuNdFNZdfi6+XWcmzyXAraLToVjHLfDuhUsjaC7pxPzw IFB4aeL8pbvbd2l1yLI8rNFwhTps89TB9K1r2+1j7+PMfCbkqiicvHXcpw8Mjyxu bYP+Dm1BW5MKRICzHt0T0qJVvwUTTap0Qm/VOTexm5Fjs9DSECv9lHVLkgh2kctl sMWN3AAJ5wEJArzvoDmyG2xeAslqsby+2GyB2LK2nU4RBk6eaUktHUty95HrtqOE h7DImsVRSdIQL3GbgOOpTAMgolrypncqcnoZeWRqt3gG9FoGuJyU420UaQrnmLsc rmWzW2SEnrsEc+fHTIGPvlz1KRovw3w= -----END CERTIFICATE-----Generated at Fri Mar 13 05:52:01 2026 by rpki-client