$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8233cdc7-f67f-348a-b8e0-676094f6c24b.roa File: 8233cdc7-f67f-348a-b8e0-676094f6c24b.roa (raw, json) Hash identifier: jARdfj+DHNfjaggpEmM8zrp4+zW7VBbvKCso+v7oOTM= Subject key identifier: 0A:C9:66:73:FB:2B:66:E7:05:A3:3E:DE:20:B5:C4:B2:BD:46:73:07 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E00193DC7BCD75D18EC800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8233cdc7-f67f-348a-b8e0-676094f6c24b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:01:93:dc:7b:cd:75:d1:8e:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f1bae5b4-db79-49a2-be3b-390dc4e2f0b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b8:8d:7f:5b:cd:f8:75:87:47:bd:ce:e0:30: 1b:78:3b:a1:c4:c0:28:d7:f7:b0:ae:1f:e3:8f:8e: 73:d7:e5:3f:87:6b:f5:09:dc:1b:54:50:a5:3b:c2: 56:2b:63:b5:72:ce:f1:0b:09:b3:a4:de:43:2a:a6: 8b:cd:c6:fc:73:de:a7:04:99:fe:d8:5a:ae:a3:f2: 15:be:36:f4:7f:05:38:1a:8a:d6:c5:f5:88:05:d0: 08:a6:ba:47:72:d4:65:19:c3:51:c4:41:ff:64:53: 1f:03:76:dc:39:1b:27:dd:67:d7:89:79:17:a3:c5: e7:55:7a:f6:a9:3d:5a:1b:ef:5e:e2:45:46:55:0e: f7:b5:92:66:53:69:11:2b:0c:a4:be:f6:06:61:ba: 09:9a:9b:b3:af:69:7f:98:ac:8d:d9:2a:88:59:d1: 2a:1d:50:34:9f:1e:7c:e4:f1:b6:b3:ab:8f:6f:fa: af:bc:c3:a8:ba:9b:f6:04:c4:c3:88:28:4d:24:4c: e7:84:69:58:5a:09:ba:5e:49:e9:f4:87:5a:70:b0: 82:0c:7c:e5:76:e8:a1:0a:01:4a:4c:a4:4f:39:d7: 07:09:fc:28:fb:2f:ea:ad:b3:92:86:e4:44:c2:e1: 12:63:29:b0:f8:bb:02:af:d7:51:e4:1b:38:17:6c: a8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C9:66:73:FB:2B:66:E7:05:A3:3E:DE:20:B5:C4:B2:BD:46:73:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8233cdc7-f67f-348a-b8e0-676094f6c24b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8e:69:4f:1a:ea:58:39:d5:0a:cb:ae:c0:b4:5b:68:fc:b6: ef:6b:3b:ad:9b:5d:37:8b:74:51:58:fb:2a:f5:54:4e:e3:f3: 6e:5e:9b:7c:29:04:83:a8:7e:a5:e1:c2:26:83:0e:5a:02:b4: db:c4:67:26:8b:64:50:20:5c:ff:74:95:3b:98:51:e2:68:fd: 61:69:11:6f:9c:9c:f1:59:3f:89:b2:b5:af:92:fa:28:10:5c: ae:90:ee:d2:44:5d:7a:50:fb:50:d5:23:90:21:99:99:f8:8c: 55:3d:46:64:ac:95:37:91:56:b0:f4:d2:f5:54:74:9c:f1:6f: 89:a5:73:1a:6a:d4:34:33:91:ca:84:37:02:ff:77:c5:7e:5c: a6:e0:c0:30:5f:f8:da:aa:ea:b5:f9:a1:0f:24:19:10:97:9f: 87:54:95:c7:2b:be:47:82:08:b6:8c:17:19:d1:b6:92:8c:e4: 76:a3:c3:9e:44:60:27:8d:f9:6b:42:a8:ec:27:a8:d7:c7:82: 7b:2b:43:42:87:0f:45:f3:fd:49:dd:f9:af:8e:41:a1:09:19: 1c:31:37:01:9d:c4:e3:7c:c6:5e:94:b5:f4:56:97:4f:83:9b: b2:32:ad:4e:26:8a:6c:0d:9c:01:38:ff:ec:9b:a2:25:a5:5c: 8a:ee:28:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4AGT3HvNddGOyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjFiYWU1YjQtZGI3OS00OWEyLWJlM2ItMzkwZGM0ZTJmMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47iNf1vN+HWHR73O4DAbeDuhxMAo1/ewrh/j j45z1+U/h2v1CdwbVFClO8JWK2O1cs7xCwmzpN5DKqaLzcb8c96nBJn+2Fquo/IV vjb0fwU4GorWxfWIBdAIprpHctRlGcNRxEH/ZFMfA3bcORsn3WfXiXkXo8XnVXr2 qT1aG+9e4kVGVQ73tZJmU2kRKwykvvYGYboJmpuzr2l/mKyN2SqIWdEqHVA0nx58 5PG2s6uPb/qvvMOoupv2BMTDiChNJEznhGlYWgm6Xknp9IdacLCCDHzlduihCgFK TKRPOdcHCfwo+y/qrbOShuREwuESYymw+LsCr9dR5Bs4F2yoNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArJZnP7K2bnBaM+3iC1xLK9RnMHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODIzM2NkYzctZjY3Zi0z NDhhLWI4ZTAtNjc2MDk0ZjZjMjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqOaU8a6lg51QrLrsC0W2j8tu9rO62bXTeLdFFY+yr1VE7j825em3wp BIOofqXhwiaDDloCtNvEZyaLZFAgXP90lTuYUeJo/WFpEW+cnPFZP4myta+S+igQ XK6Q7tJEXXpQ+1DVI5AhmZn4jFU9RmSslTeRVrD00vVUdJzxb4mlcxpq1DQzkcqE NwL/d8V+XKbgwDBf+Nqq6rX5oQ8kGRCXn4dUlccrvkeCCLaMFxnRtpKM5Hajw55E YCeN+WtCqOwnqNfHgnsrQ0KHD0Xz/Und+a+OQaEJGRwxNwGdxON8xl6UtfRWl0+D m7IyrU4mimwNnAE4/+yboiWlXIruKJs= -----END CERTIFICATE-----Generated at Fri Mar 13 05:53:14 2026 by rpki-client