$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3c23918-8586-3edb-afa3-ddf0deb64005.roa File: a3c23918-8586-3edb-afa3-ddf0deb64005.roa (raw, json) Hash identifier: XvFQ8/wM60q4XWOhLG9VC9L1avnwkPikEfHm4vm2Du8= Subject key identifier: EA:7F:A3:E3:68:5D:6D:28:AB:04:AE:5A:C9:B9:7E:C9:F9:1C:FE:1B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0D8CBBDDE3EF8B2DC8EC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3c23918-8586-3edb-afa3-ddf0deb64005.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 184.63.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:d8:cb:bd:de:3e:f8:b2:dc:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=42a9f238-30e8-4a30-a36e-76ab45ea0e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2d:b3:c0:c1:28:b7:a3:26:0b:61:eb:31:ee: 1d:fc:16:3e:a2:1c:fe:91:68:d9:44:66:13:ca:4d: 2d:19:39:80:f1:ca:34:a7:20:42:c1:8d:5e:45:1f: 9d:43:2c:b5:24:64:76:2e:bb:09:51:28:46:b3:03: 3f:9a:fb:fd:dd:89:21:9d:1a:b1:dc:bc:54:17:49: 33:dd:02:0b:d8:43:b0:06:15:32:bd:ee:db:df:ea: a3:c7:c5:ab:bb:fb:d2:6c:18:2e:cc:96:a0:30:89: c1:04:95:3b:aa:df:8b:bb:b5:e2:b8:ec:10:59:fc: 6d:76:4b:50:8a:ca:0a:ca:66:4e:14:0b:73:b0:64: a1:43:62:ba:ab:d9:83:c0:5d:ef:a2:4b:57:bf:71: f0:f0:4e:68:ca:fa:88:15:48:8c:08:6a:1b:2e:11: 68:e0:e1:07:48:43:9f:6d:2f:91:b8:f9:75:5e:ff: 66:d5:4f:18:6d:ad:74:ac:1b:22:2d:fc:b7:8d:11: 12:eb:26:90:75:fb:19:18:ab:99:fa:ad:85:58:87: 3b:a8:9d:a9:0c:1c:f7:bc:da:e6:16:14:0c:09:d6: 2e:9e:66:67:7c:56:06:16:a7:2c:71:f7:3e:bc:1f: 8b:63:f9:4d:b3:fd:9f:55:85:2e:3d:0f:28:96:6c: 80:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7F:A3:E3:68:5D:6D:28:AB:04:AE:5A:C9:B9:7E:C9:F9:1C:FE:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3c23918-8586-3edb-afa3-ddf0deb64005.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.63.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:fc:3b:d6:ea:e4:7c:8b:53:7d:53:f5:72:64:6c:39:86:c3: 9a:4f:a9:d7:98:d3:a7:6a:7c:62:09:b5:e8:73:f5:d4:39:91: 17:d5:25:66:f3:36:a4:fa:34:69:a4:ca:da:af:18:05:a6:10: 60:eb:56:11:f5:c6:74:68:43:26:4b:ba:ac:4e:d7:a8:80:ca: 39:93:bb:05:69:fc:8d:23:b1:49:a7:5e:39:df:dc:ed:95:35: 7e:de:55:0a:82:9d:73:66:50:9e:10:0c:7d:43:2c:a9:a7:38: 1b:2f:a8:b5:74:fa:ab:c1:e5:91:3c:d6:0a:45:7d:4b:03:8f: b0:48:03:02:92:08:72:34:8d:b7:2f:41:b7:86:0e:34:cf:09: de:e0:8e:3a:57:d9:bf:92:77:54:00:5f:fb:5b:f0:b7:69:09: 49:a0:88:36:5e:63:9a:94:7b:6b:ef:4b:e8:1b:72:67:70:22: 9d:76:d2:97:a4:64:49:f7:57:e1:b9:20:17:dc:9b:ce:c3:2b: f1:2e:10:db:ac:98:04:2b:2b:28:cd:cb:2c:d1:4b:34:bb:8f: 39:e0:a1:28:d7:4a:76:0c:7b:1e:33:a8:14:e3:3f:fb:95:28: f7:5a:eb:a3:ce:45:55:d8:b0:a7:5a:d0:c9:1f:eb:d5:c6:cd: c6:e6:aa:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4NjLvd4++LLcjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDJhOWYyMzgtMzBlOC00YTMwLWEzNmUtNzZhYjQ1ZWEwZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS2zwMEot6MmC2HrMe4d/BY+ohz+kWjZRGYT yk0tGTmA8co0pyBCwY1eRR+dQyy1JGR2LrsJUShGswM/mvv93YkhnRqx3LxUF0kz 3QIL2EOwBhUyve7b3+qjx8Wru/vSbBguzJagMInBBJU7qt+Lu7XiuOwQWfxtdktQ isoKymZOFAtzsGShQ2K6q9mDwF3voktXv3Hw8E5oyvqIFUiMCGobLhFo4OEHSEOf bS+RuPl1Xv9m1U8Yba10rBsiLfy3jRES6yaQdfsZGKuZ+q2FWIc7qJ2pDBz3vNrm FhQMCdYunmZnfFYGFqcscfc+vB+LY/lNs/2fVYUuPQ8olmyAEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOp/o+NoXW0oqwSuWsm5fsn5HP4bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTNjMjM5MTgtODU4Ni0z ZWRiLWFmYTMtZGRmMGRlYjY0MDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD+qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC78O9bq5HyLU31T9XJkbDmGw5pPqdeY06dqfGIJtehz9dQ5kRfVJWbz NqT6NGmkytqvGAWmEGDrVhH1xnRoQyZLuqxO16iAyjmTuwVp/I0jsUmnXjnf3O2V NX7eVQqCnXNmUJ4QDH1DLKmnOBsvqLV0+qvB5ZE81gpFfUsDj7BIAwKSCHI0jbcv QbeGDjTPCd7gjjpX2b+Sd1QAX/tb8LdpCUmgiDZeY5qUe2vvS+gbcmdwIp120pek ZEn3V+G5IBfcm87DK/EuENusmAQrKyjNyyzRSzS7jzngoSjXSnYMex4zqBTjP/uV KPda66PORVXYsKda0Mkf69XGzcbmqhA= -----END CERTIFICATE-----Generated at Fri Mar 13 05:54:43 2026 by rpki-client