$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a406a8ab-8aed-3d6b-8e0e-9bb029169708.roa File: a406a8ab-8aed-3d6b-8e0e-9bb029169708.roa (raw, json) Hash identifier: fgkYcOTtAkOMrzjdPvXSFMkdw0MrO3bZWurxIvvBuz4= Subject key identifier: A0:A1:F2:C0:DE:A6:2A:97:20:23:09:A9:A7:60:15:9E:F4:01:FE:D2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFBE4DEF3467ADC7D8080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a406a8ab-8aed-3d6b-8e0e-9bb029169708.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fb:e4:de:f3:46:7a:dc:7d:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=61d3d66b-f192-4b89-9260-f3e0c479b3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5b:84:e0:39:5f:b2:44:a6:92:29:aa:b9:cd: fe:a4:ab:5a:00:f8:30:f2:71:f7:8e:c5:88:12:e1: 96:33:f0:cf:aa:8d:8f:85:c0:4d:a5:fa:ce:f7:82: 9e:bb:c3:44:ca:f1:b5:18:00:5a:5f:63:0e:2c:fd: 15:d2:58:73:6d:38:dd:00:ce:be:2b:e6:3a:53:a3: a3:4f:62:9e:7c:14:73:0e:b8:00:08:bf:a9:a4:08: 45:db:35:7f:77:9f:f8:56:2a:99:51:a3:52:f0:b2: 8b:95:41:a9:7d:75:02:2d:6f:d3:a9:eb:3e:55:3a: 4e:dd:3e:c0:81:18:93:c6:7c:7f:df:22:b5:d7:00: 2b:58:e9:4f:18:43:b5:1e:f2:03:29:01:dd:a1:0c: 21:8d:89:6d:36:1a:51:6d:2c:d6:0d:e4:71:eb:f4: 81:25:d1:03:fd:91:a4:69:39:fe:7e:67:1c:d1:9d: f0:b3:6e:5a:2b:99:cd:d5:30:7b:28:7a:f5:8b:02: fe:dd:21:96:99:e3:f8:97:f1:59:3f:13:a5:70:78: fc:65:82:ba:a9:2d:69:5d:69:23:73:a7:98:79:a5: be:39:d3:23:10:ee:b8:f8:1e:d6:37:c4:72:2a:d6: 32:31:47:b6:ba:b1:17:85:8a:41:f5:00:4e:b5:ee: 7c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A1:F2:C0:DE:A6:2A:97:20:23:09:A9:A7:60:15:9E:F4:01:FE:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a406a8ab-8aed-3d6b-8e0e-9bb029169708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:08:b0:32:cb:cc:65:de:26:4d:91:2d:4b:b5:38:85:6c:c6: 6a:d5:20:17:b1:f4:51:24:ce:72:e4:8f:45:6f:ab:1c:a9:df: 4f:73:65:44:41:4d:77:46:4b:86:06:4b:c8:82:c9:46:e4:1a: e8:dc:3d:04:e6:95:f6:ed:0f:e6:4d:08:7a:8c:61:aa:1b:38: d8:2e:4e:1f:ab:81:02:ee:84:93:9b:72:09:12:8f:11:7c:5d: 27:a7:a5:34:33:21:9a:b4:d3:38:11:0f:b9:7a:fe:de:f9:71: 20:ec:a3:2f:dc:7d:07:a4:d6:5c:7a:45:f8:f6:2a:a1:27:26: bb:71:f8:fd:da:7a:1d:5c:fa:cc:38:df:b4:bf:8d:42:c2:04: 98:a5:ce:0c:0e:0d:3f:9d:c5:6e:53:f7:6c:a6:05:ba:79:5c: a5:84:29:f5:57:62:f0:2e:9c:27:1f:ee:bf:26:a7:ee:ba:ce: 0e:b5:92:be:cd:58:f3:9b:db:e4:98:87:a4:e4:50:5c:37:3e: aa:ae:75:0c:b3:59:79:60:b0:88:df:a9:5a:52:59:01:c1:f9: a3:9b:bf:db:23:ac:3a:ef:2d:8e:14:d7:11:af:67:ab:d1:ee: 96:a1:34:4e:89:39:cf:d2:7b:3a:52:79:5c:05:27:3b:f5:2f: 1d:0a:30:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/vk3vNGetx9gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjFkM2Q2NmItZjE5Mi00Yjg5LTkyNjAtZjNlMGM0NzliM2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFuE4DlfskSmkimquc3+pKtaAPgw8nH3jsWI EuGWM/DPqo2PhcBNpfrO94Keu8NEyvG1GABaX2MOLP0V0lhzbTjdAM6+K+Y6U6Oj T2KefBRzDrgACL+ppAhF2zV/d5/4ViqZUaNS8LKLlUGpfXUCLW/Tqes+VTpO3T7A gRiTxnx/3yK11wArWOlPGEO1HvIDKQHdoQwhjYltNhpRbSzWDeRx6/SBJdED/ZGk aTn+fmcc0Z3ws25aK5nN1TB7KHr1iwL+3SGWmeP4l/FZPxOlcHj8ZYK6qS1pXWkj c6eYeaW+OdMjEO64+B7WN8RyKtYyMUe2urEXhYpB9QBOte58hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCh8sDepiqXICMJqadgFZ70Af7SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTQwNmE4YWItOGFlZC0z ZDZiLThlMGUtOWJiMDI5MTY5NzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPK8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8IsDLLzGXeJk2RLUu1OIVsxmrVIBex9FEkznLkj0Vvqxyp309zZURB TXdGS4YGS8iCyUbkGujcPQTmlfbtD+ZNCHqMYaobONguTh+rgQLuhJObcgkSjxF8 XSenpTQzIZq00zgRD7l6/t75cSDsoy/cfQek1lx6Rfj2KqEnJrtx+P3aeh1c+sw4 37S/jULCBJilzgwODT+dxW5T92ymBbp5XKWEKfVXYvAunCcf7r8mp+66zg61kr7N WPOb2+SYh6TkUFw3PqqudQyzWXlgsIjfqVpSWQHB+aObv9sjrDrvLY4U1xGvZ6vR 7pahNE6JOc/SezpSeVwFJzv1Lx0KMPM= -----END CERTIFICATE-----Generated at Fri Mar 13 05:52:36 2026 by rpki-client