$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a89153c0-f3fb-31ad-8258-df6163370df5.roa File: a89153c0-f3fb-31ad-8258-df6163370df5.roa (raw, json) Hash identifier: cMfEbGWLkPCwkmazEVCH6w+JfX1iW+AZpiewfpmdVvg= Subject key identifier: 45:12:1E:DA:8F:11:55:91:7D:6A:69:72:32:A7:73:E4:9C:2C:8D:DE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFF8C4B36DA218A6B05F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a89153c0-f3fb-31ad-8258-df6163370df5.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:f8:c4:b3:6d:a2:18:a6:b0:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=9e6fd7a0-bced-4f1e-a489-10debc6c455e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9f:a7:55:32:61:ad:b9:f1:f7:9a:38:5a:da: bb:a7:b2:3e:a7:c8:1f:19:a1:69:09:e7:e3:6a:db: be:38:ca:ee:02:d4:9b:31:85:e4:2c:a4:19:33:2d: e8:85:8e:07:ad:2e:63:0a:3d:ff:8f:e6:94:9d:50: 59:d8:a6:1a:3d:31:4c:31:2c:14:ac:4a:c9:04:04: 73:98:06:a5:38:43:77:e8:ec:88:5a:1b:24:43:d8: 93:a3:89:00:ad:fc:cf:11:68:89:30:5f:a4:68:7a: 22:ee:c1:44:08:c4:b2:30:c8:83:24:c5:1f:5c:9f: ae:d4:ee:7e:0a:fb:f8:ab:5f:8d:d6:f4:fd:db:bd: 1c:76:9f:49:6e:fe:55:49:6c:06:c0:43:8c:e1:1e: 83:b9:16:61:a9:c9:d5:6e:39:87:7d:98:8c:37:d8: 74:53:88:34:69:de:f0:35:51:91:a0:1b:14:f0:ce: 22:a6:65:b4:31:4f:8e:fa:6b:4c:4b:b2:3c:2d:49: 84:60:2d:5f:aa:89:71:20:86:5b:30:44:8d:2d:3b: 9c:b7:03:12:c7:cc:c8:3c:97:a7:a3:8e:61:1b:76: b3:43:0a:09:f4:fa:fc:34:b8:f3:1a:58:64:d1:2d: 4b:24:eb:76:fe:3f:91:1b:4b:37:60:ff:51:cf:a3: 73:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:12:1E:DA:8F:11:55:91:7D:6A:69:72:32:A7:73:E4:9C:2C:8D:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a89153c0-f3fb-31ad-8258-df6163370df5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:50:28:16:30:f7:95:44:a9:5f:f1:4e:ed:b3:28:14:49:a9: aa:a5:25:3d:d0:fc:c1:63:de:cb:f3:08:f2:69:c4:ee:f4:54: d0:17:b5:45:fa:74:48:c6:a5:89:10:47:e4:96:43:b7:1b:b1: 2b:72:8a:80:00:18:6b:ae:77:99:ce:ee:e6:c5:0b:eb:b8:67: 8b:47:68:c6:5e:e6:8c:e6:61:04:77:23:25:ff:04:e5:4a:07: d8:f2:72:de:65:ad:12:3e:ee:c2:4b:73:c4:b8:02:fa:af:a5: c7:73:2d:5d:84:87:01:31:05:8e:0d:97:b2:60:80:26:49:cc: ad:d6:ad:38:48:c9:5f:55:d3:03:a9:44:f1:26:64:04:d8:d3: f6:7f:cc:83:78:5b:8b:80:bb:b0:aa:45:4b:f5:1e:c7:5e:02: fc:6c:74:f4:8e:28:3d:9c:8d:77:06:32:9f:f9:e0:3a:1f:a3: 48:83:cb:d1:0f:bf:fa:40:ad:75:94:dc:37:bc:a5:88:7d:c8: de:80:86:b2:40:81:18:aa:f0:35:d6:ea:33:96:05:f5:7a:64: 2c:09:8d:35:8e:ac:57:35:82:59:03:42:66:89:e2:a9:df:b2: 9c:fa:36:20:05:24:2c:bd:ff:3e:03:97:72:75:90:47:89:71: eb:10:32:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/jEs22iGKawXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OWU2ZmQ3YTAtYmNlZC00ZjFlLWE0ODktMTBkZWJjNmM0NTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp+nVTJhrbnx95o4Wtq7p7I+p8gfGaFpCefj atu+OMruAtSbMYXkLKQZMy3ohY4HrS5jCj3/j+aUnVBZ2KYaPTFMMSwUrErJBARz mAalOEN36OyIWhskQ9iTo4kArfzPEWiJMF+kaHoi7sFECMSyMMiDJMUfXJ+u1O5+ Cvv4q1+N1vT9270cdp9Jbv5VSWwGwEOM4R6DuRZhqcnVbjmHfZiMN9h0U4g0ad7w NVGRoBsU8M4ipmW0MU+O+mtMS7I8LUmEYC1fqolxIIZbMESNLTuctwMSx8zIPJen o45hG3azQwoJ9Pr8NLjzGlhk0S1LJOt2/j+RG0s3YP9Rz6NzTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUSHtqPEVWRfWppcjKnc+ScLI3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTg5MTUzYzAtZjNmYi0z MWFkLTgyNTgtZGY2MTYzMzcwZGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxQKBYw95VEqV/xTu2zKBRJqaqlJT3Q/MFj3svzCPJpxO70VNAXtUX6 dEjGpYkQR+SWQ7cbsStyioAAGGuud5nO7ubFC+u4Z4tHaMZe5ozmYQR3IyX/BOVK B9jyct5lrRI+7sJLc8S4AvqvpcdzLV2EhwExBY4Nl7JggCZJzK3WrThIyV9V0wOp RPEmZATY0/Z/zIN4W4uAu7CqRUv1HsdeAvxsdPSOKD2cjXcGMp/54Dofo0iDy9EP v/pArXWU3De8pYh9yN6AhrJAgRiq8DXW6jOWBfV6ZCwJjTWOrFc1glkDQmaJ4qnf spz6NiAFJCy9/z4Dl3J1kEeJcesQMhs= -----END CERTIFICATE-----Generated at Fri Mar 13 05:53:46 2026 by rpki-client