$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa41224c-db93-3beb-92a8-b50f57229a2f.roa File: aa41224c-db93-3beb-92a8-b50f57229a2f.roa (raw, json) Hash identifier: p3AUFsA2W5ei1MWoz/k5OH+yA9+otveTAfGaZu8g0/c= Subject key identifier: 9B:F9:D8:C7:7D:48:9F:6E:D7:7D:D8:C8:52:AF:B2:96:46:1D:E6:58 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0AFD4CB1B30F42BFAA700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa41224c-db93-3beb-92a8-b50f57229a2f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:af:d4:cb:1b:30:f4:2b:fa:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=55693345-d806-4fe0-a4df-50316587966c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:73:26:1f:2f:a5:76:0e:4d:4f:3c:92:24: a2:9b:f8:f4:68:f4:1f:9c:00:63:54:ef:5f:3f:d0: c5:74:39:13:9b:33:2f:07:fc:6e:e7:84:6a:f6:cd: 18:1f:bf:69:4f:61:75:b0:9e:0e:56:a1:54:ba:6d: 1a:2c:fd:bc:53:93:6c:bf:b2:b5:3e:0b:ee:f7:bd: 35:5c:91:9f:bc:4e:98:55:f0:93:34:fa:2c:75:4b: 66:b6:2d:04:c6:ff:f3:2f:9f:1a:0d:dd:d8:47:36: 8b:fc:56:af:e3:22:20:08:ed:21:ec:01:24:68:d0: 79:a6:82:37:bf:b5:b6:c4:8e:42:04:6d:67:e9:6c: 28:d5:8f:b8:5a:ae:c9:cb:db:fd:86:f0:a3:7e:e8: dd:c4:ea:f6:5c:4c:6b:a3:ae:e0:ae:64:86:0d:92: 15:51:3a:49:44:23:2f:3a:35:fa:88:d7:62:a2:38: b3:98:d1:6b:34:f5:49:83:8a:41:bd:56:63:d9:27: 6a:c9:f0:40:98:71:47:3c:34:9a:af:4e:3b:6c:38: f8:b6:f6:49:32:dc:28:8a:1d:f7:da:a7:a5:87:5a: 27:9c:c3:d4:dc:be:4c:c1:04:f0:a4:9a:fa:23:de: 45:24:8a:b7:6d:5f:a0:c9:69:20:a2:17:ae:b6:9c: 08:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F9:D8:C7:7D:48:9F:6E:D7:7D:D8:C8:52:AF:B2:96:46:1D:E6:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa41224c-db93-3beb-92a8-b50f57229a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:01:cc:67:e7:b9:58:1e:6f:24:a0:b7:f6:e0:25:ef:70:ff: 0f:09:dd:4d:08:6d:8b:21:4d:78:f3:48:38:ef:87:b9:b3:03: 8a:1d:26:0a:fa:73:a7:88:51:ca:20:b6:0b:25:c4:2a:42:b7: 86:cc:67:69:23:a4:c7:c7:1b:34:a3:94:5e:7a:4a:ac:24:92: fd:4b:ba:96:06:0c:c2:29:c9:7f:3a:0b:2f:ae:18:a2:fd:7c: 94:5f:2a:6a:da:a2:06:4c:bb:f7:c0:9d:c2:1f:db:9e:60:7c: bb:40:24:e0:ea:15:c3:b1:6e:22:5a:5c:87:ef:77:71:7c:60: c1:69:a1:19:c3:9d:4d:fc:99:fa:29:95:a3:58:1d:7d:a2:0b: 43:3b:47:8c:31:08:ac:bd:94:b2:d2:a5:e4:20:95:23:11:70: b2:95:26:11:81:1b:17:94:ce:11:fd:e7:dd:b8:b5:0b:14:a3: af:8a:46:10:4e:6c:5e:bb:b6:86:66:dd:e7:46:c1:f2:07:6b: 1c:1a:0b:3f:fc:6f:b9:1b:78:ed:36:4d:08:50:d3:cf:87:85: af:29:26:01:ff:e8:ea:8e:ae:25:86:58:91:a3:ec:3d:23:25: 65:56:cc:47:05:b6:99:7c:4b:96:69:30:53:3d:43:b0:da:38: 63:fa:7b:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4K/Uyxsw9Cv6pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTU2OTMzNDUtZDgwNi00ZmUwLWE0ZGYtNTAzMTY1ODc5NjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOtzJh8vpXYOTU88kiSim/j0aPQfnABjVO9f P9DFdDkTmzMvB/xu54Rq9s0YH79pT2F1sJ4OVqFUum0aLP28U5Nsv7K1Pgvu9701 XJGfvE6YVfCTNPosdUtmti0Exv/zL58aDd3YRzaL/Fav4yIgCO0h7AEkaNB5poI3 v7W2xI5CBG1n6Wwo1Y+4Wq7Jy9v9hvCjfujdxOr2XExro67grmSGDZIVUTpJRCMv OjX6iNdiojizmNFrNPVJg4pBvVZj2SdqyfBAmHFHPDSar047bDj4tvZJMtwoih33 2qelh1onnMPU3L5MwQTwpJr6I95FJIq3bV+gyWkgoheutpwI0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJv52Md9SJ9u133YyFKvspZGHeZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWE0MTIyNGMtZGI5My0z YmViLTkyYTgtYjUwZjU3MjI5YTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYBzGfnuVgebySgt/bgJe9w/w8J3U0IbYshTXjzSDjvh7mzA4odJgr6 c6eIUcogtgslxCpCt4bMZ2kjpMfHGzSjlF56Sqwkkv1LupYGDMIpyX86Cy+uGKL9 fJRfKmraogZMu/fAncIf255gfLtAJODqFcOxbiJaXIfvd3F8YMFpoRnDnU38mfop laNYHX2iC0M7R4wxCKy9lLLSpeQglSMRcLKVJhGBGxeUzhH95924tQsUo6+KRhBO bF67toZm3edGwfIHaxwaCz/8b7kbeO02TQhQ08+Hha8pJgH/6OqOriWGWJGj7D0j JWVWzEcFtpl8S5ZpMFM9Q7DaOGP6e3I= -----END CERTIFICATE-----Generated at Fri Mar 13 05:54:43 2026 by rpki-client