$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c080914d-3433-3b78-b2b6-7db35cd93827.roa File: c080914d-3433-3b78-b2b6-7db35cd93827.roa (raw, json) Hash identifier: vWiDhH4sQnO6vntVb08tqZf7qvUq9ux7xEaJ3W4kElc= Subject key identifier: E4:DA:78:AF:4F:E7:06:CC:54:3D:69:D4:3E:37:FE:F4:32:64:69:F0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E069CFB33E593A43D56B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c080914d-3433-3b78-b2b6-7db35cd93827.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:69:cf:b3:3e:59:3a:43:d5:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4c41df4c-047e-457b-83ca-0640c095f3d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:06:69:3b:e1:d3:18:6c:04:94:27:e8:85: 8b:b2:57:42:e1:b1:98:3b:61:f3:df:de:82:56:ea: 8d:76:2c:5a:1c:67:04:9e:29:4d:f9:50:6b:86:61: 58:b3:6a:c5:c0:39:cb:df:6e:55:c2:da:e0:5f:f6: 43:12:52:4f:8a:b9:31:6b:55:0b:f7:df:6e:8e:8e: 9a:c0:4d:5e:14:9d:60:44:19:02:09:12:b8:48:f2: bf:4d:65:01:27:1a:e9:c7:7a:a7:10:d3:62:b4:2f: c8:fd:07:11:16:8a:da:17:33:4b:69:64:2a:ed:83: ea:aa:c4:88:05:1e:07:b3:65:bc:30:a5:ce:bb:24: af:0e:dc:0e:52:63:43:d2:89:66:43:d8:d2:28:20: f7:1b:2e:50:36:92:62:73:57:56:0c:6f:06:15:0f: 5c:32:c6:ed:14:e9:2e:b7:1e:09:73:13:3c:8f:a4: 30:d6:d5:40:49:d3:19:3e:5b:51:ab:9a:39:22:e6: 98:e2:6d:fb:20:97:8f:e8:55:a3:44:6f:30:9a:86: de:7b:d7:33:03:0c:b2:0a:4f:42:cd:a1:52:a4:89: f8:71:66:0e:19:1a:3d:54:cc:e8:72:83:32:44:d5: d9:e1:6f:93:c6:e6:fe:d0:a5:e5:14:fb:24:80:a1: 8e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DA:78:AF:4F:E7:06:CC:54:3D:69:D4:3E:37:FE:F4:32:64:69:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c080914d-3433-3b78-b2b6-7db35cd93827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:06:d2:90:99:bc:6e:d1:2e:37:eb:ba:aa:e2:22:ee:6f:4c: 14:32:07:8b:36:4e:ab:5d:55:25:24:4d:06:11:4c:5b:77:19: 42:86:d1:47:d4:0d:89:7d:ae:57:b0:1d:e9:c7:29:95:d8:34: 30:b2:13:60:5d:7c:08:8d:71:c1:5e:5b:ca:bc:8d:78:03:7e: d6:a6:f2:fc:2c:5a:30:ed:a3:01:d5:90:18:03:7f:3d:f4:c2: e7:c5:a7:e2:ee:b4:ff:85:1c:53:37:ea:82:8a:ae:e4:4f:b0: 3c:1a:83:81:62:c6:49:80:18:22:ba:ff:1d:ba:3e:d5:8f:ef: 1e:f7:3f:82:df:9b:e2:49:0e:3f:7c:67:5c:0f:13:a6:7c:09: b2:90:8f:4e:4a:55:44:83:85:06:4d:70:53:98:33:5d:22:3b: 74:01:e8:3c:8e:6a:73:db:ef:1e:8f:86:0a:c6:a3:e2:84:2a: 68:d7:97:7c:79:d3:2c:13:21:a8:81:13:9e:92:e9:54:c6:69: c3:84:02:43:41:33:94:c8:1c:66:0d:7c:b7:87:99:ae:29:af: 1e:39:6a:34:79:1a:47:94:63:b6:c4:86:17:f9:a9:57:68:16: f4:24:8d:0e:42:64:20:ad:e3:b0:a3:cc:5e:17:01:29:d7:2b: 67:a8:96:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GnPsz5ZOkPVawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NGM0MWRmNGMtMDQ3ZS00NTdiLTgzY2EtMDY0MGMwOTVmM2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvikGaTvh0xhsBJQn6IWLsldC4bGYO2Hz396C VuqNdixaHGcEnilN+VBrhmFYs2rFwDnL325VwtrgX/ZDElJPirkxa1UL999ujo6a wE1eFJ1gRBkCCRK4SPK/TWUBJxrpx3qnENNitC/I/QcRForaFzNLaWQq7YPqqsSI BR4Hs2W8MKXOuySvDtwOUmND0olmQ9jSKCD3Gy5QNpJic1dWDG8GFQ9cMsbtFOku tx4JcxM8j6Qw1tVASdMZPltRq5o5IuaY4m37IJeP6FWjRG8wmobee9czAwyyCk9C zaFSpIn4cWYOGRo9VMzocoMyRNXZ4W+Txub+0KXlFPskgKGOkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTaeK9P5wbMVD1p1D43/vQyZGnwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzA4MDkxNGQtMzQzMy0z Yjc4LWIyYjYtN2RiMzVjZDkzODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4G0pCZvG7RLjfruqriIu5vTBQyB4s2TqtdVSUkTQYRTFt3GUKG0UfU DYl9rlewHenHKZXYNDCyE2BdfAiNccFeW8q8jXgDftam8vwsWjDtowHVkBgDfz30 wufFp+LutP+FHFM36oKKruRPsDwag4FixkmAGCK6/x26PtWP7x73P4Lfm+JJDj98 Z1wPE6Z8CbKQj05KVUSDhQZNcFOYM10iO3QB6DyOanPb7x6PhgrGo+KEKmjXl3x5 0ywTIaiBE56S6VTGacOEAkNBM5TIHGYNfLeHma4prx45ajR5GkeUY7bEhhf5qVdo FvQkjQ5CZCCt47CjzF4XASnXK2eolrM= -----END CERTIFICATE-----Generated at Fri Mar 13 05:54:31 2026 by rpki-client