$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da586d84-433b-3f79-a0e6-17aa74076e21.roa File: da586d84-433b-3f79-a0e6-17aa74076e21.roa (raw, json) Hash identifier: DzXHW4o1PNNXE2gj7sGDHlg7P/TnMVbkdAWRdGjw3rA= Subject key identifier: 89:6C:2C:FE:6B:1C:2C:A4:C7:C9:11:10:B6:43:9F:1D:2B:BC:97:8D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFF777540DA333AC65C300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da586d84-433b-3f79-a0e6-17aa74076e21.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:f7:77:54:0d:a3:33:ac:65:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4fb8f9f3-2bde-4f67-b8e4-28a4a73e4380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b1:6f:25:bd:00:77:6c:65:d6:9e:f8:c2:98: 52:bd:56:7e:e2:ff:e6:ed:4b:e0:67:b5:88:83:3a: 53:79:da:5b:86:b8:95:61:b1:00:39:8d:1b:a6:e1: 16:8e:ce:53:64:b9:fa:ee:08:9d:f5:9c:7f:db:1a: df:80:36:dd:ee:1f:a1:cf:58:70:a6:5b:d0:89:8a: a8:ff:93:9c:1a:00:7e:10:d2:b0:0c:43:be:99:4a: b6:9a:9b:a3:99:51:c3:cc:62:a4:3e:be:b9:1a:83: 83:96:a3:02:f2:1a:9e:8b:41:aa:46:d0:10:81:5f: 38:a0:c1:5c:43:36:74:75:99:4f:ff:1c:04:ee:93: 9a:7f:66:a6:23:25:81:c5:86:6b:ff:74:44:0e:c2: 04:7c:60:2b:6b:68:9e:86:4b:35:c3:24:61:14:7d: a2:16:61:c7:81:e6:66:c1:8f:ce:5a:e6:bb:fa:55: 96:15:dc:f3:1b:ed:39:73:0d:4d:01:5d:4f:0c:7d: 81:88:d5:e6:77:7d:34:ef:33:04:c2:32:75:05:5b: f7:d4:f7:a8:07:ee:88:ec:f7:70:14:b6:e9:26:9d: 01:1e:2b:74:ed:c2:de:76:06:14:4f:c4:77:38:5b: f3:11:18:0a:0a:76:e8:7c:63:fc:a1:6d:9a:55:a3: fc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6C:2C:FE:6B:1C:2C:A4:C7:C9:11:10:B6:43:9F:1D:2B:BC:97:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da586d84-433b-3f79-a0e6-17aa74076e21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:d4:55:8f:f6:0b:d4:2b:e5:87:a0:4d:73:9e:2b:7c:90:44: 70:4b:61:0b:dd:ff:14:01:7d:9c:8d:60:1c:c9:c4:99:a4:83: 34:24:28:74:99:94:36:fe:d4:19:dd:ce:0f:2e:90:c0:88:f3: 94:52:06:a8:3c:bf:ea:b2:1f:86:c3:e2:e5:55:0b:5d:82:53: 1a:7f:56:e4:63:9d:63:64:0e:40:aa:b1:24:6e:21:5d:c4:5c: f8:48:68:9d:fc:fb:79:5b:99:63:ff:31:af:d5:65:53:c8:8a: 41:43:18:da:45:74:63:69:8b:ed:29:7d:06:fa:a0:7c:41:92: ee:e7:23:82:9b:fe:65:7c:d3:47:44:ba:88:56:99:58:51:23: 86:89:f4:4c:43:27:d2:a5:3d:63:34:b3:c3:dd:d0:17:7e:b1: de:41:72:b8:78:2d:d5:3e:cf:62:00:43:d6:05:7d:50:ee:1f: 78:71:cc:47:95:ac:6c:0d:d5:3f:31:28:32:78:8f:ac:1e:28: ba:59:23:f3:6b:be:a6:2f:18:68:19:3c:f8:04:e7:1f:ad:76: b8:44:f3:d9:f4:3f:09:26:51:d6:1d:bb:a8:59:48:db:88:6e: cc:fa:92:df:f8:33:b3:9f:6a:c8:5c:be:7a:1b:fc:5a:59:4c: 5d:17:df:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/d3VA2jM6xlwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NGZiOGY5ZjMtMmJkZS00ZjY3LWI4ZTQtMjhhNGE3M2U0MzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrFvJb0Ad2xl1p74wphSvVZ+4v/m7UvgZ7WI gzpTedpbhriVYbEAOY0bpuEWjs5TZLn67gid9Zx/2xrfgDbd7h+hz1hwplvQiYqo /5OcGgB+ENKwDEO+mUq2mpujmVHDzGKkPr65GoODlqMC8hqei0GqRtAQgV84oMFc QzZ0dZlP/xwE7pOaf2amIyWBxYZr/3REDsIEfGAra2iehks1wyRhFH2iFmHHgeZm wY/OWua7+lWWFdzzG+05cw1NAV1PDH2BiNXmd3007zMEwjJ1BVv31PeoB+6I7Pdw FLbpJp0BHit07cLedgYUT8R3OFvzERgKCnbofGP8oW2aVaP8QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlsLP5rHCykx8kRELZDnx0rvJeNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGE1ODZkODQtNDMzYi0z Zjc5LWEwZTYtMTdhYTc0MDc2ZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPImMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvUVY/2C9Qr5YegTXOeK3yQRHBLYQvd/xQBfZyNYBzJxJmkgzQkKHSZ lDb+1Bndzg8ukMCI85RSBqg8v+qyH4bD4uVVC12CUxp/VuRjnWNkDkCqsSRuIV3E XPhIaJ38+3lbmWP/Ma/VZVPIikFDGNpFdGNpi+0pfQb6oHxBku7nI4Kb/mV800dE uohWmVhRI4aJ9ExDJ9KlPWM0s8Pd0Bd+sd5Bcrh4LdU+z2IAQ9YFfVDuH3hxzEeV rGwN1T8xKDJ4j6weKLpZI/NrvqYvGGgZPPgE5x+tdrhE89n0PwkmUdYdu6hZSNuI bsz6kt/4M7Ofashcvnob/FpZTF0X31g= -----END CERTIFICATE-----Generated at Fri Mar 13 07:06:48 2026 by rpki-client