$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df9b0389-0511-3f33-9eab-3d06768fd88e.roa File: df9b0389-0511-3f33-9eab-3d06768fd88e.roa (raw, json) Hash identifier: YbnfuKn4Qu8wkQsPbbuYd1+vVNDzBJZgFIfdlJt3+CY= Subject key identifier: 87:95:A7:B8:D8:43:77:4F:47:4A:1A:9C:AF:11:4F:7A:6B:A1:D4:AA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFF142725D44397E5CB00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df9b0389-0511-3f33-9eab-3d06768fd88e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:ff:14:27:25:d4:43:97:e5:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3ce02b82-5e17-47d7-be79-2fc7d18c7d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:7c:f7:a1:6e:29:f5:e9:65:31:c3:e2:a4: 11:ff:53:fe:00:dd:82:81:2b:ba:1c:b4:3e:b8:1d: 80:18:78:63:a1:d9:5f:7b:39:58:3a:7d:21:bf:05: 00:76:2d:db:e3:2e:b0:6c:ae:d4:8c:b1:43:45:44: 7d:63:5c:5b:40:3e:5a:f3:cd:fc:61:b0:c2:88:0d: c2:c1:47:4b:11:17:40:7c:89:53:cf:b0:c2:31:7a: e9:9d:66:b2:f3:36:7a:2f:fe:b2:69:7d:3b:a7:ef: aa:ad:f6:21:9e:53:50:21:34:ea:5a:9e:8b:a4:25: b9:67:c9:d2:39:c1:e9:42:75:47:79:17:6c:a4:88: 63:5a:02:62:9c:8b:9e:27:d8:4e:69:13:f5:0e:b1: 96:14:7a:f5:46:fc:11:b8:70:bd:f1:6c:e5:bd:fb: df:83:b4:62:4f:25:60:b5:4f:15:cf:1a:d0:45:7f: b1:3c:5a:4a:c2:f2:a2:59:7b:76:72:7b:b4:6d:1e: 4e:f9:9c:61:63:05:64:23:15:f3:3d:f7:55:a1:3f: 5f:84:5e:cd:4f:46:62:93:5c:5f:a3:ed:a7:8b:d8: c2:eb:3e:64:93:dd:4e:b4:07:55:63:b6:d2:64:c0: da:78:cd:a9:07:bd:ab:95:02:9d:c9:27:46:67:2e: d2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:95:A7:B8:D8:43:77:4F:47:4A:1A:9C:AF:11:4F:7A:6B:A1:D4:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df9b0389-0511-3f33-9eab-3d06768fd88e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:e2:4a:45:2a:98:59:50:c2:22:63:46:05:22:01:77:bb:78: c6:0b:60:a5:92:38:97:81:10:e8:2e:d0:6e:07:a5:3d:79:70: 82:be:a5:18:57:bb:77:ae:84:23:fb:84:02:1e:d9:0e:5e:77: 12:58:2a:49:53:a3:45:fa:6a:d9:0d:81:bc:be:bb:1e:5b:50: e3:6b:9b:96:76:ef:a3:47:c3:ce:63:12:f5:05:5f:36:ed:a7: 9b:4e:be:6c:69:4e:d6:23:66:f2:51:f8:f6:7c:2c:a1:35:24: 3d:0b:70:b2:8f:3b:f5:2e:6c:63:bc:e7:61:46:f2:ab:82:66: dd:2b:80:0b:3b:01:db:84:b8:d3:73:9a:93:f7:a2:df:5a:8a: 38:6c:e2:6b:58:a8:b9:89:fd:c3:08:7f:be:98:38:f7:b3:ba: 66:3d:b8:1d:4e:70:b8:20:f2:12:4a:92:d2:c4:fe:91:2e:5e: 89:fe:fd:04:c9:8a:e7:e8:63:32:80:c7:80:20:d1:89:80:ea: e1:3c:b0:38:03:3a:9b:d0:1a:79:df:9e:06:23:a9:ea:41:ac: 4a:b2:07:e3:b1:a5:d6:d1:6f:0d:bf:6f:dc:aa:78:c7:ec:07: 4f:85:45:6a:95:a8:67:97:ce:df:af:58:c6:15:52:4e:4a:9a: 92:60:42:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/8UJyXUQ5flywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk M2NlMDJiODItNWUxNy00N2Q3LWJlNzktMmZjN2QxOGM3ZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI1896FuKfXpZTHD4qQR/1P+AN2CgSu6HLQ+ uB2AGHhjodlfezlYOn0hvwUAdi3b4y6wbK7UjLFDRUR9Y1xbQD5a8838YbDCiA3C wUdLERdAfIlTz7DCMXrpnWay8zZ6L/6yaX07p++qrfYhnlNQITTqWp6LpCW5Z8nS OcHpQnVHeRdspIhjWgJinIueJ9hOaRP1DrGWFHr1RvwRuHC98Wzlvfvfg7RiTyVg tU8VzxrQRX+xPFpKwvKiWXt2cnu0bR5O+ZxhYwVkIxXzPfdVoT9fhF7NT0Zik1xf o+2ni9jC6z5kk91OtAdVY7bSZMDaeM2pB72rlQKdySdGZy7S8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeVp7jYQ3dPR0oanK8RT3prodSqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGY5YjAzODktMDUxMS0z ZjMzLTllYWItM2QwNjc2OGZkODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXiSkUqmFlQwiJjRgUiAXe7eMYLYKWSOJeBEOgu0G4HpT15cIK+pRhX u3euhCP7hAIe2Q5edxJYKklTo0X6atkNgby+ux5bUONrm5Z276NHw85jEvUFXzbt p5tOvmxpTtYjZvJR+PZ8LKE1JD0LcLKPO/UubGO852FG8quCZt0rgAs7AduEuNNz mpP3ot9aijhs4mtYqLmJ/cMIf76YOPezumY9uB1OcLgg8hJKktLE/pEuXon+/QTJ iufoYzKAx4Ag0YmA6uE8sDgDOpvQGnnfngYjqepBrEqyB+OxpdbRbw2/b9yqeMfs B0+FRWqVqGeXzt+vWMYVUk5KmpJgQp8= -----END CERTIFICATE-----Generated at Fri Mar 13 05:52:15 2026 by rpki-client