$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4565e84-221d-32cf-9998-00ce59776a7c.roa File: e4565e84-221d-32cf-9998-00ce59776a7c.roa (raw, json) Hash identifier: TA5JWCxSNmn+XNxhYRCnIxrI9JY7ibPcJTlc7F/R5Xg= Subject key identifier: E2:58:9B:50:80:C8:28:81:0C:59:0A:9E:83:C9:A3:3A:6C:80:AE:34 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFB08320B33973DA878A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4565e84-221d-32cf-9998-00ce59776a7c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fb:08:32:0b:33:97:3d:a8:78:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=845abdb7-b388-499e-8ef6-cb0888de9579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4d:30:3f:e1:d3:76:0b:c6:3b:27:ff:b5:fa: f4:2f:58:ca:25:9f:d1:9f:71:e7:bc:97:ef:24:56: c6:b9:bc:06:70:8f:27:e5:9c:11:c1:1d:4c:ee:ad: 4b:7c:c1:23:6a:f4:36:23:6c:79:88:8e:cc:e3:25: 40:49:e6:6e:b6:b9:be:34:46:4d:68:68:4c:0c:8a: 31:c3:60:4e:49:8d:e6:af:4a:94:38:4e:12:48:9f: 71:a7:1f:a5:6b:c3:fd:33:e8:ce:83:fa:a5:9e:b1: 4f:1f:7d:4a:7c:e1:be:ea:da:60:c1:45:e8:51:9e: ee:66:b4:8c:98:ec:36:87:b9:b7:28:0b:8b:76:8f: 64:c5:67:38:58:48:af:ad:fc:17:f7:6c:7c:a6:f9: a7:dc:1b:49:cc:b3:a8:31:97:3f:4c:8d:ea:46:4f: 47:a4:40:a3:f5:8a:dc:11:52:34:ea:6d:b6:99:ef: b2:91:cd:ab:98:23:cb:36:7b:54:c9:57:47:37:65: 5a:57:95:ef:a1:db:2f:f4:e1:03:7f:8f:4b:98:80: 64:2f:10:0f:db:ea:8a:3a:c7:95:2a:bf:f6:1d:13: 22:4e:93:68:49:22:74:8f:0d:00:db:82:ef:7f:99: 89:0d:05:5d:33:30:17:52:e6:73:a2:53:29:87:e7: 02:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:58:9B:50:80:C8:28:81:0C:59:0A:9E:83:C9:A3:3A:6C:80:AE:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4565e84-221d-32cf-9998-00ce59776a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:30:2a:5e:07:30:c0:95:0d:ce:dc:c6:d0:8e:7a:52:a3:29: 47:8b:37:85:cd:d0:d8:13:e7:32:b8:96:f8:ed:32:ae:f3:42: 54:75:42:cc:2f:d5:76:0b:82:cc:65:c8:cd:d6:84:a4:87:78: 18:f2:0d:49:e4:6d:61:e0:6a:47:23:90:bc:6c:c4:88:84:aa: d6:58:c9:b6:f1:62:12:53:14:f3:6f:0a:ed:d9:a5:ba:b4:d4: 8d:58:43:59:be:09:31:b8:c0:b6:24:18:7a:f4:6e:03:37:97: 8e:2f:97:38:ae:2c:d6:bb:06:40:cd:65:98:4c:de:2e:ab:26: f0:6f:ba:ec:15:d4:88:b8:33:20:85:dd:8a:6c:d6:52:17:89: 6f:f9:6a:b5:45:64:3e:31:52:bf:3e:1a:b8:e4:ec:48:11:03: 08:a0:3f:df:46:ec:8a:f9:80:ed:dc:dc:ac:52:60:0d:b8:8b: 80:04:bf:d9:ae:d5:e4:e1:42:6b:f2:e2:e1:11:ce:53:7d:8f: 38:9c:24:14:69:1e:db:4b:06:df:51:dd:9a:ee:42:c9:ed:8a: 41:7d:dc:b2:fe:64:08:9d:a2:bc:db:f7:a4:fc:72:9b:84:78: 3c:2e:01:94:88:8a:33:06:0a:8b:3b:b4:91:f9:9f:c1:80:10: 9c:d9:9f:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/sIMgszlz2oeKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ODQ1YWJkYjctYjM4OC00OTllLThlZjYtY2IwODg4ZGU5NTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk0wP+HTdgvGOyf/tfr0L1jKJZ/Rn3HnvJfv JFbGubwGcI8n5ZwRwR1M7q1LfMEjavQ2I2x5iI7M4yVASeZutrm+NEZNaGhMDIox w2BOSY3mr0qUOE4SSJ9xpx+la8P9M+jOg/qlnrFPH31KfOG+6tpgwUXoUZ7uZrSM mOw2h7m3KAuLdo9kxWc4WEivrfwX92x8pvmn3BtJzLOoMZc/TI3qRk9HpECj9Yrc EVI06m22me+ykc2rmCPLNntUyVdHN2VaV5Xvodsv9OEDf49LmIBkLxAP2+qKOseV Kr/2HRMiTpNoSSJ0jw0A24Lvf5mJDQVdMzAXUuZzolMph+cCawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJYm1CAyCiBDFkKnoPJozpsgK40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTQ1NjVlODQtMjIxZC0z MmNmLTk5OTgtMDBjZTU5Nzc2YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGowKl4HMMCVDc7cxtCOelKjKUeLN4XN0NgT5zK4lvjtMq7zQlR1Qswv 1XYLgsxlyM3WhKSHeBjyDUnkbWHgakcjkLxsxIiEqtZYybbxYhJTFPNvCu3Zpbq0 1I1YQ1m+CTG4wLYkGHr0bgM3l44vlziuLNa7BkDNZZhM3i6rJvBvuuwV1Ii4MyCF 3Yps1lIXiW/5arVFZD4xUr8+Grjk7EgRAwigP99G7Ir5gO3c3KxSYA24i4AEv9mu 1eThQmvy4uERzlN9jzicJBRpHttLBt9R3ZruQsntikF93LL+ZAidorzb96T8cpuE eDwuAZSIijMGCos7tJH5n8GAEJzZn3E= -----END CERTIFICATE-----Generated at Fri Mar 13 05:52:27 2026 by rpki-client