$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0dcdea7-f612-3505-8252-f58b2324d1c9.roa File: f0dcdea7-f612-3505-8252-f58b2324d1c9.roa (raw, json) Hash identifier: 8WtYP+YbWGueLKxhZ36O8sHKIw80ps86Ar9h3fYXnxE= Subject key identifier: 63:9E:FE:CA:9A:0D:77:DA:47:EC:6C:5F:BE:36:DF:13:34:5D:D0:0D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFFED661CF3BB69D65F200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0dcdea7-f612-3505-8252-f58b2324d1c9.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.243.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:fe:d6:61:cf:3b:b6:9d:65:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6a449584-fb6f-4ed6-8cb7-8d5f091932b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4a:90:b8:75:e9:96:79:48:7c:65:de:67:c5: c0:90:73:bf:5c:06:93:d3:49:d6:85:46:f8:5c:66: 01:9b:b2:73:fe:9d:61:c8:03:4a:1e:42:59:b5:a7: 44:8d:b1:a1:ae:37:1c:0e:c0:e9:62:d0:55:8b:70: c4:14:72:7a:cd:07:9d:a8:56:62:25:ed:ff:83:01: 23:0a:7f:be:ee:e8:4b:a1:d4:fe:81:25:53:6f:d7: 65:ef:95:f9:21:43:ce:c1:c5:c0:02:4f:31:1c:13: 3a:49:fe:4e:55:59:0f:2f:61:6e:43:69:04:b4:94: 37:46:22:d0:25:42:7a:2d:d0:38:b2:06:e8:8e:83: 53:1c:cc:31:fe:43:ed:a2:c6:e7:e5:c9:34:c8:91: ea:77:0b:bb:71:d7:9a:95:ea:15:2f:de:46:51:b0: 75:f0:3c:65:a3:32:14:d8:36:12:ff:02:e4:af:96: 7e:33:85:fd:31:d2:bc:ec:3c:b8:4e:80:e2:c1:23: d5:9a:3e:bc:65:bf:aa:68:55:e2:41:9e:03:36:0b: 19:8f:2f:53:be:3c:47:26:d5:7a:ad:96:fe:60:36: cb:f5:c2:ed:32:82:88:8f:89:3e:07:4a:f8:ac:cb: 68:72:1b:0a:3f:b2:a3:a5:f8:fa:31:0b:34:7a:e1: 64:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9E:FE:CA:9A:0D:77:DA:47:EC:6C:5F:BE:36:DF:13:34:5D:D0:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0dcdea7-f612-3505-8252-f58b2324d1c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4c:1b:be:90:15:0b:29:a3:13:f9:90:73:8f:fc:f0:f7:3c: 87:1e:9e:81:0c:24:da:b2:c4:ec:df:c2:ea:8c:03:e4:1f:b0: 42:29:e5:a8:6f:63:6d:75:6e:6e:59:13:00:21:8e:6c:7c:af: da:a9:44:3a:1f:fb:3c:c6:d7:2f:23:d1:3a:09:b9:dd:55:7e: 3c:e5:87:3b:48:2e:b9:a7:9e:cf:13:47:ec:4e:a5:6a:d4:05: 4f:b1:25:09:27:b6:a8:93:b1:4b:3d:f0:1a:bb:af:d0:aa:55: ea:93:a0:81:54:7b:83:59:a3:e8:7d:cc:44:bd:e1:25:3f:09: 6b:3a:28:69:85:02:27:92:01:b4:d3:6f:c3:c6:a1:d9:92:e4: 10:8c:f6:40:6a:dd:04:71:bb:c8:36:eb:b8:43:0a:15:60:34: b6:e3:58:a3:cc:1d:5f:93:31:da:31:14:b3:bf:f6:ae:33:cf: 50:50:e2:35:cc:87:cd:a4:34:0e:12:c9:f4:ac:54:62:89:b7: e7:71:7d:10:0c:02:e6:23:f6:4f:36:fd:f4:0f:5f:3e:99:7f: 72:b0:0b:7d:70:d2:84:07:45:ab:9e:29:ba:d9:28:4e:92:49: ea:6e:f1:ac:a1:71:bd:b7:f3:9d:ee:43:57:ad:b8:04:18:9e: 6f:d9:3e:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3/7WYc87tp1l8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NmE0NDk1ODQtZmI2Zi00ZWQ2LThjYjctOGQ1ZjA5MTkzMmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0qQuHXplnlIfGXeZ8XAkHO/XAaT00nWhUb4 XGYBm7Jz/p1hyANKHkJZtadEjbGhrjccDsDpYtBVi3DEFHJ6zQedqFZiJe3/gwEj Cn++7uhLodT+gSVTb9dl75X5IUPOwcXAAk8xHBM6Sf5OVVkPL2FuQ2kEtJQ3RiLQ JUJ6LdA4sgbojoNTHMwx/kPtosbn5ck0yJHqdwu7cdealeoVL95GUbB18DxlozIU 2DYS/wLkr5Z+M4X9MdK87Dy4ToDiwSPVmj68Zb+qaFXiQZ4DNgsZjy9TvjxHJtV6 rZb+YDbL9cLtMoKIj4k+B0r4rMtochsKP7Kjpfj6MQs0euFkKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOe/sqaDXfaR+xsX7423xM0XdANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjBkY2RlYTctZjYxMi0z NTA1LTgyNTItZjU4YjIzMjRkMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChMG76QFQspoxP5kHOP/PD3PIcenoEMJNqyxOzfwuqMA+QfsEIp5ahv Y211bm5ZEwAhjmx8r9qpRDof+zzG1y8j0ToJud1VfjzlhztILrmnns8TR+xOpWrU BU+xJQkntqiTsUs98Bq7r9CqVeqToIFUe4NZo+h9zES94SU/CWs6KGmFAieSAbTT b8PGodmS5BCM9kBq3QRxu8g267hDChVgNLbjWKPMHV+TMdoxFLO/9q4zz1BQ4jXM h82kNA4SyfSsVGKJt+dxfRAMAuYj9k82/fQPXz6Zf3KwC31w0oQHRaueKbrZKE6S Sepu8ayhcb23853uQ1etuAQYnm/ZPrY= -----END CERTIFICATE-----Generated at Fri Mar 13 05:53:26 2026 by rpki-client