$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0fc40b1-f9d6-3300-a8ba-387f9a951ae8.roa File: f0fc40b1-f9d6-3300-a8ba-387f9a951ae8.roa (raw, json) Hash identifier: 6EWXiR+dZSuNCv4i/y8qRKDAZNdtsKucRXjeT4UK+B0= Subject key identifier: 9E:6E:1E:6E:E1:ED:CA:72:C4:92:CE:3A:E2:7B:C0:7C:C1:47:A5:AC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0AEEC3821EA203D9C3980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0fc40b1-f9d6-3300-a8ba-387f9a951ae8.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 172.242.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ae:ec:38:21:ea:20:3d:9c:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=307e6209-b4cb-4853-9419-424a4a234dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e2:27:35:48:88:7e:84:f6:a6:99:ab:eb:68: 8e:96:7b:4d:23:a8:1e:4d:2c:01:44:8e:28:96:4a: 8e:cc:7b:18:d1:aa:01:b9:d9:36:ab:3b:6e:a5:3f: 2d:8d:2b:63:fa:e8:a0:f1:dd:5e:f5:03:69:e1:16: 78:d8:ce:9f:90:bc:dd:3b:e6:39:e3:79:fa:92:ee: 55:62:99:b7:e7:b7:3f:c1:ed:d4:de:b7:c7:bf:f1: f7:26:c8:c0:1c:53:57:26:8b:94:81:c5:e7:7d:ee: e9:02:07:95:79:a5:f1:64:08:45:9e:60:09:bd:5c: bb:9f:18:b9:ec:e7:fb:55:54:0f:5c:65:1c:ee:2a: 1d:a3:55:a5:8b:9e:44:db:0f:16:c9:d3:d0:20:89: 94:87:76:0f:b4:08:65:9c:00:c1:a8:b6:c4:90:c5: 6c:86:aa:57:3f:a6:96:5d:12:dc:df:10:a8:c7:23: b8:09:f9:f3:dd:ba:d1:19:8a:b1:32:ad:1e:5a:c8: 47:a6:de:06:8d:f4:80:90:53:c1:c3:37:e1:1b:5b: 8f:21:cc:fe:8c:2f:6c:d9:03:6c:b0:c6:7b:af:2b: 07:11:3e:95:bc:6d:43:cf:eb:32:1b:59:bf:05:c7: dc:00:9f:6a:65:00:a2:7e:24:bc:43:9e:e8:5c:d9: 75:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6E:1E:6E:E1:ED:CA:72:C4:92:CE:3A:E2:7B:C0:7C:C1:47:A5:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0fc40b1-f9d6-3300-a8ba-387f9a951ae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:23:f6:39:13:45:04:65:87:57:96:f7:63:42:5a:11:e7:3a: 4a:5d:4f:41:28:ac:a7:0e:ea:1b:38:0c:70:18:31:e3:05:cf: 15:ce:44:81:b1:bf:b4:0c:bb:c6:59:1d:c1:cc:62:92:37:eb: b9:0f:d6:3f:71:de:5f:9d:1e:d2:42:d5:6a:ea:44:00:f8:d5: 3c:e9:c8:b7:4c:97:50:1a:a0:c3:75:5e:f6:09:a6:08:d6:16: ac:ff:a9:34:73:44:05:60:4b:d3:74:9a:f0:fa:78:d1:63:d1: 93:8e:9e:2f:ff:d4:6e:56:25:e8:0c:04:a4:27:50:c6:ab:5d: e0:5b:c8:5f:22:85:ee:35:67:57:04:d5:a2:db:f3:f5:4c:98: ed:e9:6c:9a:b1:cf:43:45:ae:29:ec:2c:04:ad:8f:8f:f1:69: cc:2c:ba:e1:5c:1e:1c:ee:9b:4c:eb:bf:6c:88:2a:d4:4a:a5: ae:54:66:2c:58:03:51:77:a2:32:63:44:65:cf:50:ea:e6:eb: ea:8a:d9:27:a3:26:02:c5:aa:bd:af:d5:f6:4d:51:c1:0e:a8: 34:b5:01:14:14:a6:de:43:b6:ba:8b:2e:68:1c:41:6d:94:c1: b6:91:84:ec:5e:96:d4:93:af:58:d0:e4:df:f4:34:e5:e9:c1: c0:d8:12:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4K7sOCHqID2cOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MzA3ZTYyMDktYjRjYi00ODUzLTk0MTktNDI0YTRhMjM0ZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OInNUiIfoT2ppmr62iOlntNI6geTSwBRI4o lkqOzHsY0aoBudk2qztupT8tjStj+uig8d1e9QNp4RZ42M6fkLzdO+Y543n6ku5V Ypm357c/we3U3rfHv/H3JsjAHFNXJouUgcXnfe7pAgeVeaXxZAhFnmAJvVy7nxi5 7Of7VVQPXGUc7iodo1Wli55E2w8WydPQIImUh3YPtAhlnADBqLbEkMVshqpXP6aW XRLc3xCoxyO4Cfnz3brRGYqxMq0eWshHpt4GjfSAkFPBwzfhG1uPIcz+jC9s2QNs sMZ7rysHET6VvG1Dz+syG1m/BcfcAJ9qZQCifiS8Q57oXNl1mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5uHm7h7cpyxJLOOuJ7wHzBR6WsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjBmYzQwYjEtZjlkNi0z MzAwLWE4YmEtMzg3ZjlhOTUxYWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPI0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYj9jkTRQRlh1eW92NCWhHnOkpdT0EorKcO6hs4DHAYMeMFzxXORIGx v7QMu8ZZHcHMYpI367kP1j9x3l+dHtJC1WrqRAD41TzpyLdMl1AaoMN1XvYJpgjW Fqz/qTRzRAVgS9N0mvD6eNFj0ZOOni//1G5WJegMBKQnUMarXeBbyF8ihe41Z1cE 1aLb8/VMmO3pbJqxz0NFrinsLAStj4/xacwsuuFcHhzum0zrv2yIKtRKpa5UZixY A1F3ojJjRGXPUOrm6+qK2SejJgLFqr2v1fZNUcEOqDS1ARQUpt5DtrqLLmgcQW2U wbaRhOxeltSTr1jQ5N/0NOXpwcDYEnA= -----END CERTIFICATE-----Generated at Fri Mar 13 05:53:45 2026 by rpki-client