$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8345415-3ea1-3302-af18-e89348c9eac5.roa File: f8345415-3ea1-3302-af18-e89348c9eac5.roa (raw, json) Hash identifier: WLGolWjx3AtA8fXfCp5EnzktXAfpyl5ROgWueNuxVC4= Subject key identifier: 39:EC:D6:2D:D3:C5:92:CD:34:D4:99:D0:0E:FC:28:15:03:8D:24:4A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFBE7F2F30B94016424B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8345415-3ea1-3302-af18-e89348c9eac5.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 72.173.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:be:7f:2f:30:b9:40:16:42:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=2c4fc375-290f-4a19-a95f-3e394503b586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:92:27:7f:11:43:78:ca:9a:7a:c2:45:1f:ee: 59:30:f3:65:ff:0a:b3:2a:66:73:b5:f5:7d:35:a5: 02:c4:1c:25:fb:b5:41:29:13:85:5a:26:b2:a0:21: f8:7c:6e:39:5a:c8:e9:2b:a3:a2:9e:fa:12:e9:e2: e0:0a:ff:72:e1:74:d6:0c:6a:f8:c8:db:1e:41:dc: a0:a8:8d:3b:91:fb:b1:cf:fd:04:ce:2e:e2:d5:3c: 11:8e:9b:81:1f:43:f3:70:0c:c3:f8:56:45:db:f1: 70:54:8e:86:c5:4a:6d:e4:92:47:8a:a7:87:9b:0b: 40:dc:90:f8:92:3c:f1:45:9c:95:7d:07:ae:bf:96: ab:78:fd:0c:b3:60:19:f3:5c:d4:89:40:47:30:31: 7a:31:ad:5e:e5:73:90:05:d2:83:09:99:0d:ab:37: 64:79:14:86:45:b8:1f:c7:52:23:d1:9c:fb:ba:67: 4d:1e:20:07:60:9c:3d:ae:cf:60:cb:92:aa:6b:4f: b5:bb:4f:4f:21:3b:67:9f:59:9f:b8:f8:37:ed:aa: 6c:70:0d:a0:5f:0d:56:5b:7f:b5:2f:c9:89:27:12: f9:a4:3b:d3:b3:3a:6f:c1:af:3b:09:5b:d5:30:3d: d0:b1:87:5c:22:57:be:9a:1c:da:2f:eb:98:5a:5a: 92:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EC:D6:2D:D3:C5:92:CD:34:D4:99:D0:0E:FC:28:15:03:8D:24:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8345415-3ea1-3302-af18-e89348c9eac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:9e:2d:f8:82:96:87:07:1f:25:b7:a6:e8:f5:f2:e2:35:ef: f9:3a:b1:dc:5a:6a:73:6a:ef:a7:66:a5:d6:62:43:3e:7c:17: ba:e4:4d:22:57:e6:a4:a4:93:1e:90:d5:8a:2c:45:6f:13:05: 74:8f:68:98:7c:1e:3f:1a:5b:53:9f:30:d2:07:d0:e6:f3:96: fa:92:d3:44:20:7e:0f:ab:3b:d5:e7:98:c2:76:fd:5d:2e:02: 0f:7b:15:34:a9:1a:7c:db:54:d1:5e:73:27:d6:5e:04:96:75: 90:05:f9:e0:2b:a1:50:99:59:1f:7f:69:03:b7:0f:ab:a0:30: 18:97:32:a0:dd:fe:68:e8:cb:be:75:ac:2f:c6:3b:57:bd:80: 2b:80:7d:76:1e:a3:d1:03:32:6a:96:02:44:8a:58:2a:3a:a2: 5b:37:9c:b2:e3:ac:62:45:37:5f:66:49:71:10:dc:67:71:85: e2:2a:97:91:cf:1b:11:86:1c:ac:76:9d:7b:68:16:41:fe:a9: 9b:10:08:09:db:4a:43:42:4f:c3:c1:93:dc:ae:df:30:92:60: 74:58:79:23:69:f3:ae:67:31:d7:c7:59:b0:9e:c9:37:e5:5d: ec:33:c0:71:67:62:01:8a:fc:68:5c:b0:d3:84:a1:a8:d9:13: bd:35:db:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k375/LzC5QBZCS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MmM0ZmMzNzUtMjkwZi00YTE5LWE5NWYtM2UzOTQ1MDNiNTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpInfxFDeMqaesJFH+5ZMPNl/wqzKmZztfV9 NaUCxBwl+7VBKROFWiayoCH4fG45WsjpK6OinvoS6eLgCv9y4XTWDGr4yNseQdyg qI07kfuxz/0Ezi7i1TwRjpuBH0PzcAzD+FZF2/FwVI6GxUpt5JJHiqeHmwtA3JD4 kjzxRZyVfQeuv5areP0Ms2AZ81zUiUBHMDF6Ma1e5XOQBdKDCZkNqzdkeRSGRbgf x1Ij0Zz7umdNHiAHYJw9rs9gy5Kqa0+1u09PITtnn1mfuPg37apscA2gXw1WW3+1 L8mJJxL5pDvTszpvwa87CVvVMD3QsYdcIle+mhzaL+uYWlqSPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDns1i3TxZLNNNSZ0A78KBUDjSRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjgzNDU0MTUtM2VhMS0z MzAyLWFmMTgtZTg5MzQ4YzllYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESeLfiClocHHyW3puj18uI17/k6sdxaanNq76dmpdZiQz58F7rkTSJX 5qSkkx6Q1YosRW8TBXSPaJh8Hj8aW1OfMNIH0ObzlvqS00Qgfg+rO9XnmMJ2/V0u Ag97FTSpGnzbVNFecyfWXgSWdZAF+eAroVCZWR9/aQO3D6ugMBiXMqDd/mjoy751 rC/GO1e9gCuAfXYeo9EDMmqWAkSKWCo6ols3nLLjrGJFN19mSXEQ3GdxheIql5HP GxGGHKx2nXtoFkH+qZsQCAnbSkNCT8PBk9yu3zCSYHRYeSNp865nMdfHWbCeyTfl XewzwHFnYgGK/GhcsNOEoajZE7012xQ= -----END CERTIFICATE-----Generated at Fri Mar 13 05:54:43 2026 by rpki-client