$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04cdeaed-a0ae-3016-bf2e-38e99b2fbea7.roa File: 04cdeaed-a0ae-3016-bf2e-38e99b2fbea7.roa (raw, json) Hash identifier: /Faf4k4hOpYyBKl3rP5LET5U4IXtWjVUyubESHrfge4= Subject key identifier: D8:AE:EF:15:41:90:AA:0C:7C:D6:29:78:F6:40:58:E0:88:FE:08:A7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B9CB6457129980925F880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04cdeaed-a0ae-3016-bf2e-38e99b2fbea7.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.243.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:9c:b6:45:71:29:98:09:25:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=8587f645-e066-4a09-a0f6-d156e0849bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:02:97:bc:bb:6c:f5:08:f6:44:bf:da:30:c0: b7:7c:b1:4a:e5:d3:fe:1c:b2:f4:8f:b9:af:b9:92: dd:cb:e1:8c:e8:72:28:e3:d0:06:57:7c:8e:26:5c: bc:38:17:1d:a9:4e:c2:31:fa:74:98:89:4f:1c:6f: c3:99:f6:0b:7e:48:6e:9b:fd:95:da:ec:ea:ca:38: 63:10:a1:b7:83:d8:c9:7f:4e:27:cd:3d:c8:86:fd: 55:31:1c:32:eb:49:61:1f:4f:cd:53:86:c6:86:9a: 4e:a7:91:e2:f0:4a:b2:25:e2:79:3e:8e:61:ba:a4: f6:38:17:19:96:9b:23:7e:be:03:f4:cc:b1:38:51: c9:b9:39:3e:0f:35:94:7a:70:71:30:c4:d9:94:93: d1:e5:a9:83:09:f5:83:91:ba:56:20:68:db:9b:e7: 31:da:36:62:a5:6f:aa:7a:89:4f:13:92:e1:ed:94: ed:95:c0:16:9a:2f:3f:3f:cd:e5:4b:be:92:22:01: b4:af:df:88:f5:d3:11:70:22:7a:8d:92:68:77:99: 96:e2:7a:30:07:1e:41:a4:e2:cd:fc:f6:a8:b8:3b: 56:88:d2:49:c4:d8:7e:1a:9e:b6:60:59:ad:66:09: b2:35:48:8e:b2:5e:8a:a2:bb:86:89:2a:aa:06:52: 2f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AE:EF:15:41:90:AA:0C:7C:D6:29:78:F6:40:58:E0:88:FE:08:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04cdeaed-a0ae-3016-bf2e-38e99b2fbea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:4c:b8:eb:94:c4:37:fc:07:4e:29:f3:bc:26:02:c6:e6:cb: bc:27:07:f5:13:f8:57:93:ee:b2:6d:d9:d6:47:52:6d:15:63: 0f:51:f0:8c:de:1c:ee:41:ce:5f:8c:50:7b:52:56:11:28:87: 20:5e:8c:8d:79:fd:ba:ed:c2:42:a5:46:9f:45:c9:fe:df:5e: b8:cc:88:0d:c8:4f:35:2c:bd:ed:33:cb:51:47:25:97:53:d1: e5:20:9d:55:20:2e:65:1e:be:9c:a6:e0:a6:04:d7:f1:6d:9c: ee:84:b4:cd:b4:07:31:46:ca:24:4b:55:b3:e9:24:f1:2d:65: ab:d6:f8:e7:40:8c:78:4d:8c:33:08:62:ad:ec:ce:ca:67:69: 1c:21:24:35:c4:7a:76:db:c8:d8:32:c2:db:00:e6:f7:5b:4b: 6c:67:9c:aa:ef:de:9f:8f:60:c5:9e:d4:83:59:79:a0:41:9e: 03:29:da:df:7a:a7:62:3f:d4:ac:1e:a3:57:7c:94:52:b9:b0: a2:0a:ef:7c:f4:49:55:a3:ec:f2:a8:90:4b:28:63:dc:e5:35: 78:22:8e:3c:e9:e9:d0:a2:b7:ba:2b:d0:7e:58:3a:05:3a:4a: 02:ab:ae:c8:82:9d:2d:12:64:41:2d:0f:a0:91:cb:2d:7c:78: c4:18:15:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm5y2RXEpmAkl+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ODU4N2Y2NDUtZTA2Ni00YTA5LWEwZjYtZDE1NmUwODQ5YmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgKXvLts9Qj2RL/aMMC3fLFK5dP+HLL0j7mv uZLdy+GM6HIo49AGV3yOJly8OBcdqU7CMfp0mIlPHG/DmfYLfkhum/2V2uzqyjhj EKG3g9jJf04nzT3Ihv1VMRwy60lhH0/NU4bGhppOp5Hi8EqyJeJ5Po5huqT2OBcZ lpsjfr4D9MyxOFHJuTk+DzWUenBxMMTZlJPR5amDCfWDkbpWIGjbm+cx2jZipW+q eolPE5Lh7ZTtlcAWmi8/P83lS76SIgG0r9+I9dMRcCJ6jZJod5mW4nowBx5BpOLN /PaouDtWiNJJxNh+Gp62YFmtZgmyNUiOsl6KoruGiSqqBlIvQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiu7xVBkKoMfNYpePZAWOCI/ginMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDRjZGVhZWQtYTBhZS0z MDE2LWJmMmUtMzhlOTliMmZiZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZMuOuUxDf8B04p87wmAsbmy7wnB/UT+FeT7rJt2dZHUm0VYw9R8Ize HO5Bzl+MUHtSVhEohyBejI15/brtwkKlRp9Fyf7fXrjMiA3ITzUsve0zy1FHJZdT 0eUgnVUgLmUevpym4KYE1/FtnO6EtM20BzFGyiRLVbPpJPEtZavW+OdAjHhNjDMI Yq3szspnaRwhJDXEenbbyNgywtsA5vdbS2xnnKrv3p+PYMWe1INZeaBBngMp2t96 p2I/1Kweo1d8lFK5sKIK73z0SVWj7PKokEsoY9zlNXgijjzp6dCit7or0H5YOgU6 SgKrrsiCnS0SZEEtD6CRyy18eMQYFRs= -----END CERTIFICATE-----Generated at Sat Jun 13 14:55:44 2026 by rpki-client