$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a4c20b5-cd4b-396c-839a-2b9c3a5e3de2.roa File: 0a4c20b5-cd4b-396c-839a-2b9c3a5e3de2.roa (raw, json) Hash identifier: KtnpQAuozq7qZ3oHutCAj9nPyjaxrSI3/ImXAAlCDwo= Subject key identifier: 94:19:BC:FB:D4:4C:68:E5:EA:69:90:80:F7:80:46:75:8B:26:9B:5E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B69DCD04AE7AE12C6D900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a4c20b5-cd4b-396c-839a-2b9c3a5e3de2.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 72.173.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:69:dc:d0:4a:e7:ae:12:c6:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=dbd5c307-1c17-4341-9647-1835c9b46ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b3:34:87:08:33:29:e1:38:15:dd:1e:6b:71: f8:29:3e:0f:15:c7:bd:6b:25:38:c7:fa:31:7a:db: 55:62:3a:4e:49:0c:1e:37:88:ea:92:1c:5b:bb:57: 86:b4:fd:ea:42:c2:dd:e7:68:81:ad:7d:01:89:2b: f1:e3:0a:07:46:79:dc:40:f9:16:4e:cf:63:47:24: fe:a3:0a:c8:06:f6:9c:55:2c:d0:59:e5:0e:31:ae: 53:bd:63:76:c3:97:a9:61:75:2d:14:43:4a:a4:1f: 11:11:ce:70:8c:f7:b1:a6:e6:b5:b1:4e:95:7f:d7: 22:b3:66:51:7e:2d:e1:60:ce:8c:02:ac:49:10:2d: 1b:57:6a:a1:4a:84:27:6b:41:5a:fa:80:9f:9c:ab: 33:7b:01:6c:6f:95:7c:d5:b1:7f:e2:96:27:3a:38: 38:1c:3a:85:7a:91:3e:f0:d2:e2:df:f8:ca:a8:95: cd:18:e7:ea:fa:f0:14:d4:f9:af:3a:1b:a2:f0:04: 57:3a:57:8d:0b:61:7a:ce:51:0f:4c:39:cf:c9:c8: c3:b6:5c:a6:b4:05:f8:94:a1:59:66:fc:9c:06:f5: 88:e1:b9:21:6f:7c:f1:ae:5c:b7:95:16:34:7e:65: a9:72:38:50:6f:5f:be:b7:93:7e:1b:b3:35:7c:bd: b0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:19:BC:FB:D4:4C:68:E5:EA:69:90:80:F7:80:46:75:8B:26:9B:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a4c20b5-cd4b-396c-839a-2b9c3a5e3de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:01:a6:cf:43:b4:10:eb:ee:56:52:c8:31:80:a0:8c:82:b9: 3d:7f:b8:7a:97:98:fe:f6:4d:90:e2:49:55:1c:07:45:69:b1: 20:24:e4:2f:2b:cd:d5:22:8a:4e:24:a7:4a:f4:95:24:07:ab: eb:94:00:8a:93:ed:52:d6:cb:d3:63:98:d9:a0:4b:55:3e:4d: 86:00:97:82:1f:48:59:88:81:ca:95:05:57:34:60:22:3b:95: c5:c1:7b:83:25:4c:5e:b8:ce:49:05:17:ff:cc:62:64:65:5c: 1a:5b:dd:f2:c1:81:dc:01:06:ae:f7:ec:8e:37:09:3f:47:cb: 9f:33:7e:65:dc:b7:0a:19:82:18:e8:df:ab:df:f5:95:9e:41: 78:ef:dc:4c:aa:7a:b8:89:f0:80:3f:be:e1:0e:68:81:ba:5c: 0e:e3:5a:75:75:9c:fe:84:ab:73:67:82:f5:ce:19:80:89:4f: f1:4c:51:71:66:c1:14:d4:4b:77:ce:39:49:45:af:d9:94:a7: 10:03:22:a5:bd:9c:d0:19:54:46:e0:93:4c:b5:37:7c:2f:42: a7:5f:a0:6c:ac:0c:61:47:8b:2e:13:7e:56:dc:3e:98:47:8d: 1a:19:e3:ba:f8:16:43:0d:41:7c:1d:17:4a:e3:bf:33:b8:f4: d3:4b:5d:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm2nc0ErnrhLG2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZGJkNWMzMDctMWMxNy00MzQxLTk2NDctMTgzNWM5YjQ2Y2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbM0hwgzKeE4Fd0ea3H4KT4PFce9ayU4x/ox ettVYjpOSQweN4jqkhxbu1eGtP3qQsLd52iBrX0BiSvx4woHRnncQPkWTs9jRyT+ owrIBvacVSzQWeUOMa5TvWN2w5epYXUtFENKpB8REc5wjPexpua1sU6Vf9cis2ZR fi3hYM6MAqxJEC0bV2qhSoQna0Fa+oCfnKszewFsb5V81bF/4pYnOjg4HDqFepE+ 8NLi3/jKqJXNGOfq+vAU1PmvOhui8ARXOleNC2F6zlEPTDnPycjDtlymtAX4lKFZ ZvycBvWI4bkhb3zxrly3lRY0fmWpcjhQb1++t5N+G7M1fL2wDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQZvPvUTGjl6mmQgPeARnWLJpteMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGE0YzIwYjUtY2Q0Yi0z OTZjLTgzOWEtMmI5YzNhNWUzZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUBps9DtBDr7lZSyDGAoIyCuT1/uHqXmP72TZDiSVUcB0VpsSAk5C8r zdUiik4kp0r0lSQHq+uUAIqT7VLWy9NjmNmgS1U+TYYAl4IfSFmIgcqVBVc0YCI7 lcXBe4MlTF64zkkFF//MYmRlXBpb3fLBgdwBBq737I43CT9Hy58zfmXctwoZghjo 36vf9ZWeQXjv3EyqeriJ8IA/vuEOaIG6XA7jWnV1nP6Eq3NngvXOGYCJT/FMUXFm wRTUS3fOOUlFr9mUpxADIqW9nNAZVEbgk0y1N3wvQqdfoGysDGFHiy4TflbcPphH jRoZ47r4FkMNQXwdF0rjvzO49NNLXcI= -----END CERTIFICATE-----Generated at Sat Jun 13 17:49:10 2026 by rpki-client