$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16a5ede4-a665-30f9-8ea6-08275fd9d8e8.roa File: 16a5ede4-a665-30f9-8ea6-08275fd9d8e8.roa (raw, json) Hash identifier: M63G9fKs67dpvkg6Pc8X4nIm1rjhm1mxuECDO/hNSKQ= Subject key identifier: AD:67:06:B0:0D:AE:6E:7C:8B:20:98:C3:0E:86:FB:DA:72:1A:CC:BF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79FD6A812D483512051F540 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16a5ede4-a665-30f9-8ea6-08275fd9d8e8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.243.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:d6:a8:12:d4:83:51:20:51:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d52c9bd6-49ea-4483-a96f-3375f28ae2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e1:99:a9:71:02:72:89:96:e6:44:ff:e1:d9: 4b:40:d5:a3:ef:50:28:73:24:81:39:95:b2:89:78: c5:0e:0c:1e:9d:be:d1:01:55:e7:30:3a:54:07:d6: 79:31:d9:0c:55:96:e6:9a:f8:02:ce:0d:20:33:b7: 10:25:d1:08:74:20:6e:3d:dc:5e:ad:4a:cb:81:14: e7:4c:f2:d3:08:ed:82:a5:20:34:b7:4a:de:cb:8a: 9d:5a:d9:c9:70:47:f4:c2:1c:f2:3a:05:d1:f9:08: 82:4c:c3:00:89:1f:d9:b1:86:4c:e8:e7:39:46:ab: 63:1b:a8:3e:8f:23:97:d3:69:94:99:ba:fd:0f:2b: 55:95:6f:69:e7:f4:5a:14:8e:bf:66:5b:44:f7:4d: a5:cc:50:f5:b2:34:fa:d3:f7:b3:02:d8:b0:55:c7: 1c:a1:ad:d4:1c:88:09:96:b1:7e:c5:03:4a:32:12: ff:24:40:55:06:13:36:35:29:51:de:ab:fe:29:04: 32:61:2d:49:83:cf:95:0b:1b:42:2e:a0:08:01:65: b6:d3:7d:ad:7e:7f:8d:1d:68:c4:a7:a8:8e:21:4b: 54:d4:79:55:50:52:ed:d4:f9:20:ca:54:30:63:09: 89:c3:b5:de:d0:b8:f7:f1:d9:aa:d7:c1:bd:f0:0f: 24:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:67:06:B0:0D:AE:6E:7C:8B:20:98:C3:0E:86:FB:DA:72:1A:CC:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16a5ede4-a665-30f9-8ea6-08275fd9d8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:8e:39:af:3b:f7:10:ab:13:c2:78:a3:b1:1b:6d:86:c1:c5: e5:90:f7:6d:a8:3a:0e:1d:0c:e4:22:ad:c0:65:b9:14:ce:58: d1:ae:8e:bd:63:e2:6d:c2:2c:43:42:e8:b3:16:5d:68:3e:01: e4:eb:a0:d9:78:30:36:fc:52:f1:dc:c4:9c:e5:63:3e:10:2b: 2c:28:de:16:51:43:29:90:96:0c:0c:a8:88:c0:68:b9:b5:be: 89:f9:5e:07:c5:ec:f7:2b:ec:66:d1:34:0a:2f:94:fd:e3:dd: 03:c7:7d:8f:21:9a:16:26:ac:df:4c:15:f9:4b:2f:ec:12:98: 17:c9:f2:bf:b5:c2:b3:e8:ec:a4:0b:83:ea:3f:c3:dd:b9:e9: f7:2f:a6:8c:3c:fa:95:2c:e2:a8:f3:58:21:e7:77:e0:c1:b4: e3:84:04:36:27:f5:ad:be:96:a7:7b:2e:ac:df:1a:54:fe:3c: e1:b4:db:dd:a3:da:f8:3f:b4:22:28:fe:25:4e:00:19:cb:79: c9:d7:a2:7e:80:e8:72:cf:05:33:d5:dc:e7:e1:f9:d1:46:31: 01:77:5a:3a:8c:a3:1b:03:49:fb:41:41:a7:e0:c5:2f:1b:6b: 98:f0:be:61:6f:7f:92:3a:91:28:40:0f:ab:1f:f3:f3:af:e5: 2c:42:e8:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn9aoEtSDUSBR9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDUyYzliZDYtNDllYS00NDgzLWE5NmYtMzM3NWYyOGFlMmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+GZqXECcomW5kT/4dlLQNWj71AocySBOZWy iXjFDgwenb7RAVXnMDpUB9Z5MdkMVZbmmvgCzg0gM7cQJdEIdCBuPdxerUrLgRTn TPLTCO2CpSA0t0rey4qdWtnJcEf0whzyOgXR+QiCTMMAiR/ZsYZM6Oc5RqtjG6g+ jyOX02mUmbr9DytVlW9p5/RaFI6/ZltE902lzFD1sjT60/ezAtiwVcccoa3UHIgJ lrF+xQNKMhL/JEBVBhM2NSlR3qv+KQQyYS1Jg8+VCxtCLqAIAWW2032tfn+NHWjE p6iOIUtU1HlVUFLt1PkgylQwYwmJw7Xe0Lj38dmq18G98A8kdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1nBrANrm58iyCYww6G+9pyGsy/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTZhNWVkZTQtYTY2NS0z MGY5LThlYTYtMDgyNzVmZDlkOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM2OOa879xCrE8J4o7EbbYbBxeWQ922oOg4dDOQircBluRTOWNGujr1j 4m3CLENC6LMWXWg+AeTroNl4MDb8UvHcxJzlYz4QKywo3hZRQymQlgwMqIjAaLm1 von5XgfF7Pcr7GbRNAovlP3j3QPHfY8hmhYmrN9MFflLL+wSmBfJ8r+1wrPo7KQL g+o/w9256fcvpow8+pUs4qjzWCHnd+DBtOOEBDYn9a2+lqd7LqzfGlT+POG0292j 2vg/tCIo/iVOABnLecnXon6A6HLPBTPV3Ofh+dFGMQF3WjqMoxsDSftBQafgxS8b a5jwvmFvf5I6kShAD6sf8/Ov5SxC6Gg= -----END CERTIFICATE-----Generated at Wed Jul 29 04:16:15 2026 by rpki-client