$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16d980eb-aaf0-394b-966d-6158bafba5e0.roa File: 16d980eb-aaf0-394b-966d-6158bafba5e0.roa (raw, json) Hash identifier: dwdgMsQSF8M6e09qP4ebmVYqi3bkmEeLQRqGDz03P2g= Subject key identifier: 2F:BF:3E:E8:D9:10:0B:4B:59:89:F9:1F:8B:C6:AD:C7:0F:AD:03:E7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C1E544654711CA255D2C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16d980eb-aaf0-394b-966d-6158bafba5e0.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.243.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:1e:54:46:54:71:1c:a2:55:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=ca7041d9-eef6-4b2a-92a0-768fd7c32e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:b8:9b:e0:ea:17:55:15:67:39:91:b8:c9: 31:0f:56:82:42:99:71:cd:17:7e:58:38:8b:fb:fe: 05:58:b5:b9:28:65:45:d5:a2:4e:2e:63:3c:bf:c9: c0:92:b7:a4:93:ac:9c:db:48:67:76:7f:04:14:c8: 3c:8e:52:68:2a:7c:bc:bf:89:18:74:e0:24:ac:04: fc:f6:66:73:4f:8a:fb:e3:78:01:ff:0e:57:6a:fa: 81:ff:c4:fa:8c:53:7b:16:5e:bf:32:a3:69:35:2d: 93:cd:36:7b:3a:70:c7:1c:f9:55:20:0b:29:3c:ef: 49:f8:60:ef:53:e3:9b:f9:b8:ba:6f:49:bf:b7:db: b2:44:e4:65:99:b1:69:1a:f5:f7:8b:ec:8b:d4:8f: 97:43:ec:20:11:68:f4:47:14:cb:0c:25:c7:2d:ba: 99:48:54:ab:d8:92:59:2c:b4:f6:8e:e6:bc:37:8f: 41:1d:52:79:5e:04:9c:29:41:9a:ca:5b:76:02:df: d1:9f:ee:a7:4a:7c:08:6e:85:5a:7f:59:ac:6c:11: 58:86:fb:29:1e:93:52:99:ed:54:6c:7e:c6:3b:42: 64:fc:b0:e3:3f:f9:5c:a1:f2:c0:ab:d8:e5:e2:fb: a2:0b:b7:86:f7:17:6c:be:f1:42:f6:2e:68:4f:70: b3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BF:3E:E8:D9:10:0B:4B:59:89:F9:1F:8B:C6:AD:C7:0F:AD:03:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16d980eb-aaf0-394b-966d-6158bafba5e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:34:b4:b6:f2:a9:bd:ae:f5:c7:f3:43:42:74:f3:cd:f7:f1: 88:73:0f:6b:e2:6d:7e:55:e7:16:91:0a:e8:ad:01:87:35:82: a8:ff:59:2c:11:05:7a:3d:37:d5:01:be:9a:af:00:fd:e0:70: 12:29:11:b1:07:28:49:7e:57:28:74:98:fb:2f:df:9b:a9:ad: 24:90:91:ce:c2:20:21:c4:38:3c:d4:57:c2:17:28:2d:f5:d9: a2:8a:ad:50:91:9a:7e:05:3a:1f:e5:41:50:11:6a:db:a6:8f: 5b:44:e3:0e:94:cc:ba:8d:11:2c:9e:87:54:c7:22:fc:38:db: de:67:46:86:7b:fd:f4:f6:9c:a8:a2:ea:10:00:37:34:b1:97: 9f:95:eb:4e:07:54:98:fa:ec:e9:b9:bf:88:25:23:d7:e3:9f: 6a:07:66:8a:49:7a:4d:9d:e5:ce:e7:ff:67:9e:41:be:d8:0d: ab:ee:94:5d:3f:07:5a:bf:c9:b1:39:6a:33:5d:50:a9:14:a0: d4:7c:85:61:f7:0b:61:93:47:c7:a3:ec:ff:ab:c2:5b:3f:33: 73:f6:d2:4f:b5:83:ff:4b:2d:f9:ad:a5:cf:71:79:6b:fa:bc: b9:f0:b4:a2:94:df:84:0d:22:6b:da:c5:14:30:98:a1:26:2d: ca:c8:b1:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnB5URlRxHKJV0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk Y2E3MDQxZDktZWVmNi00YjJhLTkyYTAtNzY4ZmQ3YzMyZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomC4m+DqF1UVZzmRuMkxD1aCQplxzRd+WDiL +/4FWLW5KGVF1aJOLmM8v8nAkrekk6yc20hndn8EFMg8jlJoKny8v4kYdOAkrAT8 9mZzT4r743gB/w5XavqB/8T6jFN7Fl6/MqNpNS2TzTZ7OnDHHPlVIAspPO9J+GDv U+Ob+bi6b0m/t9uyRORlmbFpGvX3i+yL1I+XQ+wgEWj0RxTLDCXHLbqZSFSr2JJZ LLT2jua8N49BHVJ5XgScKUGaylt2At/Rn+6nSnwIboVaf1msbBFYhvspHpNSme1U bH7GO0Jk/LDjP/lcofLAq9jl4vuiC7eG9xdsvvFC9i5oT3CzkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+/PujZEAtLWYn5H4vGrccPrQPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTZkOTgwZWItYWFmMC0z OTRiLTk2NmQtNjE1OGJhZmJhNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG00tLbyqb2u9cfzQ0J088338YhzD2vibX5V5xaRCuitAYc1gqj/WSwR BXo9N9UBvpqvAP3gcBIpEbEHKEl+Vyh0mPsv35uprSSQkc7CICHEODzUV8IXKC31 2aKKrVCRmn4FOh/lQVARatumj1tE4w6UzLqNESyeh1THIvw4295nRoZ7/fT2nKii 6hAANzSxl5+V604HVJj67Om5v4glI9fjn2oHZopJek2d5c7n/2eeQb7YDavulF0/ B1q/ybE5ajNdUKkUoNR8hWH3C2GTR8ej7P+rwls/M3P20k+1g/9LLfmtpc9xeWv6 vLnwtKKU34QNImvaxRQwmKEmLcrIsZY= -----END CERTIFICATE-----Generated at Sat Jun 13 23:41:52 2026 by rpki-client