$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b380a35-bfe8-313e-91f4-1bcec229e986.roa File: 2b380a35-bfe8-313e-91f4-1bcec229e986.roa (raw, json) Hash identifier: DlAR+I0wBq9yxrN332lM8LAwKHhmU0jcNitRapWx7Dw= Subject key identifier: DD:96:48:41:60:FD:78:FC:A7:D2:26:9A:D5:05:39:AB:20:B8:75:77 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059BE2DF2DDEEDBBB9EFB480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b380a35-bfe8-313e-91f4-1bcec229e986.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 72.173.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:e2:df:2d:de:ed:bb:b9:ef:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=eecd6b15-db1f-4399-be97-1b7c5347de22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:ff:dd:87:28:a2:51:27:e0:4c:a3:8d:84: 9a:0c:3d:76:a1:a8:1c:78:b6:d3:c0:41:f8:6e:e4: 27:ef:62:94:5d:23:f9:a0:a2:03:97:e4:9c:d7:e4: 4c:8d:60:0f:95:bc:90:31:f6:2b:6d:c0:5f:e0:7b: a6:18:29:a2:71:7e:35:14:39:6e:2f:dd:d8:e9:2f: a9:f4:e0:8c:76:2f:64:46:04:16:07:96:07:bf:33: e7:87:e3:f8:03:51:4f:75:e4:53:f7:a2:17:3c:e1: 12:fc:72:b1:18:3d:77:0c:56:cb:99:5a:d4:7f:3f: 57:28:c4:1e:bf:8d:59:78:15:78:9d:ce:4f:94:e0: 1f:27:9e:d1:1a:21:d8:a7:73:c5:ce:00:fa:7c:e2: 1b:13:a5:49:ab:7a:3c:50:fc:13:f4:f3:c3:49:b4: 54:ef:a7:b7:9e:7d:54:4c:7b:78:2c:1c:d1:dc:b5: 4f:ca:f3:2c:d8:9c:43:49:68:fe:5e:79:5d:cf:ae: 0e:2a:92:c5:00:a4:2a:b1:78:02:d6:3e:a2:94:83: 49:15:67:24:45:66:cd:f9:fe:72:d3:86:da:4f:ed: 64:27:05:5c:64:0e:27:3e:f6:fd:e0:da:01:b2:98: 33:bb:ca:5d:2f:af:c3:46:f0:e1:61:46:25:78:a4: b3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:96:48:41:60:FD:78:FC:A7:D2:26:9A:D5:05:39:AB:20:B8:75:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b380a35-bfe8-313e-91f4-1bcec229e986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e8:93:c2:5b:32:f2:f2:76:03:be:ed:7e:e4:9a:f5:ad:b8: 81:d1:ed:3c:dd:71:52:41:e7:cb:60:16:b7:ac:7c:c3:9d:97: b3:9f:b4:5f:09:cc:52:22:5d:21:61:5f:ec:58:0d:b7:88:ff: 36:65:b2:9c:e8:2c:4b:30:63:34:ba:cf:b5:ef:47:c6:16:dc: a3:4b:78:bf:46:50:1f:34:34:46:63:37:dc:c2:51:1d:8b:ab: 3c:d8:98:07:11:9c:db:f7:56:66:c9:3e:e4:48:54:f4:ed:e9: 17:9e:c9:45:30:3a:75:75:2b:3f:f2:dc:79:c9:54:87:b0:60: d8:92:e1:71:22:3b:41:c7:bd:d9:2f:5a:16:b9:45:22:1d:29: 8f:e0:76:a8:fc:f6:94:f6:e0:39:dc:25:ef:c7:94:b8:20:c6: c6:62:1e:13:be:f2:e6:f4:ff:59:a4:71:b3:5c:f1:c7:8a:85: 03:b1:00:1e:9f:e7:01:50:6b:d9:2f:bb:b8:6d:8d:52:de:66: 2d:59:17:93:1c:0f:ae:bc:6b:6d:fc:bd:ac:46:ed:cb:e8:46: a8:8f:28:d8:14:47:1b:e1:84:51:8e:23:4c:ab:a5:21:20:81: da:cb:9b:2d:b1:30:27:d7:c9:92:f4:71:40:40:df:e0:15:55: 32:9c:8e:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm+LfLd7tu7nvtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZWVjZDZiMTUtZGIxZi00Mzk5LWJlOTctMWI3YzUzNDdkZTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw97/3YcoolEn4EyjjYSaDD12oagceLbTwEH4 buQn72KUXSP5oKIDl+Sc1+RMjWAPlbyQMfYrbcBf4HumGCmicX41FDluL93Y6S+p 9OCMdi9kRgQWB5YHvzPnh+P4A1FPdeRT96IXPOES/HKxGD13DFbLmVrUfz9XKMQe v41ZeBV4nc5PlOAfJ57RGiHYp3PFzgD6fOIbE6VJq3o8UPwT9PPDSbRU76e3nn1U THt4LBzR3LVPyvMs2JxDSWj+Xnldz64OKpLFAKQqsXgC1j6ilINJFWckRWbN+f5y 04baT+1kJwVcZA4nPvb94NoBspgzu8pdL6/DRvDhYUYleKSzOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2WSEFg/Xj8p9ImmtUFOasguHV3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmIzODBhMzUtYmZlOC0z MTNlLTkxZjQtMWJjZWMyMjllOTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADok8JbMvLydgO+7X7kmvWtuIHR7TzdcVJB58tgFresfMOdl7OftF8J zFIiXSFhX+xYDbeI/zZlspzoLEswYzS6z7XvR8YW3KNLeL9GUB80NEZjN9zCUR2L qzzYmAcRnNv3VmbJPuRIVPTt6ReeyUUwOnV1Kz/y3HnJVIewYNiS4XEiO0HHvdkv Wha5RSIdKY/gdqj89pT24DncJe/HlLggxsZiHhO+8ub0/1mkcbNc8ceKhQOxAB6f 5wFQa9kvu7htjVLeZi1ZF5McD668a238vaxG7cvoRqiPKNgURxvhhFGOI0yrpSEg gdrLmy2xMCfXyZL0cUBA3+AVVTKcjnM= -----END CERTIFICATE-----Generated at Sat Jun 13 20:27:30 2026 by rpki-client