$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2cf58f97-9f7a-3605-9479-6caad20a6fb2.roa File: 2cf58f97-9f7a-3605-9479-6caad20a6fb2.roa (raw, json) Hash identifier: eBoDqCaVue0MwMbh2Ew/vpjt+v01cEbTicwsE2w6wzM= Subject key identifier: 22:43:49:B3:86:E3:FC:E3:22:6B:CA:5D:C1:41:01:39:3C:C5:C5:CB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059BE3A736E1F514D7453880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2cf58f97-9f7a-3605-9479-6caad20a6fb2.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 72.173.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:e3:a7:36:e1:f5:14:d7:45:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=10dc0867-44c2-48f0-aaf4-46ba35f3b960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:32:ba:9e:e6:38:c4:43:36:b8:f8:28:46:0a: bb:fb:35:7a:cf:8c:09:fc:c8:2b:60:d6:bd:b9:64: 32:03:04:90:3e:16:40:46:55:66:2d:9f:15:71:44: 93:da:9d:98:50:68:b1:00:6a:ec:6e:ea:8f:76:8c: 1a:5f:02:74:ac:97:6e:ca:4d:23:01:de:17:3e:ee: 4d:1a:32:f9:13:b4:19:99:78:d8:b8:94:4e:1d:13: ae:90:c1:32:ab:ad:a2:2c:83:87:b8:92:5c:29:e6: b1:42:c5:1a:89:ae:d7:a6:54:7f:00:ba:cb:e0:91: f7:2b:81:ed:43:40:1e:a7:3c:1b:eb:f4:19:39:ef: 52:66:4c:d1:83:e9:6c:2b:05:32:28:28:53:0c:17: bc:c9:25:15:18:f4:0f:ef:2e:33:96:00:79:21:a5: 29:dc:e8:37:6f:f9:06:75:e3:fb:59:fe:a0:65:d5: be:59:3e:2f:44:a3:11:40:8b:45:6a:78:cc:55:0d: 3a:51:4d:d2:04:01:12:ae:17:30:f5:06:96:67:d3: bc:5b:da:67:38:a6:e6:62:1c:45:7a:64:ec:34:24: ff:66:eb:e9:14:d4:47:1d:dd:65:02:70:49:f0:17: 98:f1:a1:a0:50:cb:f8:20:5a:35:f2:25:83:d8:e3: 6c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:43:49:B3:86:E3:FC:E3:22:6B:CA:5D:C1:41:01:39:3C:C5:C5:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2cf58f97-9f7a-3605-9479-6caad20a6fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:d1:ea:89:7c:9c:4d:87:f4:ce:88:fc:dd:52:7a:1d:dd:2b: 13:45:14:aa:42:48:d1:a0:81:5a:7b:9d:7e:13:ca:d4:74:9c: 80:bf:ea:54:c9:1d:30:17:39:42:b2:f8:d0:6a:7e:a1:af:7a: de:19:e1:57:f8:7a:f0:be:67:b7:2a:d2:a4:a2:b1:34:bf:23: 82:7f:4c:5f:8c:be:fa:20:13:d3:bb:d9:d3:6f:8a:34:23:92: ae:ed:b2:f6:0b:0c:dc:36:f7:77:49:30:c4:4c:04:41:1c:95: b3:c1:7b:57:52:ce:af:0a:cb:ab:b2:61:96:4a:94:5c:f9:0e: 6d:d1:f8:03:a0:aa:05:14:e0:76:60:e4:6c:9b:e5:af:26:a5: 53:b2:db:af:92:ae:f9:48:78:71:77:53:c4:8b:18:35:59:6f: bf:6a:f9:ef:51:79:2c:9b:7a:48:f8:c4:7a:7a:aa:c4:12:1b: bc:bc:2c:d0:58:44:14:5b:54:5e:66:12:01:d8:97:e0:65:85: 06:fc:a6:85:89:c6:72:fe:ae:2a:06:53:59:15:db:81:12:fa: 62:98:9d:11:0c:d5:45:ef:1e:bd:d4:e1:59:4c:d7:d3:4f:23: 68:b8:63:b1:dd:d2:9f:8c:38:96:a3:43:a8:4f:2e:ad:de:c8: 16:05:61:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm+OnNuH1FNdFOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MTBkYzA4NjctNDRjMi00OGYwLWFhZjQtNDZiYTM1ZjNiOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljK6nuY4xEM2uPgoRgq7+zV6z4wJ/MgrYNa9 uWQyAwSQPhZARlVmLZ8VcUST2p2YUGixAGrsbuqPdowaXwJ0rJduyk0jAd4XPu5N GjL5E7QZmXjYuJROHROukMEyq62iLIOHuJJcKeaxQsUaia7XplR/ALrL4JH3K4Ht Q0Aepzwb6/QZOe9SZkzRg+lsKwUyKChTDBe8ySUVGPQP7y4zlgB5IaUp3Og3b/kG deP7Wf6gZdW+WT4vRKMRQItFanjMVQ06UU3SBAESrhcw9QaWZ9O8W9pnOKbmYhxF emTsNCT/ZuvpFNRHHd1lAnBJ8BeY8aGgUMv4IFo18iWD2ONs+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJDSbOG4/zjImvKXcFBATk8xcXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmNmNThmOTctOWY3YS0z NjA1LTk0NzktNmNhYWQyMGE2ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK02MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHR6ol8nE2H9M6I/N1Seh3dKxNFFKpCSNGggVp7nX4TytR0nIC/6lTJ HTAXOUKy+NBqfqGvet4Z4Vf4evC+Z7cq0qSisTS/I4J/TF+MvvogE9O72dNvijQj kq7tsvYLDNw293dJMMRMBEEclbPBe1dSzq8Ky6uyYZZKlFz5Dm3R+AOgqgUU4HZg 5Gyb5a8mpVOy26+SrvlIeHF3U8SLGDVZb79q+e9ReSybekj4xHp6qsQSG7y8LNBY RBRbVF5mEgHYl+BlhQb8poWJxnL+rioGU1kV24ES+mKYnREM1UXvHr3U4VlM19NP I2i4Y7Hd0p+MOJajQ6hPLq3eyBYFYRU= -----END CERTIFICATE-----Generated at Sat Jun 13 20:16:17 2026 by rpki-client