$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d8621e9-9f84-31cf-9d75-505b44079a2a.roa File: 2d8621e9-9f84-31cf-9d75-505b44079a2a.roa (raw, json) Hash identifier: 1P/0XVjjK8wfP7rrE8+v5Gag+n7oT5EF1lf0R4eWxys= Subject key identifier: 79:A9:39:27:81:46:0B:8A:D2:E6:D9:34:28:D1:44:C8:FA:C5:F9:57 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C141D2F120395B3A76E00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d8621e9-9f84-31cf-9d75-505b44079a2a.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.242.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:14:1d:2f:12:03:95:b3:a7:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=65aeb31c-c64a-445d-8cc8-a17b9079e28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:51:dc:d8:ee:37:12:fe:1b:7e:1e:f1:4a:b1: 56:75:8a:47:ee:a3:f3:47:cc:37:50:f6:34:39:00: 98:86:3c:50:5c:bd:7e:bc:87:29:a9:d1:eb:2b:91: 9e:6e:30:36:6d:2e:e9:f3:57:eb:40:8d:17:bc:35: c6:c9:d8:48:db:c0:3a:0e:fc:ad:f8:57:82:a0:b6: 12:08:1e:69:ea:7f:87:00:c9:15:63:b4:17:8b:4f: e9:ad:f0:2c:b1:fc:dc:25:3f:d1:59:c1:06:05:68: 17:88:41:a8:3d:62:a0:d7:a6:28:39:57:97:f2:5c: e7:e3:05:59:2c:88:b7:66:7e:71:03:83:03:7f:6e: 9b:b5:fd:d3:1e:e2:e8:a7:6b:bb:1d:e5:be:23:d7: ad:2c:53:18:1d:e6:e3:61:fd:9c:4d:d2:1a:9c:a0: 31:b7:a8:1c:69:4e:e5:3d:e6:aa:aa:3e:ba:25:4e: 76:e3:7b:24:c7:d9:e2:5c:fb:b0:14:4c:12:28:d2: 12:6d:e4:d6:09:fe:e4:d4:fe:3b:fd:d5:8f:0d:e9: 1f:46:53:27:43:ac:ec:b6:d5:8f:3d:31:b9:d2:ea: b7:0f:31:0a:cd:b3:1f:71:d5:7f:3d:88:98:68:d0: c3:67:cc:a0:78:b9:2f:bd:e3:37:99:56:94:3a:f6: 39:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A9:39:27:81:46:0B:8A:D2:E6:D9:34:28:D1:44:C8:FA:C5:F9:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d8621e9-9f84-31cf-9d75-505b44079a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:fb:37:03:91:91:88:ee:d1:e6:ed:9b:62:a3:9d:cc:83:f9: 73:a1:59:a2:2b:41:44:32:58:29:73:71:29:08:d3:ce:fc:c0: f7:fe:c9:85:68:ea:f4:73:64:a8:35:09:0d:d0:e1:84:e2:5a: f1:69:03:13:d7:95:3f:9e:80:ca:e1:0a:21:ad:58:ae:63:70: f5:a7:49:73:c8:aa:c6:e4:8b:da:63:e8:b0:d2:44:77:29:3c: 27:bf:b0:06:6d:ff:fa:e3:ea:e0:76:e9:06:de:a4:aa:07:4e: ff:3c:9e:af:67:0d:e3:46:0b:0f:51:ff:53:90:a5:1a:a5:58: d8:01:32:b5:11:3a:5f:e9:7f:87:fa:62:75:22:16:b1:24:75: 75:35:f5:12:44:82:0b:73:90:52:64:57:47:2e:0d:0c:f5:88: 08:cd:6e:62:13:68:fb:02:dc:d2:53:e6:cc:27:c2:8f:5e:86: 2a:e4:ca:9d:6e:fa:d9:cc:23:6b:8d:c8:ef:e8:ce:0f:dd:87: 9e:43:95:da:ec:b8:95:18:41:8d:31:b6:cf:51:46:a8:70:11: b8:00:f9:82:ca:d1:2f:57:e2:33:3f:7d:33:bf:a3:60:b3:ff: e2:63:d9:8f:7b:59:09:b1:df:57:29:d9:d7:49:de:48:bc:c1: 8c:bc:30:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnBQdLxIDlbOnbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NjVhZWIzMWMtYzY0YS00NDVkLThjYzgtYTE3YjkwNzllMjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlHc2O43Ev4bfh7xSrFWdYpH7qPzR8w3UPY0 OQCYhjxQXL1+vIcpqdHrK5GebjA2bS7p81frQI0XvDXGydhI28A6Dvyt+FeCoLYS CB5p6n+HAMkVY7QXi0/prfAssfzcJT/RWcEGBWgXiEGoPWKg16YoOVeX8lzn4wVZ LIi3Zn5xA4MDf26btf3THuLop2u7HeW+I9etLFMYHebjYf2cTdIanKAxt6gcaU7l Peaqqj66JU5243skx9niXPuwFEwSKNISbeTWCf7k1P47/dWPDekfRlMnQ6zsttWP PTG50uq3DzEKzbMfcdV/PYiYaNDDZ8ygeLkvveM3mVaUOvY5OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmpOSeBRguK0ubZNCjRRMj6xflXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmQ4NjIxZTktOWY4NC0z MWNmLTlkNzUtNTA1YjQ0MDc5YTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPICMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC37NwORkYju0ebtm2KjncyD+XOhWaIrQUQyWClzcSkI0878wPf+yYVo 6vRzZKg1CQ3Q4YTiWvFpAxPXlT+egMrhCiGtWK5jcPWnSXPIqsbki9pj6LDSRHcp PCe/sAZt//rj6uB26QbepKoHTv88nq9nDeNGCw9R/1OQpRqlWNgBMrUROl/pf4f6 YnUiFrEkdXU19RJEggtzkFJkV0cuDQz1iAjNbmITaPsC3NJT5swnwo9ehirkyp1u +tnMI2uNyO/ozg/dh55DldrsuJUYQY0xts9RRqhwEbgA+YLK0S9X4jM/fTO/o2Cz /+Jj2Y97WQmx31cp2ddJ3ki8wYy8MJs= -----END CERTIFICATE-----Generated at Sat Jun 13 19:34:09 2026 by rpki-client