$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3871f96f-736a-3cfc-8ab8-e605674052b8.roa File: 3871f96f-736a-3cfc-8ab8-e605674052b8.roa (raw, json) Hash identifier: saknRIcnSaojV2FgqvAU7IEijQQ+GBVgVigIEiQQ7Bc= Subject key identifier: 20:7E:E0:DB:91:E3:D1:D9:69:AD:C5:E8:BD:17:12:E1:78:33:C6:82 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059BE71818404D14F9084560 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3871f96f-736a-3cfc-8ab8-e605674052b8.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 72.173.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:e7:18:18:40:4d:14:f9:08:45:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=986239d3-702b-4611-9324-1a73183bc0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:49:8e:ed:eb:0b:65:86:04:9a:5e:1f:74:71: fb:28:f4:3a:04:4f:d3:c9:4b:ee:89:4b:b9:24:04: 54:00:73:b5:29:5f:3a:43:cd:88:e3:38:8d:24:42: 93:64:fd:17:a5:0e:5a:49:f1:97:9e:a9:52:dd:46: 2d:14:d0:a7:6f:a4:5b:cd:49:e1:76:f3:f6:83:65: 8e:7a:d4:91:c9:f2:0c:87:0c:35:65:1b:f3:0c:8b: 8d:59:49:47:46:83:c3:65:cd:69:a6:44:a0:b7:be: e7:67:1e:49:24:24:6f:9e:6f:bf:43:63:4d:96:56: 07:84:b0:7f:b3:32:71:e1:7a:23:b2:e0:df:3c:04: be:c3:ad:d0:ec:71:63:d9:7c:35:f0:2a:7f:4b:c8: 5c:6f:26:c7:cb:17:af:83:1b:e8:13:63:01:b2:98: 06:d5:3e:85:8e:ea:74:26:c1:48:10:a3:38:38:fa: 75:83:e9:b4:48:d5:3b:aa:0a:6f:ee:4c:59:eb:04: 3a:de:c9:b2:a0:1f:d0:9a:fc:bd:be:13:e3:c1:a6: 33:c0:65:4f:3b:bc:70:27:f0:f5:63:49:ad:c2:77: 19:1b:e8:d2:a1:d5:5b:cb:b3:e4:1e:57:55:4a:ab: 56:86:78:27:70:ae:ab:d3:7b:92:e4:86:e3:e4:80: 17:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7E:E0:DB:91:E3:D1:D9:69:AD:C5:E8:BD:17:12:E1:78:33:C6:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3871f96f-736a-3cfc-8ab8-e605674052b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:85:69:d1:61:db:9d:5c:45:e2:33:cd:10:3b:6c:51:af:af: b0:95:fc:0d:0d:2f:d9:7c:28:03:fc:84:8a:44:06:c9:e7:25: b0:21:91:40:1c:99:f7:4d:a9:e6:05:d3:e0:7c:b1:ef:1f:43: 97:d9:fe:7b:0b:a1:0f:dc:70:c8:2e:37:e1:f2:a5:8b:03:cc: 75:0a:bd:b9:a1:5b:a5:e8:7a:95:f7:63:e7:80:58:a7:4b:75: e2:d3:5a:f3:aa:b3:9c:d8:a7:ae:9c:45:3f:99:2a:5b:80:7f: fe:90:17:f0:55:93:3d:59:6f:05:ac:56:5b:c0:c0:11:6a:4b: 8f:b6:57:2f:54:fc:07:29:5c:44:1a:98:c1:ed:39:d9:46:c3: 82:ba:6e:d5:34:93:ea:77:a0:e7:cf:87:4d:5f:63:bb:08:d3: 8c:73:ff:1e:45:5a:32:b2:b0:6a:1b:34:1c:b1:6b:e0:d8:f5: e7:62:62:ce:27:f6:96:68:71:62:93:de:d2:1b:c6:41:69:ec: 37:8e:b7:af:72:b6:c9:54:d2:ee:4c:ce:4d:37:ce:40:40:b8: be:3b:2a:5d:7f:84:6d:79:0d:cb:32:10:96:c4:0d:d3:b4:02: 85:d8:77:f0:b1:d2:d8:b7:8f:be:30:1e:8c:e6:01:2b:d5:3d: 26:29:1c:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm+cYGEBNFPkIRWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk OTg2MjM5ZDMtNzAyYi00NjExLTkzMjQtMWE3MzE4M2JjMGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEmO7esLZYYEml4fdHH7KPQ6BE/TyUvuiUu5 JARUAHO1KV86Q82I4ziNJEKTZP0XpQ5aSfGXnqlS3UYtFNCnb6RbzUnhdvP2g2WO etSRyfIMhww1ZRvzDIuNWUlHRoPDZc1ppkSgt77nZx5JJCRvnm+/Q2NNllYHhLB/ szJx4XojsuDfPAS+w63Q7HFj2Xw18Cp/S8hcbybHyxevgxvoE2MBspgG1T6Fjup0 JsFIEKM4OPp1g+m0SNU7qgpv7kxZ6wQ63smyoB/Qmvy9vhPjwaYzwGVPO7xwJ/D1 Y0mtwncZG+jSodVby7PkHldVSqtWhngncK6r03uS5Ibj5IAX7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCB+4NuR49HZaa3F6L0XEuF4M8aCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzg3MWY5NmYtNzM2YS0z Y2ZjLThhYjgtZTYwNTY3NDA1MmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqFadFh251cReIzzRA7bFGvr7CV/A0NL9l8KAP8hIpEBsnnJbAhkUAc mfdNqeYF0+B8se8fQ5fZ/nsLoQ/ccMguN+HypYsDzHUKvbmhW6XoepX3Y+eAWKdL deLTWvOqs5zYp66cRT+ZKluAf/6QF/BVkz1ZbwWsVlvAwBFqS4+2Vy9U/AcpXEQa mMHtOdlGw4K6btU0k+p3oOfPh01fY7sI04xz/x5FWjKysGobNByxa+DY9ediYs4n 9pZocWKT3tIbxkFp7DeOt69ytslU0u5Mzk03zkBAuL47Kl1/hG15DcsyEJbEDdO0 AoXYd/Cx0ti3j74wHozmASvVPSYpHPg= -----END CERTIFICATE-----Generated at Sat Jun 13 18:59:03 2026 by rpki-client