$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39aaca10-92d5-38ba-8e46-6dc19fc7fee2.roa File: 39aaca10-92d5-38ba-8e46-6dc19fc7fee2.roa (raw, json) Hash identifier: ofiPNX0S7vpreT+FxpQw5evNfgm/ncNWDUE+sncyyg8= Subject key identifier: D8:40:D3:5E:67:E0:AC:B0:53:8C:1A:55:6F:F0:AD:40:E7:D9:80:0B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B95854970A20D0C6C1500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39aaca10-92d5-38ba-8e46-6dc19fc7fee2.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.242.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:95:85:49:70:a2:0d:0c:6c:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=3a42f73a-a888-4084-a42b-a21113e8fd53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d5:23:a0:5d:55:76:18:09:fa:17:c2:f3:60: ed:02:a4:03:46:a4:08:c0:9c:06:39:56:6e:a6:23: 65:22:f3:d1:64:51:cd:6d:81:92:5c:3a:7f:65:76: 71:20:54:f2:a4:3e:d4:18:ac:21:c5:e7:bd:3b:8d: 0d:a6:51:e2:de:df:48:17:ec:cf:81:48:c5:10:2a: 11:07:ef:a5:ee:16:3a:c7:79:8b:cb:47:04:fc:00: 81:b1:91:37:82:60:00:5f:ab:b4:11:35:4a:ae:ce: 48:29:d2:95:09:d6:31:0f:60:18:79:04:d5:23:8d: 5a:12:2b:a9:38:dd:79:28:ad:34:8d:5b:f4:e4:70: 30:88:ea:0f:5e:98:fa:ec:a4:4c:4d:f2:05:d0:e5: 08:b7:16:c3:bf:4b:ad:17:1c:b7:20:75:c5:50:f7: 7c:75:b7:98:45:c4:fe:23:66:0f:bd:1c:8e:28:17: ad:0e:71:68:e5:d1:57:09:f1:a7:6f:46:3d:0d:43: 4e:ab:56:6f:58:92:aa:e1:77:04:62:83:3b:7a:3a: 6f:ea:dd:58:ce:c4:3f:70:6d:fc:65:0d:e7:03:6d: f6:b0:e6:05:88:96:72:42:e2:b2:37:d7:7e:ea:fd: 65:d1:24:12:28:07:25:6d:9c:c6:2a:52:15:7f:27: b1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:40:D3:5E:67:E0:AC:B0:53:8C:1A:55:6F:F0:AD:40:E7:D9:80:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39aaca10-92d5-38ba-8e46-6dc19fc7fee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:40:38:7d:58:e2:0c:19:9b:a7:68:17:cb:f9:44:70:fc:bb: c9:53:2b:fb:a6:38:85:ab:3e:88:84:01:2c:23:9f:45:0c:69: e0:fe:63:aa:e0:e8:9f:dc:7c:bc:97:11:f9:7a:d5:14:26:6e: 24:96:43:40:2f:27:5d:23:33:3d:39:26:ac:2a:09:c0:b7:e0: 81:b7:6c:d4:55:d7:f2:65:91:e5:c0:a6:b2:9d:55:bd:22:69: e9:9f:86:b6:07:3f:e3:03:02:36:7c:6f:d2:50:09:0f:87:26: 8b:8d:ed:e3:cf:8e:1c:7c:d7:58:b8:3d:31:31:26:53:f1:2a: 76:51:a4:e5:e0:bf:06:77:27:08:58:f9:1c:3d:07:9b:de:13: 12:5f:5b:f8:0b:b7:b7:01:f2:a3:a9:c5:5d:08:2e:4b:7d:7c: c5:e8:20:5c:95:5b:34:a3:a9:14:ac:9e:92:1e:15:f5:99:2a: 3a:bd:cc:62:aa:57:e6:7f:51:ea:63:ac:59:7f:2e:3d:14:e0: 6d:f9:aa:80:9e:1f:c0:40:1f:ef:f3:24:6b:05:d2:54:3f:d7: 59:7f:15:2d:2b:aa:0d:d5:d2:62:a1:39:ce:cc:54:46:dc:56: 76:d5:ea:c4:bc:5a:a4:5e:89:6c:6a:61:8b:13:21:2a:08:a3: 62:47:2c:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm5WFSXCiDQxsFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk M2E0MmY3M2EtYTg4OC00MDg0LWE0MmItYTIxMTEzZThmZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNUjoF1VdhgJ+hfC82DtAqQDRqQIwJwGOVZu piNlIvPRZFHNbYGSXDp/ZXZxIFTypD7UGKwhxee9O40NplHi3t9IF+zPgUjFECoR B++l7hY6x3mLy0cE/ACBsZE3gmAAX6u0ETVKrs5IKdKVCdYxD2AYeQTVI41aEiup ON15KK00jVv05HAwiOoPXpj67KRMTfIF0OUItxbDv0utFxy3IHXFUPd8dbeYRcT+ I2YPvRyOKBetDnFo5dFXCfGnb0Y9DUNOq1ZvWJKq4XcEYoM7ejpv6t1YzsQ/cG38 ZQ3nA232sOYFiJZyQuKyN9d+6v1l0SQSKAclbZzGKlIVfyexKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhA015n4KywU4waVW/wrUDn2YALMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzlhYWNhMTAtOTJkNS0z OGJhLThlNDYtNmRjMTlmYzdmZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhAOH1Y4gwZm6doF8v5RHD8u8lTK/umOIWrPoiEASwjn0UMaeD+Y6rg 6J/cfLyXEfl61RQmbiSWQ0AvJ10jMz05JqwqCcC34IG3bNRV1/JlkeXAprKdVb0i aemfhrYHP+MDAjZ8b9JQCQ+HJouN7ePPjhx811i4PTExJlPxKnZRpOXgvwZ3JwhY +Rw9B5veExJfW/gLt7cB8qOpxV0ILkt9fMXoIFyVWzSjqRSsnpIeFfWZKjq9zGKq V+Z/UepjrFl/Lj0U4G35qoCeH8BAH+/zJGsF0lQ/11l/FS0rqg3V0mKhOc7MVEbc VnbV6sS8WqReiWxqYYsTISoIo2JHLL0= -----END CERTIFICATE-----Generated at Sat Jun 13 18:48:03 2026 by rpki-client