$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ae3fcc4-d441-3516-8729-64fbcb355694.roa File: 3ae3fcc4-d441-3516-8729-64fbcb355694.roa (raw, json) Hash identifier: 5BQQDN8P54TFUEJ/RzA7ECdk8fBHb1imT3SIwX2I4MM= Subject key identifier: 20:75:92:77:CD:EB:8D:60:2F:5E:2F:A8:92:AD:A4:E4:34:6E:B9:F1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C1F012DEBE9DC86467640 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ae3fcc4-d441-3516-8729-64fbcb355694.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.243.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:1f:01:2d:eb:e9:dc:86:46:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=be60362f-e5a9-49b1-8b72-31410ea501dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:63:77:a0:dd:d8:6d:e0:52:78:92:12:65:65: 0b:b8:f1:b1:05:26:4a:cb:43:3f:86:60:a8:e4:bd: 00:ad:d6:81:58:f5:20:52:d1:3e:d9:46:d2:9d:df: 12:55:46:37:74:af:e2:d6:7f:08:87:e3:83:91:d3: 9e:60:95:7a:b9:d2:8b:b4:dd:a3:fc:be:f6:14:6b: 82:c0:47:6a:86:59:47:ae:37:62:70:ab:d5:a2:50: 11:d6:92:0c:5c:21:4c:ff:d4:0e:96:4e:8c:2d:52: e6:73:4a:0a:ae:3e:0f:70:1a:2f:51:95:39:07:f5: b7:9d:d5:80:4b:a4:eb:28:f9:b6:62:37:46:6d:79: 23:1b:6d:45:b1:d7:ed:61:11:75:b4:29:37:7c:75: 53:86:3f:2b:fe:c5:1e:dc:94:80:7d:a1:0f:d5:d0: 1f:cc:4f:d2:7a:e1:b3:97:8a:7b:2a:95:e7:99:06: 17:95:53:3f:39:e0:27:40:54:90:5f:61:de:7c:bb: b9:10:cf:ea:83:b9:56:aa:29:aa:36:14:73:01:44: 1d:3b:92:1c:8c:e9:df:74:f7:91:ee:10:bd:15:98: e4:94:be:5b:cd:6a:b0:cf:d9:4b:88:a0:ce:56:85: da:a7:8d:42:26:62:36:26:7b:90:cf:29:d0:7c:18: ab:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:75:92:77:CD:EB:8D:60:2F:5E:2F:A8:92:AD:A4:E4:34:6E:B9:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ae3fcc4-d441-3516-8729-64fbcb355694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:64:27:11:f7:bd:e2:25:52:b0:d8:18:dd:84:30:af:bb:75: ad:77:ff:46:fc:91:60:73:44:21:59:33:cd:82:c1:5d:47:7d: d2:f4:09:d4:29:0a:ff:3a:17:44:92:cd:cd:87:1b:8c:4a:b4: dd:72:6e:61:6b:b8:b7:19:33:44:64:d9:98:24:f6:79:a6:75: a2:a7:18:cd:96:60:8e:20:dd:26:77:51:a8:f0:08:d7:e9:1e: eb:22:13:2c:67:f7:ac:98:0a:51:ee:2b:41:f0:bd:85:e6:2d: 43:15:84:19:3c:6b:f8:ca:86:a0:da:0f:a7:17:29:cd:83:af: da:81:96:c4:05:c1:f9:a9:9e:c2:ae:5a:56:0a:5b:a1:b6:f2: bc:f5:bb:bf:58:1f:e3:6d:ee:02:04:68:6f:15:f8:7c:c0:ef: fe:07:c8:43:7c:3b:6f:bf:86:e5:5c:f8:48:53:8f:46:2d:a6: 5e:ed:de:d3:f7:f6:82:56:77:b3:1a:e0:ea:1c:31:6b:b7:94: 4a:25:6e:37:a7:f0:41:a7:78:4f:9c:cb:67:d6:1d:68:0c:50: 13:1e:a1:b8:96:6e:42:9f:5c:fe:48:9e:a4:4d:9c:82:95:36: 93:1e:26:a5:e6:62:81:bd:62:e7:89:5c:7d:7f:df:9c:86:61: 3d:ac:27:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnB8BLevp3IZGdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YmU2MDM2MmYtZTVhOS00OWIxLThiNzItMzE0MTBlYTUwMWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GN3oN3YbeBSeJISZWULuPGxBSZKy0M/hmCo 5L0ArdaBWPUgUtE+2UbSnd8SVUY3dK/i1n8Ih+ODkdOeYJV6udKLtN2j/L72FGuC wEdqhllHrjdicKvVolAR1pIMXCFM/9QOlk6MLVLmc0oKrj4PcBovUZU5B/W3ndWA S6TrKPm2YjdGbXkjG21FsdftYRF1tCk3fHVThj8r/sUe3JSAfaEP1dAfzE/SeuGz l4p7KpXnmQYXlVM/OeAnQFSQX2HefLu5EM/qg7lWqimqNhRzAUQdO5IcjOnfdPeR 7hC9FZjklL5bzWqwz9lLiKDOVoXap41CJmI2JnuQzynQfBir6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCB1knfN641gL14vqJKtpOQ0brnxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2FlM2ZjYzQtZDQ0MS0z NTE2LTg3MjktNjRmYmNiMzU1Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVkJxH3veIlUrDYGN2EMK+7da13/0b8kWBzRCFZM82CwV1HfdL0CdQp Cv86F0SSzc2HG4xKtN1ybmFruLcZM0Rk2Zgk9nmmdaKnGM2WYI4g3SZ3UajwCNfp HusiEyxn96yYClHuK0HwvYXmLUMVhBk8a/jKhqDaD6cXKc2Dr9qBlsQFwfmpnsKu WlYKW6G28rz1u79YH+Nt7gIEaG8V+HzA7/4HyEN8O2+/huVc+EhTj0Ytpl7t3tP3 9oJWd7Ma4OocMWu3lEolbjen8EGneE+cy2fWHWgMUBMeobiWbkKfXP5InqRNnIKV NpMeJqXmYoG9YueJXH1/35yGYT2sJ14= -----END CERTIFICATE-----Generated at Sat Jun 13 22:25:00 2026 by rpki-client