$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3bcd4283-22e8-3ca4-9237-d770ad701405.roa File: 3bcd4283-22e8-3ca4-9237-d770ad701405.roa (raw, json) Hash identifier: 9Rxk1OIgcI2qyUsYFW4XRZFHXs+F86dxWr3LorWpX28= Subject key identifier: 2D:B8:BA:8B:41:21:28:37:94:88:6F:76:67:9A:A9:63:36:20:4F:D0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E0BD197FD004629FBE6F4 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3bcd4283-22e8-3ca4-9237-d770ad701405.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.242.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:0b:d1:97:fd:00:46:29:fb:e6:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e298fa6d-830f-43ac-b0cc-48f8ff9a5b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:b4:e1:91:09:57:7d:40:36:ed:d5:a2:72: 6e:2f:f7:51:61:6a:65:81:e7:02:ff:d4:f6:2d:72: 2c:13:30:74:1c:ea:a9:03:b9:47:3d:b7:d4:16:b3: bb:bf:f2:d7:c9:2f:6f:d5:6d:3e:52:92:5d:37:ea: 40:67:c2:06:0f:b2:7c:0a:4c:36:d5:ce:16:f0:bc: fa:0e:3f:71:cc:f1:5c:89:70:0c:93:89:22:63:28: c3:36:9d:30:4a:bc:e0:8a:1f:1e:89:d6:99:79:21: e5:79:74:ec:a7:b7:b3:25:48:93:e8:df:25:ad:64: dd:38:39:cd:34:34:ef:28:2e:18:68:ce:d1:fb:84: 25:3a:2e:8d:95:7d:bd:8d:52:4f:a3:af:73:b4:e6: 79:51:f0:3d:22:b5:a8:60:ef:39:e4:7f:23:e2:4c: bd:58:d7:dd:64:e7:d5:5f:6f:12:99:73:78:d8:2a: 78:17:80:c3:9a:27:8e:a5:36:f7:df:be:23:61:7b: 41:0d:d2:e4:36:3a:b9:08:de:60:f1:49:25:ef:d0: 52:9c:23:f3:c0:57:e3:74:ab:c8:c7:d7:3b:f5:fe: 05:b8:55:21:1b:80:f0:c5:53:f2:d1:ac:82:0d:6e: ec:a2:33:da:21:f3:97:43:4e:4c:f4:8a:7c:af:07: 12:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B8:BA:8B:41:21:28:37:94:88:6F:76:67:9A:A9:63:36:20:4F:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3bcd4283-22e8-3ca4-9237-d770ad701405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:11:2d:b9:3d:6f:c1:e3:2d:8f:fb:e7:81:51:92:54:e4:5c: aa:84:c1:38:5f:89:07:c8:1a:44:2f:ae:83:f1:1d:2e:63:3a: c9:68:6d:a5:fd:38:61:4d:63:23:a7:8e:a6:a4:0f:86:e3:a1: f1:4a:ca:da:64:bc:d3:0d:67:4b:b4:a5:ec:c2:1b:8d:28:47: c8:7b:20:ca:43:22:17:56:4c:e6:02:fb:15:79:d7:3e:97:c4: d7:d9:31:a5:41:6a:bc:e0:e6:61:92:f2:2b:4b:f0:4e:a3:0d: 47:d9:08:cd:19:26:14:a8:5a:23:c3:54:db:23:bc:32:d8:a2: 23:79:b0:2b:62:ea:9e:02:06:78:97:c0:ac:22:40:8c:28:3d: 27:00:3e:a7:8a:25:92:22:f6:61:14:c3:84:dd:7b:72:60:94: eb:a0:91:c9:9e:3a:0c:ef:75:0d:ab:2f:5a:49:d0:70:6f:f8: e9:6e:3f:98:d0:bc:e7:aa:b5:b4:0a:11:b0:d0:85:26:aa:7b: 97:a0:e7:91:12:86:84:5f:a7:df:5b:b1:a3:5f:e4:df:45:37: 44:c5:c1:46:fe:aa:e3:e6:48:a3:d9:43:5d:8f:af:69:49:eb: 47:a1:75:07:34:03:07:bc:13:33:e3:37:e7:7e:e3:34:a0:48: 57:89:f1:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nngvRl/0ARin75vQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTI5OGZhNmQtODMwZi00M2FjLWIwY2MtNDhmOGZmOWE1YjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqm04ZEJV31ANu3VonJuL/dRYWplgecC/9T2 LXIsEzB0HOqpA7lHPbfUFrO7v/LXyS9v1W0+UpJdN+pAZ8IGD7J8Ckw21c4W8Lz6 Dj9xzPFciXAMk4kiYyjDNp0wSrzgih8eidaZeSHleXTsp7ezJUiT6N8lrWTdODnN NDTvKC4YaM7R+4QlOi6NlX29jVJPo69ztOZ5UfA9IrWoYO855H8j4ky9WNfdZOfV X28SmXN42Cp4F4DDmieOpTb3374jYXtBDdLkNjq5CN5g8Ukl79BSnCPzwFfjdKvI x9c79f4FuFUhG4DwxVPy0ayCDW7sojPaIfOXQ05M9Ip8rwcShwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC24uotBISg3lIhvdmeaqWM2IE/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2JjZDQyODMtMjJlOC0z Y2E0LTkyMzctZDc3MGFkNzAxNDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoRLbk9b8HjLY/754FRklTkXKqEwThfiQfIGkQvroPxHS5jOslobaX9 OGFNYyOnjqakD4bjofFKytpkvNMNZ0u0pezCG40oR8h7IMpDIhdWTOYC+xV51z6X xNfZMaVBarzg5mGS8itL8E6jDUfZCM0ZJhSoWiPDVNsjvDLYoiN5sCti6p4CBniX wKwiQIwoPScAPqeKJZIi9mEUw4Tde3JglOugkcmeOgzvdQ2rL1pJ0HBv+OluP5jQ vOeqtbQKEbDQhSaqe5eg55EShoRfp99bsaNf5N9FN0TFwUb+quPmSKPZQ12Pr2lJ 60ehdQc0Awe8EzPjN+d+4zSgSFeJ8eU= -----END CERTIFICATE-----Generated at Wed Jul 29 07:57:46 2026 by rpki-client