$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa File: 3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa (raw, json) Hash identifier: WvQGoOPOtoiygGREP2pesr94IIhMyAjKFDPezbgRkSQ= Subject key identifier: F4:7A:49:15:B0:4A:0C:72:42:F5:F9:FB:BC:88:67:37:EB:4E:9D:70 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E2921E9C99323B7353080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.243.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:29:21:e9:c9:93:23:b7:35:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3736ac37-ddc9-4cfb-aac5-da5cf2f82aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:69:ee:41:22:8b:34:d1:b1:69:3d:4a:1a:34: 2f:f7:d7:a6:73:96:d2:f0:04:df:fe:dd:fd:fa:9b: 80:f7:a3:5e:49:fc:4e:e9:28:25:41:50:d6:19:eb: c2:e0:93:40:27:32:cb:88:aa:47:50:1c:3a:3e:05: af:17:35:06:f7:53:7b:b5:e5:ad:58:6e:4d:77:f0: 3d:2f:07:8e:fe:56:ba:74:78:d3:42:e2:78:8d:55: c6:a3:1e:87:55:17:0d:8a:e2:34:1c:ce:39:1b:eb: 96:91:b0:22:12:bc:ed:30:16:84:af:aa:3d:56:89: 32:9e:cd:39:f9:a0:15:b0:ad:de:25:dd:a0:f0:d7: c8:83:15:ba:40:bd:c9:39:e9:c3:cc:dd:1b:63:f7: 7b:73:c2:df:8c:43:29:3e:fc:06:2a:ca:15:d6:85: ef:b9:c8:42:a6:fe:77:15:0c:f0:95:9b:97:93:09: cd:3f:56:9b:58:55:9b:ce:f3:69:d7:7a:6f:7c:78: a1:34:5d:88:49:4c:10:71:0c:ca:32:66:3a:90:8c: 9f:c7:2f:e2:ce:a4:28:f0:cc:4e:1c:f2:6e:ed:00: 43:81:38:93:45:4b:31:3d:29:0c:48:2e:4c:40:22: 89:2d:ec:9d:2d:cd:76:52:92:94:69:3e:6d:87:3d: d4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7A:49:15:B0:4A:0C:72:42:F5:F9:FB:BC:88:67:37:EB:4E:9D:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:37:ca:bb:93:c9:19:1f:38:8c:0d:20:7a:2c:23:9a:59:96: be:a4:71:ab:51:32:a1:d7:91:fe:1b:e8:3b:9e:4d:eb:16:e3: 85:cd:ec:de:d1:7b:eb:f9:bf:b7:ca:2e:25:52:35:92:96:5c: f5:cf:5f:bc:e1:12:6d:14:a2:f7:b7:9c:73:6f:03:bb:2f:67: a3:f8:7f:98:6c:e6:b1:77:35:8a:88:b6:7b:14:6d:9f:b2:70: dc:94:ac:c6:21:4e:0f:bb:80:45:a7:f0:67:f4:f8:a7:8f:6a: 55:b2:09:c7:89:b4:31:75:a8:00:14:ec:27:b8:0d:12:56:b1: 25:f6:e8:61:f3:68:9e:56:76:e5:a1:28:12:07:5c:8d:e6:e2: 76:ec:c9:72:8a:1d:d2:26:1b:5a:dc:29:75:1a:86:3c:0e:56: d7:e4:49:25:dd:e8:ad:9c:7c:24:73:6c:c3:07:1e:b5:a4:d0: 3c:b2:d0:4c:94:c6:39:c4:88:eb:3e:fc:79:f2:32:e7:cb:f2: 86:4a:0c:2a:6f:24:39:65:53:58:65:cb:e6:1c:06:d0:67:41: 91:d7:dc:84:a7:f1:48:d7:ed:38:41:30:eb:7e:c6:27:1e:69: d7:e4:d5:18:e7:a6:27:c5:53:51:ab:c6:98:c1:d2:48:29:4f: 80:54:97:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnikh6cmTI7c1MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzczNmFjMzctZGRjOS00Y2ZiLWFhYzUtZGE1Y2YyZjgyYWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9mnuQSKLNNGxaT1KGjQv99emc5bS8ATf/t39 +puA96NeSfxO6SglQVDWGevC4JNAJzLLiKpHUBw6PgWvFzUG91N7teWtWG5Nd/A9 LweO/la6dHjTQuJ4jVXGox6HVRcNiuI0HM45G+uWkbAiErztMBaEr6o9Vokyns05 +aAVsK3eJd2g8NfIgxW6QL3JOenDzN0bY/d7c8LfjEMpPvwGKsoV1oXvuchCpv53 FQzwlZuXkwnNP1abWFWbzvNp13pvfHihNF2ISUwQcQzKMmY6kIyfxy/izqQo8MxO HPJu7QBDgTiTRUsxPSkMSC5MQCKJLeydLc12UpKUaT5thz3UlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPR6SRWwSgxyQvX5+7yIZzfrTp1wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2YzZTBiYmYtNjU4NC0z YTRiLTliNDctOWE0ZGRjMjNiNDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc3yruTyRkfOIwNIHosI5pZlr6kcatRMqHXkf4b6DueTesW44XN7N7R e+v5v7fKLiVSNZKWXPXPX7zhEm0Uove3nHNvA7svZ6P4f5hs5rF3NYqItnsUbZ+y cNyUrMYhTg+7gEWn8Gf0+KePalWyCceJtDF1qAAU7Ce4DRJWsSX26GHzaJ5WduWh KBIHXI3m4nbsyXKKHdImG1rcKXUahjwOVtfkSSXd6K2cfCRzbMMHHrWk0Dyy0EyU xjnEiOs+/HnyMufL8oZKDCpvJDllU1hly+YcBtBnQZHX3ISn8UjX7ThBMOt+xice adfk1RjnpifFU1GrxpjB0kgpT4BUl58= -----END CERTIFICATE-----Generated at Wed Jul 29 04:14:59 2026 by rpki-client