$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3fbcdb17-a5ae-3d9c-8e06-5544e098235a.roa File: 3fbcdb17-a5ae-3d9c-8e06-5544e098235a.roa (raw, json) Hash identifier: ILewk6mXoh99zldPlwmnUrN7076Nas43DOL1Pm7bnOY= Subject key identifier: 52:64:CE:B8:44:EB:B4:8C:BA:70:36:F9:81:78:8D:BB:37:20:48:9A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79FBCDA037089B0C0915EE4 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3fbcdb17-a5ae-3d9c-8e06-5544e098235a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.242.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:bc:da:03:70:89:b0:c0:91:5e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d13a1b3f-5aae-49cd-9a35-7f90ced69766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:70:0e:18:88:88:b1:c3:6c:8c:56:dd:1f:b7: f3:d8:5b:fe:d1:6a:b9:2a:22:43:eb:17:26:f7:7b: df:05:c6:91:02:76:06:c9:46:78:35:25:13:fd:70: 8a:04:5e:7a:ce:c6:86:9b:14:60:ed:5b:cb:4c:68: 85:5a:77:8e:f8:c9:e2:9f:8f:51:aa:3a:4a:9d:8d: 59:9a:fb:5f:a4:f6:16:ab:7a:52:bb:db:f8:55:59: c4:06:4d:ef:26:2e:ab:70:56:7d:94:9d:f6:c0:ba: 2e:87:0f:2d:23:8a:83:f7:0f:2c:01:85:e7:d7:b8: 7d:47:0a:e6:8d:70:50:b4:55:5f:70:34:93:3a:18: a7:c9:d6:06:3b:15:6c:f0:a0:86:d6:e2:38:cc:32: a3:58:c3:7e:a9:6f:ab:29:fd:32:b1:02:d0:08:0f: 4a:07:b3:7a:d5:83:34:26:40:fe:a9:c3:ff:72:5b: 27:d8:93:10:96:19:85:8f:52:7b:22:9f:71:eb:4f: 82:7b:50:56:02:df:3b:ee:c9:5d:a8:df:7e:41:2d: 6e:bb:89:e3:4c:bd:f7:b8:d8:52:f7:25:d4:7d:79: 41:c7:5c:2e:ca:d9:61:27:38:3e:35:13:69:bc:52: ac:49:d4:b1:6b:ab:12:09:a8:d6:ba:82:bf:bd:a7: d8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:64:CE:B8:44:EB:B4:8C:BA:70:36:F9:81:78:8D:BB:37:20:48:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3fbcdb17-a5ae-3d9c-8e06-5544e098235a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a1:c4:9d:ef:3b:fd:9f:d3:d7:a8:b2:a3:a8:dc:58:d2:ee: 5f:5f:6b:76:87:63:44:b7:65:8e:03:79:60:8e:cd:91:58:bc: aa:1e:8a:0e:f3:1d:80:ea:a4:a0:12:f7:7a:3e:35:60:46:09: b8:6a:6b:a0:8b:b9:dc:95:a1:68:80:d8:84:1e:7b:22:84:f8: da:e3:c8:c7:90:15:59:6c:4a:1d:18:c6:a0:20:70:29:57:31: 3e:8f:a3:c7:14:11:e4:1b:31:e0:dd:e7:4b:f4:a1:3a:9a:81: fe:d4:ac:34:33:97:14:27:26:16:7c:9a:2d:3c:f1:99:d6:40: 4c:2d:74:5e:44:9b:76:75:d3:37:b7:c0:13:cd:e5:67:47:4f: 78:0c:09:03:3e:2a:d3:7f:db:11:f6:dd:83:d2:4a:16:47:39: b6:d6:98:89:05:9a:1f:62:ae:52:07:df:83:70:d5:a3:19:73: b5:2f:14:5d:16:e5:b9:a7:29:17:4b:14:8d:ae:d6:87:4c:ff: be:d7:e3:8b:e5:d3:ed:ab:0c:3e:33:ce:75:3f:56:1a:89:78: e6:47:65:f5:f6:ff:80:b6:bc:25:47:b7:2b:6f:ae:11:ef:21: 92:89:96:a1:03:ad:6d:b2:63:d2:b3:21:3d:fd:a7:4b:fb:b5: af:a0:bb:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn7zaA3CJsMCRXuQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDEzYTFiM2YtNWFhZS00OWNkLTlhMzUtN2Y5MGNlZDY5NzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHAOGIiIscNsjFbdH7fz2Fv+0Wq5KiJD6xcm 93vfBcaRAnYGyUZ4NSUT/XCKBF56zsaGmxRg7VvLTGiFWneO+Mnin49RqjpKnY1Z mvtfpPYWq3pSu9v4VVnEBk3vJi6rcFZ9lJ32wLouhw8tI4qD9w8sAYXn17h9Rwrm jXBQtFVfcDSTOhinydYGOxVs8KCG1uI4zDKjWMN+qW+rKf0ysQLQCA9KB7N61YM0 JkD+qcP/clsn2JMQlhmFj1J7Ip9x60+Ce1BWAt877sldqN9+QS1uu4njTL33uNhS 9yXUfXlBx1wuytlhJzg+NRNpvFKsSdSxa6sSCajWuoK/vafYwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJkzrhE67SMunA2+YF4jbs3IEiaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2ZiY2RiMTctYTVhZS0z ZDljLThlMDYtNTU0NGUwOTgyMzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGhxJ3vO/2f09eosqOo3FjS7l9fa3aHY0S3ZY4DeWCOzZFYvKoeig7z HYDqpKAS93o+NWBGCbhqa6CLudyVoWiA2IQeeyKE+NrjyMeQFVlsSh0YxqAgcClX MT6Po8cUEeQbMeDd50v0oTqagf7UrDQzlxQnJhZ8mi088ZnWQEwtdF5Em3Z10ze3 wBPN5WdHT3gMCQM+KtN/2xH23YPSShZHObbWmIkFmh9irlIH34Nw1aMZc7UvFF0W 5bmnKRdLFI2u1odM/77X44vl0+2rDD4zznU/VhqJeOZHZfX2/4C2vCVHtytvrhHv IZKJlqEDrW2yY9KzIT39p0v7ta+guzY= -----END CERTIFICATE-----Generated at Wed Jul 29 05:52:17 2026 by rpki-client