$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/426fc1e1-19ca-3a4c-a464-18b15ae70b77.roa File: 426fc1e1-19ca-3a4c-a464-18b15ae70b77.roa (raw, json) Hash identifier: ovWFVSinjW+Hrfp1WeZbmx+mxVRhDe0+7UyPncOEaaY= Subject key identifier: 38:1D:76:65:DD:C9:9B:A9:14:D3:0F:7D:F1:33:57:54:AE:A4:7E:B2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B96863D93C028EBE0D400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/426fc1e1-19ca-3a4c-a464-18b15ae70b77.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.242.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:96:86:3d:93:c0:28:eb:e0:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=d0bb0676-0e74-4060-b0c0-4ffcf2d512ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:1e:c4:c0:ba:cd:90:d9:0a:9f:6d:7a:a0: df:48:8d:64:c5:b5:29:7c:de:79:32:ba:7d:00:ae: 7d:a7:21:73:79:78:92:3b:1d:18:42:54:19:95:e1: 97:a7:6a:9e:22:a1:5e:d7:97:7a:c9:13:83:eb:88: a8:f9:42:bb:db:c6:d7:1d:23:0a:a2:e4:5e:17:3d: 36:14:5a:32:c3:3c:8d:41:d3:a6:c2:14:34:fa:d4: 17:a0:54:f5:01:16:97:c4:49:89:53:a6:15:57:f4: 77:20:b3:5a:26:79:1a:8e:51:08:47:f9:ac:0f:05: b7:10:91:57:0b:cc:42:0e:b2:a3:00:3e:4d:2d:b6: 66:83:02:ab:be:cb:9e:05:f6:63:b9:a5:bc:62:01: f6:ba:98:42:30:61:3c:84:7f:d0:1e:d9:d5:4b:ce: 4b:0d:2f:69:d2:b0:ab:4c:0a:d0:df:ca:9f:79:38: 89:ce:44:36:ec:8b:1f:30:5e:48:dd:c0:5e:97:dc: 7c:04:71:49:65:79:06:71:38:9f:92:84:37:c8:6b: 2a:56:27:79:ec:73:a2:56:3d:f7:aa:f6:19:2b:7c: 42:37:07:54:52:a9:af:52:20:b7:cc:d4:ad:7b:cb: 78:94:a6:c0:8f:fa:21:30:ab:d9:9f:cc:0e:a9:09: 75:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1D:76:65:DD:C9:9B:A9:14:D3:0F:7D:F1:33:57:54:AE:A4:7E:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/426fc1e1-19ca-3a4c-a464-18b15ae70b77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:de:2d:71:e7:0b:c6:79:49:44:01:90:ad:9f:31:b6:c7:10: 52:28:04:8f:e3:80:ff:ad:98:e6:82:42:ee:d0:d6:32:ca:80: f1:c8:cd:0f:ed:23:39:f9:b0:e7:c5:70:9c:af:a1:53:34:44: 80:d6:c8:e1:1e:7e:44:65:d3:a8:12:e8:9f:ea:69:37:05:8b: 41:cc:98:d4:de:dd:2c:c6:0f:01:1a:59:51:49:35:ca:9e:8b: 56:88:d2:fa:64:af:5a:7b:4c:37:17:71:d0:ca:95:e6:55:fe: c3:ba:d2:5f:91:a1:98:be:17:ae:d9:6e:0c:da:86:0f:72:ef: bc:f9:06:77:b4:d1:65:da:1e:6a:77:16:e9:93:a3:70:ec:44: e8:be:c5:d8:af:06:4d:3d:e3:87:cf:09:0c:b2:7e:96:98:08: 6a:1b:7b:e5:68:4f:66:71:bb:b5:75:cf:67:e3:06:3b:b0:6a: be:fd:72:f1:7e:8e:46:dd:e7:70:bb:f5:5f:a5:74:42:7e:fc: 8e:fb:d5:76:45:94:47:4a:27:b8:80:ba:86:44:f3:57:e2:42: 41:eb:19:52:f0:23:50:7e:90:82:d6:3d:91:ca:f7:e1:f7:5f: 45:dc:20:00:c0:ae:65:87:41:0b:02:af:a2:34:d5:0d:58:8a: f1:46:fe:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm5aGPZPAKOvg1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZDBiYjA2NzYtMGU3NC00MDYwLWIwYzAtNGZmY2YyZDUxMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/cexMC6zZDZCp9teqDfSI1kxbUpfN55Mrp9 AK59pyFzeXiSOx0YQlQZleGXp2qeIqFe15d6yROD64io+UK728bXHSMKouReFz02 FFoywzyNQdOmwhQ0+tQXoFT1ARaXxEmJU6YVV/R3ILNaJnkajlEIR/msDwW3EJFX C8xCDrKjAD5NLbZmgwKrvsueBfZjuaW8YgH2uphCMGE8hH/QHtnVS85LDS9p0rCr TArQ38qfeTiJzkQ27IsfMF5I3cBel9x8BHFJZXkGcTifkoQ3yGsqVid57HOiVj33 qvYZK3xCNwdUUqmvUiC3zNSte8t4lKbAj/ohMKvZn8wOqQl19wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgddmXdyZupFNMPffEzV1SupH6yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDI2ZmMxZTEtMTljYS0z YTRjLWE0NjQtMThiMTVhZTcwYjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzeLXHnC8Z5SUQBkK2fMbbHEFIoBI/jgP+tmOaCQu7Q1jLKgPHIzQ/t Izn5sOfFcJyvoVM0RIDWyOEefkRl06gS6J/qaTcFi0HMmNTe3SzGDwEaWVFJNcqe i1aI0vpkr1p7TDcXcdDKleZV/sO60l+RoZi+F67Zbgzahg9y77z5Bne00WXaHmp3 FumTo3DsROi+xdivBk0944fPCQyyfpaYCGobe+VoT2Zxu7V1z2fjBjuwar79cvF+ jkbd53C79V+ldEJ+/I771XZFlEdKJ7iAuoZE81fiQkHrGVLwI1B+kILWPZHK9+H3 X0XcIADArmWHQQsCr6I01Q1YivFG/mQ= -----END CERTIFICATE-----Generated at Sat Jun 13 23:40:54 2026 by rpki-client