$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4381f79e-f9af-3c5f-9483-1dd302308e4c.roa File: 4381f79e-f9af-3c5f-9483-1dd302308e4c.roa (raw, json) Hash identifier: fmkonmhwB0rei0FKKPG7U+/DDN3V1ipiEpExlBqQr7c= Subject key identifier: 1B:AB:B5:FA:DF:8B:93:EE:62:BC:25:BC:2F:05:80:13:FC:87:6D:D7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E1819CE69A018AD2ABB80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4381f79e-f9af-3c5f-9483-1dd302308e4c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.242.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:18:19:ce:69:a0:18:ad:2a:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=97e3605b-f7d1-406a-9bd1-cd9cf12f5f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:78:01:cc:ae:e6:79:ab:c4:10:af:a1:c8:86: b0:48:6b:19:b5:ba:65:bb:b2:98:52:7b:87:4c:3e: 77:4c:33:53:5a:86:74:15:fb:63:5f:11:f7:b5:0e: dd:8c:fe:78:c7:01:f7:d7:a9:63:3f:bd:1c:5d:54: 76:e9:66:30:a1:14:6f:ac:c3:5b:d8:c0:53:69:95: 40:fd:22:5d:62:bc:bf:0d:d6:8a:6e:47:1f:ed:74: dd:59:e0:a9:a8:6e:04:55:24:8c:13:6f:58:1a:79: b7:66:b3:f8:82:85:09:2d:2a:70:e4:97:77:cf:f8: b8:2a:39:ff:6c:5f:73:36:67:9a:53:1e:53:3d:b4: 0b:6f:53:19:f0:30:63:a4:38:fd:ae:19:14:26:94: 66:96:8e:03:f1:e2:22:da:33:0c:4a:ba:a6:73:9d: 15:78:e4:2e:2e:be:f2:72:36:63:10:d7:fa:3e:9d: 31:cd:38:56:10:67:f1:c8:9c:f9:11:74:09:5e:3e: 01:e5:a9:32:74:4e:48:94:82:35:fc:90:a2:ad:0d: 78:f4:f4:eb:95:4f:46:ff:41:23:66:08:63:21:64: 2d:ca:d3:9c:21:5b:93:ce:7d:ed:f4:b6:e6:a2:ab: b2:c9:a1:fc:51:07:27:3f:ff:96:c8:5b:10:7d:db: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AB:B5:FA:DF:8B:93:EE:62:BC:25:BC:2F:05:80:13:FC:87:6D:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4381f79e-f9af-3c5f-9483-1dd302308e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b9:1e:7a:a9:76:bd:48:a6:4d:74:b2:e7:75:2d:b0:4c:0f: 24:25:fc:69:85:cb:44:ef:bf:ed:0d:52:8a:72:75:e5:95:fe: 9d:43:9f:c9:84:46:8a:e7:be:da:33:14:c3:f3:52:4a:d3:b7: 81:34:31:f3:19:d8:3b:c8:c4:41:56:ca:8b:30:9b:ce:f8:53: db:ec:aa:79:65:9f:3f:f0:e6:ca:6e:5f:5c:69:13:5e:98:04: f3:de:f4:ef:cf:ec:02:eb:b2:84:6d:b9:8e:f3:37:c7:fe:51: 32:c6:35:bf:05:7e:fd:2a:93:83:f1:38:ab:fd:9d:62:ac:ee: 14:2c:b4:6c:b0:0b:ee:7e:5c:73:fc:47:41:de:99:f0:fa:9b: ad:3b:ec:ec:c8:b1:05:39:b2:5e:df:fa:0b:1b:dd:38:3f:29: 5c:3a:2e:72:e9:9b:ef:26:bd:7a:e6:68:24:3a:1f:60:4a:cd: 87:07:7f:d7:0c:ab:8b:65:cd:25:af:a5:75:46:b2:ca:8a:7f: 8d:d8:53:95:1a:c5:9d:de:39:80:6d:cd:b4:00:d1:b3:da:10: 96:84:4f:ad:66:21:92:45:2d:12:53:ea:8a:5e:96:cf:a4:c1: 1a:eb:bf:2f:e7:3d:06:11:d9:e1:00:82:d1:37:2f:58:62:2b: 31:ef:4d:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnhgZzmmgGK0qu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTdlMzYwNWItZjdkMS00MDZhLTliZDEtY2Q5Y2YxMmY1ZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXgBzK7meavEEK+hyIawSGsZtbplu7KYUnuH TD53TDNTWoZ0FftjXxH3tQ7djP54xwH316ljP70cXVR26WYwoRRvrMNb2MBTaZVA /SJdYry/DdaKbkcf7XTdWeCpqG4EVSSME29YGnm3ZrP4goUJLSpw5Jd3z/i4Kjn/ bF9zNmeaUx5TPbQLb1MZ8DBjpDj9rhkUJpRmlo4D8eIi2jMMSrqmc50VeOQuLr7y cjZjENf6Pp0xzThWEGfxyJz5EXQJXj4B5akydE5IlII1/JCirQ149PTrlU9G/0Ej ZghjIWQtytOcIVuTzn3t9LbmoquyyaH8UQcnP/+WyFsQfdscrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBurtfrfi5PuYrwlvC8FgBP8h23XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDM4MWY3OWUtZjlhZi0z YzVmLTk0ODMtMWRkMzAyMzA4ZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEG5Hnqpdr1Ipk10sud1LbBMDyQl/GmFy0Tvv+0NUopydeWV/p1Dn8mE RornvtozFMPzUkrTt4E0MfMZ2DvIxEFWyoswm874U9vsqnllnz/w5spuX1xpE16Y BPPe9O/P7ALrsoRtuY7zN8f+UTLGNb8Ffv0qk4PxOKv9nWKs7hQstGywC+5+XHP8 R0HemfD6m6077OzIsQU5sl7f+gsb3Tg/KVw6LnLpm+8mvXrmaCQ6H2BKzYcHf9cM q4tlzSWvpXVGssqKf43YU5UaxZ3eOYBtzbQA0bPaEJaET61mIZJFLRJT6opels+k wRrrvy/nPQYR2eEAgtE3L1hiKzHvTXc= -----END CERTIFICATE-----Generated at Wed Jul 29 05:37:09 2026 by rpki-client