$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa File: 494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa (raw, json) Hash identifier: mvmHS8GmJh4ve5V94ysUeJ717XxDQwvpeHxrjf03KLI= Subject key identifier: 12:99:FF:40:9B:77:8C:7E:50:EE:73:97:11:1C:2E:CB:04:62:20:07 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059BE2BD8E218CF4C03ABB80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 72.173.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:e2:bd:8e:21:8c:f4:c0:3a:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=7c21a19f-ff69-4adb-9ab2-00d744402ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ef:cd:94:27:d5:a2:f6:11:f8:f9:e1:79:8c: 1f:b5:a1:fc:8d:95:dd:9c:b5:c8:8e:a4:62:f1:0b: 2f:8c:19:b6:e4:e8:cb:e7:d4:40:80:b5:74:61:bf: df:dd:e3:ef:2f:8a:41:f2:16:f1:2e:fc:db:32:7a: 50:c9:07:e0:ad:24:87:1a:fa:22:60:9a:67:e3:a4: 01:64:58:6f:80:08:66:55:63:4d:0e:d2:04:a2:28: 3a:41:06:3f:e0:7d:a6:00:6b:df:b2:2a:e6:98:fb: 19:52:cb:ad:67:5d:38:62:43:10:84:ac:a6:86:40: bd:e5:9c:ed:88:dc:e6:ed:8d:e7:0e:be:d4:39:2b: e5:d6:0e:b1:e8:ad:a7:de:b7:bb:35:e8:02:72:d7: 3f:8e:a8:9e:9f:40:06:f0:4e:29:8f:18:83:a0:d3: 95:20:46:eb:77:98:95:6d:c5:de:6f:03:a7:cc:ea: 4b:a4:54:fa:54:37:6e:8d:e6:0e:87:ed:98:0b:78: 8c:93:66:37:7e:bb:f6:5f:5e:ed:17:2f:cd:a8:f5: 78:96:ba:e7:69:55:f0:92:0c:d6:66:d7:46:33:8d: ce:6a:21:91:1b:71:5e:a2:67:91:32:10:64:9f:62: 65:47:2a:4f:ba:2d:11:7f:f5:53:3e:45:f1:63:31: af:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:99:FF:40:9B:77:8C:7E:50:EE:73:97:11:1C:2E:CB:04:62:20:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:16:13:31:93:06:c2:ee:9d:87:b5:ec:b3:3e:c3:4a:28:02: c2:05:2e:54:e4:2f:74:c6:d8:5b:66:b0:d9:4e:c9:e7:d4:bb: 03:59:d1:27:44:16:d1:73:b1:25:bb:02:37:5a:fa:4c:dc:ca: 2d:cf:fd:66:22:f6:85:ba:a9:e7:48:ae:4d:6b:99:ce:97:18: 2e:b7:be:60:6e:e9:61:34:8e:f4:76:f8:cd:ad:69:fe:39:dc: 07:35:cf:62:39:20:f9:1f:80:cd:f7:8f:df:b5:42:da:52:fc: e7:2b:b5:4b:81:20:8a:99:6a:cb:ec:9f:41:44:22:58:c7:69: c3:16:18:84:6e:8f:58:2d:eb:32:6a:15:49:68:2d:be:a0:99: d8:a4:58:2e:9d:5a:1d:2f:d6:c9:ab:d5:5b:d6:b8:7e:7e:c1: 3f:7d:9c:c4:db:1e:55:44:7c:68:01:a1:8a:23:ea:43:51:ec: 10:6a:5a:b1:af:cf:ba:97:65:3e:b2:7a:93:92:dd:da:15:a4: d1:2d:eb:c8:80:0f:fa:20:c1:9c:c5:f6:5b:d0:c7:1c:ed:1c: 3f:fe:2d:89:5f:28:0b:fd:b0:dc:a3:e3:77:52:16:55:4c:55: 67:a3:31:2f:7a:6f:09:39:f6:cb:55:b4:af:6b:a6:18:d8:59: c2:80:6d:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm+K9jiGM9MA6u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk N2MyMWExOWYtZmY2OS00YWRiLTlhYjItMDBkNzQ0NDAyZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje/NlCfVovYR+PnheYwftaH8jZXdnLXIjqRi 8QsvjBm25OjL59RAgLV0Yb/f3ePvL4pB8hbxLvzbMnpQyQfgrSSHGvoiYJpn46QB ZFhvgAhmVWNNDtIEoig6QQY/4H2mAGvfsirmmPsZUsutZ104YkMQhKymhkC95Zzt iNzm7Y3nDr7UOSvl1g6x6K2n3re7NegCctc/jqien0AG8E4pjxiDoNOVIEbrd5iV bcXebwOnzOpLpFT6VDdujeYOh+2YC3iMk2Y3frv2X17tFy/NqPV4lrrnaVXwkgzW ZtdGM43OaiGRG3FeomeRMhBkn2JlRypPui0Rf/VTPkXxYzGvRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKZ/0Cbd4x+UO5zlxEcLssEYiAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDk0ZDVmYTMtMzA5YS0z Zjg1LThlYjQtYTFiNTlmZmM2YzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgWEzGTBsLunYe17LM+w0ooAsIFLlTkL3TG2FtmsNlOyefUuwNZ0SdE FtFzsSW7Ajda+kzcyi3P/WYi9oW6qedIrk1rmc6XGC63vmBu6WE0jvR2+M2taf45 3Ac1z2I5IPkfgM33j9+1QtpS/OcrtUuBIIqZasvsn0FEIljHacMWGIRuj1gt6zJq FUloLb6gmdikWC6dWh0v1smr1VvWuH5+wT99nMTbHlVEfGgBoYoj6kNR7BBqWrGv z7qXZT6yepOS3doVpNEt68iAD/ogwZzF9lvQxxztHD/+LYlfKAv9sNyj43dSFlVM VWejMS96bwk59stVtK9rphjYWcKAbbI= -----END CERTIFICATE-----Generated at Sat Jun 13 19:38:17 2026 by rpki-client