$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5243ddb1-4730-37b2-a1b2-b2ac21c7fa6e.roa File: 5243ddb1-4730-37b2-a1b2-b2ac21c7fa6e.roa (raw, json) Hash identifier: RAJ0SbM9VOT3MJQkpitH42sw7mT0Zk4B2qcPkLS7SfE= Subject key identifier: 5E:BA:F4:78:14:2F:0A:90:E1:0F:A4:55:37:FB:95:20:9C:AE:43:75 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B9D1A029CEE257A072E00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5243ddb1-4730-37b2-a1b2-b2ac21c7fa6e.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.243.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:9d:1a:02:9c:ee:25:7a:07:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=77aa428c-5aa2-4f08-984a-45de9e15ec79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f9:55:1e:60:32:0b:99:28:14:fd:d9:97:e2: f0:e7:1b:0c:70:9b:91:01:77:31:aa:10:5c:11:3f: 49:67:84:a4:09:2a:17:87:2c:ab:b6:01:2f:0c:aa: 29:79:c7:03:44:13:f0:5c:e6:90:8f:be:80:d1:bd: 3c:7a:67:76:22:15:b6:c1:27:03:26:89:ff:2f:03: 8d:3e:4a:7b:80:f7:6f:f3:72:47:73:44:56:0f:f5: be:eb:01:91:38:b4:86:22:fa:e8:71:df:c5:99:63: 24:31:05:c3:34:65:bf:f5:8b:1a:03:fa:c1:47:09: dc:45:3d:aa:ae:cf:90:93:15:29:53:5b:da:95:d8: 32:02:c3:50:3f:9a:57:28:45:f4:12:0d:ec:6e:b6: c6:1f:0c:5c:77:48:66:75:e9:f1:53:f7:bb:f1:4f: 76:a4:7a:3d:50:30:60:6d:98:86:bf:a3:ad:ab:ab: e6:4c:6e:42:45:34:bd:58:04:8e:42:e0:c9:00:40: 8f:41:f3:d9:e3:47:94:bf:4b:e0:14:ca:9e:d1:a7: 7a:37:18:4d:1a:f3:a1:4f:f9:61:18:5a:a1:4f:a8: 04:9b:38:8f:8a:94:a4:2c:81:bb:f9:4b:1c:8b:77: 8f:ee:79:35:a3:85:04:8c:6d:f0:d9:65:d3:f9:f2: e6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:BA:F4:78:14:2F:0A:90:E1:0F:A4:55:37:FB:95:20:9C:AE:43:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5243ddb1-4730-37b2-a1b2-b2ac21c7fa6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:97:8e:88:3b:4f:ed:ec:67:97:64:36:5a:be:12:9c:17:55: 55:9e:61:a3:6d:68:a1:ce:ab:ec:b2:57:d9:2b:8d:cc:8b:dd: 50:8e:81:37:b2:c2:41:d7:68:0b:12:91:24:c8:20:0e:9c:04: ef:56:72:ea:09:25:8c:2a:c3:c9:99:00:d2:c6:68:92:c3:d8: 4e:ff:c4:a1:a5:af:94:7c:b2:1e:37:10:1d:53:25:9d:1c:50: e4:91:0d:2c:5f:41:28:32:82:a2:7f:8a:b1:f9:bc:3b:b2:59: 1d:48:62:21:2c:df:ee:e0:dc:e2:25:dc:64:e9:89:04:d8:fd: 62:c8:a3:8f:95:db:df:66:b0:40:86:2a:b5:3e:2c:8b:99:70: fb:65:c5:9a:90:5c:99:1d:58:fc:f1:6a:7c:6f:f6:ff:5d:10: 93:40:f6:0b:eb:15:33:d0:a1:af:eb:f1:cd:f4:66:6f:b6:83: 13:da:67:e6:56:93:d1:78:17:a0:ab:34:c6:c2:cf:eb:21:91: 85:65:97:50:5b:a7:0f:a3:11:74:a0:d3:9d:90:cc:58:80:90: da:b5:ea:e3:e2:45:43:f0:33:9a:e0:4d:f3:61:84:48:5b:10: c1:ce:92:da:c7:3e:9c:37:4e:b5:63:3b:e4:e9:e2:61:04:a4: b4:a2:5f:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm50aApzuJXoHLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NzdhYTQyOGMtNWFhMi00ZjA4LTk4NGEtNDVkZTllMTVlYzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiflVHmAyC5koFP3Zl+Lw5xsMcJuRAXcxqhBc ET9JZ4SkCSoXhyyrtgEvDKopeccDRBPwXOaQj76A0b08emd2IhW2wScDJon/LwON Pkp7gPdv83JHc0RWD/W+6wGROLSGIvrocd/FmWMkMQXDNGW/9YsaA/rBRwncRT2q rs+QkxUpU1valdgyAsNQP5pXKEX0Eg3sbrbGHwxcd0hmdenxU/e78U92pHo9UDBg bZiGv6Otq6vmTG5CRTS9WASOQuDJAECPQfPZ40eUv0vgFMqe0ad6NxhNGvOhT/lh GFqhT6gEmziPipSkLIG7+Usci3eP7nk1o4UEjG3w2WXT+fLmCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF669HgULwqQ4Q+kVTf7lSCcrkN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTI0M2RkYjEtNDczMC0z N2IyLWExYjItYjJhYzIxYzdmYTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCXjog7T+3sZ5dkNlq+EpwXVVWeYaNtaKHOq+yyV9krjcyL3VCOgTey wkHXaAsSkSTIIA6cBO9WcuoJJYwqw8mZANLGaJLD2E7/xKGlr5R8sh43EB1TJZ0c UOSRDSxfQSgygqJ/irH5vDuyWR1IYiEs3+7g3OIl3GTpiQTY/WLIo4+V299msECG KrU+LIuZcPtlxZqQXJkdWPzxanxv9v9dEJNA9gvrFTPQoa/r8c30Zm+2gxPaZ+ZW k9F4F6CrNMbCz+shkYVll1Bbpw+jEXSg052QzFiAkNq16uPiRUPwM5rgTfNhhEhb EMHOktrHPpw3TrVjO+Tp4mEEpLSiX4w= -----END CERTIFICATE-----Generated at Sat Jun 13 20:26:35 2026 by rpki-client