$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa File: 5a906593-7518-3717-93a1-36f415626e0f.roa (raw, json) Hash identifier: ck+wbvtSrTehCwO1fbF59tcPg51gde3VD+u8KPDZyss= Subject key identifier: 3A:E1:AE:AA:0B:20:3D:21:9B:94:8C:64:2E:4D:CE:F8:39:87:62:18 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79FD298E45C2DE0F0623C00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.243.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:d2:98:e4:5c:2d:e0:f0:62:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e16f1c8b-ee64-4230-b968-f23a6a598aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d1:f4:56:a7:c3:ea:8c:72:7b:c0:4b:57:9c: 77:a3:c7:2d:c3:54:99:2e:86:12:57:80:34:9e:2d: 53:1c:ee:41:97:68:fa:02:22:36:9a:19:76:74:e6: 6e:ac:83:c6:5b:7f:79:be:fb:de:5b:1b:59:d1:c9: 30:43:ce:54:d4:5d:69:13:92:85:f0:db:65:15:ce: 6a:1f:be:fb:62:2a:e5:1a:79:bf:fd:78:50:ca:c5: f9:9d:e9:27:91:1a:7b:72:93:de:f5:70:3b:5d:0a: 76:a9:31:fd:b6:89:21:95:dc:1c:fd:41:9b:66:ca: 70:ef:5d:d4:91:b2:c6:e8:09:18:68:4e:a0:39:53: 91:c0:30:4f:92:4d:f4:8b:7d:9a:b5:55:5e:46:ae: a1:2f:3b:e6:59:aa:c9:b6:5f:a6:02:54:14:08:75: df:3e:fe:b0:3c:80:14:d7:a4:00:66:27:17:82:3a: 37:c8:54:f9:1c:c8:da:65:fb:15:ed:4e:d1:58:a1: 3c:11:97:30:6d:20:a6:1c:7a:92:3b:95:db:11:7c: b7:b3:cd:b8:0d:e8:30:47:e8:53:d7:b3:a2:70:79: 18:c0:73:88:c7:ef:3b:18:1c:c4:80:b6:ba:3b:58: 8f:75:88:28:e5:16:a2:22:b1:55:46:c6:ca:7d:d4: 8e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E1:AE:AA:0B:20:3D:21:9B:94:8C:64:2E:4D:CE:F8:39:87:62:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ae:d6:93:de:f9:d6:f9:dd:f0:bb:e2:14:23:67:63:d7:e8: 74:40:41:5a:9f:0b:88:aa:82:85:d0:1d:92:e4:39:f3:30:9a: 1e:03:62:eb:21:0e:1e:51:fe:35:a6:b3:42:20:3b:30:f4:2d: 86:a2:fc:af:db:03:50:1f:d9:b5:80:88:b0:e4:e8:29:8d:a6: ab:23:ea:e9:5d:d8:f6:a4:1a:00:9d:ee:75:a2:5e:72:a5:6c: 43:44:23:03:d9:f4:c7:63:b3:51:a5:49:d9:a1:7f:8f:77:83: 22:d3:64:e9:32:4e:4b:51:f5:a5:71:dc:03:00:5c:64:72:4b: 8c:b8:b6:ee:1b:ba:f5:1a:e7:79:33:5b:97:45:52:bb:46:4d: f2:b1:ad:ed:44:de:55:df:f5:69:75:b6:11:e7:b4:d1:67:1c: fd:78:7c:ef:33:07:b4:bb:7a:6b:c6:70:88:74:f5:25:f5:c6: 77:af:7a:49:c5:7e:ff:fb:c3:e8:33:ef:06:96:bf:02:fa:48: 46:6d:a8:1f:ef:e5:9d:3c:68:5d:17:6f:87:d0:61:2d:c9:ed: 68:65:75:c9:06:f6:24:cf:f3:0c:4d:0e:63:04:c7:fc:0c:a6: 8e:19:cf:fd:8e:3c:7a:53:11:e9:d4:52:7f:53:59:83:1d:6f: 83:ce:ce:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn9KY5Fwt4PBiPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTE2ZjFjOGItZWU2NC00MjMwLWI5NjgtZjIzYTZhNTk4YWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtH0VqfD6oxye8BLV5x3o8ctw1SZLoYSV4A0 ni1THO5Bl2j6AiI2mhl2dOZurIPGW395vvveWxtZ0ckwQ85U1F1pE5KF8NtlFc5q H777YirlGnm//XhQysX5neknkRp7cpPe9XA7XQp2qTH9tokhldwc/UGbZspw713U kbLG6AkYaE6gOVORwDBPkk30i32atVVeRq6hLzvmWarJtl+mAlQUCHXfPv6wPIAU 16QAZicXgjo3yFT5HMjaZfsV7U7RWKE8EZcwbSCmHHqSO5XbEXy3s824DegwR+hT 17OicHkYwHOIx+87GBzEgLa6O1iPdYgo5RaiIrFVRsbKfdSObwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrhrqoLID0hm5SMZC5Nzvg5h2IYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWE5MDY1OTMtNzUxOC0z NzE3LTkzYTEtMzZmNDE1NjI2ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKu1pPe+db53fC74hQjZ2PX6HRAQVqfC4iqgoXQHZLkOfMwmh4DYush Dh5R/jWms0IgOzD0LYai/K/bA1Af2bWAiLDk6CmNpqsj6uld2PakGgCd7nWiXnKl bENEIwPZ9Mdjs1GlSdmhf493gyLTZOkyTktR9aVx3AMAXGRyS4y4tu4buvUa53kz W5dFUrtGTfKxre1E3lXf9Wl1thHntNFnHP14fO8zB7S7emvGcIh09SX1xneveknF fv/7w+gz7waWvwL6SEZtqB/v5Z08aF0Xb4fQYS3J7WhldckG9iTP8wxNDmMEx/wM po4Zz/2OPHpTEenUUn9TWYMdb4POztc= -----END CERTIFICATE-----Generated at Wed Jul 29 05:37:12 2026 by rpki-client