$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5df3a7fd-61a7-3250-8c36-0f4508465895.roa File: 5df3a7fd-61a7-3250-8c36-0f4508465895.roa (raw, json) Hash identifier: tEwqnOhIf6l5FfYce9Ua0NymHj3PIy8LLv3J01hkaCo= Subject key identifier: 1B:EE:4E:B7:69:86:30:A6:54:A9:32:B0:A5:D9:41:40:71:4E:A2:72 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C1C950501E50141A1D140 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5df3a7fd-61a7-3250-8c36-0f4508465895.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.243.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:1c:95:05:01:e5:01:41:a1:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=a2054c20-4a06-4482-8b07-40eda814e4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2b:13:e0:08:e5:6f:a1:f4:8f:a5:2a:ad:55: c7:95:81:20:3b:27:13:d6:1e:50:cf:bd:64:0b:38: e1:80:03:ef:21:81:d9:2a:94:e5:9a:d8:68:27:60: 4a:f1:b4:4b:59:a6:69:ab:e2:9a:ad:43:43:01:8c: 1b:0a:cd:cf:b7:3b:ed:d2:cb:2d:d6:75:5e:56:c6: 93:a2:9b:b4:a3:d1:70:bc:b9:03:42:94:bc:fa:49: 88:43:41:6d:89:ae:e4:90:dc:e0:ba:9d:ea:48:aa: e7:25:c3:3b:e6:8b:1a:e9:14:07:f4:25:ce:01:c9: e6:92:23:ca:f9:4d:2d:67:a5:80:59:d3:da:3b:56: 01:0e:9d:d3:d0:da:78:75:4d:c9:30:26:10:26:a9: 57:48:b5:7f:9a:5b:31:4b:e0:89:88:2a:1a:57:42: 45:f4:96:ed:30:a2:2e:ff:a0:8c:f4:4d:f6:11:37: 29:5e:e8:10:d4:4e:75:f5:18:85:17:4c:e4:1e:fa: ea:30:8b:e5:3a:42:26:2f:72:dd:49:11:bd:1d:01: eb:e5:4d:e6:fb:9b:fe:77:3a:54:e5:67:45:0c:b0: 55:b8:05:4d:04:a2:df:4a:a9:5e:28:79:b7:1e:b4: 72:3f:e9:9d:f4:61:c0:55:e1:82:7b:8b:53:b8:6f: c3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EE:4E:B7:69:86:30:A6:54:A9:32:B0:A5:D9:41:40:71:4E:A2:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5df3a7fd-61a7-3250-8c36-0f4508465895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:21:e8:27:ae:59:e7:e6:5f:3b:59:13:57:0b:94:0a:b9:33: 0c:47:ad:46:21:e6:d0:c9:cc:0d:2c:ab:a9:ca:73:1e:08:9a: 30:02:29:0d:60:e7:6c:62:a7:94:e9:18:54:75:2f:1c:7d:b4: 6d:f4:c2:01:8a:11:d0:6b:dd:96:57:b3:a7:81:41:be:45:9e: d0:e3:25:dd:5a:56:5f:30:48:fb:51:19:71:33:94:e1:ad:1a: 9b:58:ae:26:a5:9b:2a:e1:1d:a8:61:3b:99:18:93:96:52:d5: 51:38:95:3d:84:37:ce:59:4d:f4:f9:64:c3:aa:3c:11:bc:17: 3d:f4:cd:b5:06:27:3e:85:cb:f3:f0:69:b4:d5:aa:1f:78:97: 49:a9:fc:94:bc:64:f7:67:3a:32:73:0a:fd:32:50:08:83:21: f5:31:11:fc:da:f9:6a:b5:49:97:38:0d:79:42:05:d5:66:fc: 6c:52:44:87:36:ca:e8:84:51:d5:f5:06:82:ac:30:c3:34:18: da:3b:d0:9c:6f:82:14:be:2b:9a:89:9c:c8:37:f1:76:5c:7c: 2f:1b:af:39:ad:03:80:9f:45:0b:be:f2:a2:4a:ec:37:8e:11: 49:2c:84:0f:a7:e7:dd:9b:d9:be:86:4c:a1:2e:ed:e4:c0:f8: 59:32:67:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnByVBQHlAUGh0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YTIwNTRjMjAtNGEwNi00NDgyLThiMDctNDBlZGE4MTRlNGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCsT4Ajlb6H0j6UqrVXHlYEgOycT1h5Qz71k CzjhgAPvIYHZKpTlmthoJ2BK8bRLWaZpq+KarUNDAYwbCs3Ptzvt0sst1nVeVsaT opu0o9FwvLkDQpS8+kmIQ0Ftia7kkNzgup3qSKrnJcM75osa6RQH9CXOAcnmkiPK +U0tZ6WAWdPaO1YBDp3T0Np4dU3JMCYQJqlXSLV/mlsxS+CJiCoaV0JF9JbtMKIu /6CM9E32ETcpXugQ1E519RiFF0zkHvrqMIvlOkImL3LdSRG9HQHr5U3m+5v+dzpU 5WdFDLBVuAVNBKLfSqleKHm3HrRyP+md9GHAVeGCe4tTuG/DmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvuTrdphjCmVKkysKXZQUBxTqJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWRmM2E3ZmQtNjFhNy0z MjUwLThjMzYtMGY0NTA4NDY1ODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4h6CeuWefmXztZE1cLlAq5MwxHrUYh5tDJzA0sq6nKcx4ImjACKQ1g 52xip5TpGFR1Lxx9tG30wgGKEdBr3ZZXs6eBQb5FntDjJd1aVl8wSPtRGXEzlOGt GptYrialmyrhHahhO5kYk5ZS1VE4lT2EN85ZTfT5ZMOqPBG8Fz30zbUGJz6Fy/Pw abTVqh94l0mp/JS8ZPdnOjJzCv0yUAiDIfUxEfza+Wq1SZc4DXlCBdVm/GxSRIc2 yuiEUdX1BoKsMMM0GNo70JxvghS+K5qJnMg38XZcfC8brzmtA4CfRQu+8qJK7DeO EUkshA+n592b2b6GTKEu7eTA+FkyZz8= -----END CERTIFICATE-----Generated at Sun Jun 14 03:06:50 2026 by rpki-client