$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72f3891d-cdeb-39c8-978c-779addcbe775.roa File: 72f3891d-cdeb-39c8-978c-779addcbe775.roa (raw, json) Hash identifier: ixW2SyVRpITVwi8jU+R9nCxJxuouZvRxbV4V3iVyJZo= Subject key identifier: 16:9A:D8:C7:17:45:CE:64:9E:E3:6E:83:50:05:0D:88:C3:AE:83:E8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E127DC86D9A1D5EF0FC40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72f3891d-cdeb-39c8-978c-779addcbe775.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.242.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:12:7d:c8:6d:9a:1d:5e:f0:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3a8d08f4-d1c5-4136-822f-80511c68095d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5a:78:86:eb:24:b2:b3:4b:2c:7f:b5:bf:74: 08:b8:1e:49:43:55:ac:95:ad:36:a4:50:a2:1e:7d: 2a:1e:07:03:a8:0e:46:6c:a4:10:3d:9f:a2:e1:44: 7a:ca:d5:31:c0:56:55:0a:56:1d:38:ef:f9:e2:ab: a9:bd:7e:d4:29:0a:1e:98:0b:a4:a5:de:84:f9:b5: eb:94:1e:a1:8a:2b:f3:78:17:fc:a1:f0:9e:c0:e8: 86:dc:d2:0b:12:51:95:55:6e:cf:d5:90:1c:6f:c1: 6d:19:07:b8:ab:ff:f9:65:c9:1d:f8:22:2d:41:ad: 48:ea:34:fc:d2:34:ec:85:2b:1e:dc:57:1a:72:28: 1b:e4:fa:09:09:22:3f:b4:ca:26:7e:85:0c:f9:13: 44:f9:9d:4a:61:d8:e6:79:f3:72:88:04:83:05:78: cd:cf:b1:30:99:72:60:ab:28:e6:4e:f9:59:fb:fa: 68:24:48:de:b8:c4:28:8c:26:7e:16:96:44:af:8d: 8a:38:cc:33:e0:6c:61:db:84:16:ca:ed:bd:46:35: 0f:85:3b:96:07:83:33:76:40:a8:14:cd:8e:ae:e6: 7f:03:df:90:dd:43:d8:52:31:c8:43:87:2d:0d:90: 56:07:06:46:d2:07:b4:68:77:99:de:7f:79:c4:2b: ca:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9A:D8:C7:17:45:CE:64:9E:E3:6E:83:50:05:0D:88:C3:AE:83:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72f3891d-cdeb-39c8-978c-779addcbe775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d2:3e:c5:61:0a:f0:35:97:a6:04:bd:69:19:08:50:f5:bd: a8:0e:49:04:42:9d:83:77:c5:5c:f1:4e:7a:e6:12:fb:3c:c1: ad:db:fd:ac:65:c1:22:83:a0:4b:a8:d2:95:c6:15:ae:eb:b8: 7c:70:24:d9:51:86:94:1e:ab:52:59:98:de:8e:ed:db:6f:41: 9a:5a:c7:2a:48:60:6a:e2:75:f5:88:87:11:21:4d:b1:bd:97: 2e:9e:9a:ca:d1:e0:5b:d2:21:2c:76:9c:6c:fc:86:3b:4a:13: 34:d0:b7:ff:3e:90:59:c0:b1:74:7f:cb:02:0d:7f:11:48:7d: 2f:e5:c1:ef:94:ea:98:49:08:95:6f:7c:7b:02:50:d1:fa:01: 44:1c:35:0e:6b:32:5e:65:23:6b:45:94:94:b7:da:da:50:6c: f0:9b:e6:6b:f1:88:fb:25:b3:aa:55:56:fb:1e:14:9d:61:af: 65:7a:7d:d9:d4:10:4a:18:ef:c2:09:c6:9b:2a:ec:8c:ac:53: 22:d0:2d:c9:01:10:15:0b:fe:72:8d:99:94:86:25:d4:9e:10: 67:07:38:59:a1:07:ea:e6:47:87:c4:39:6f:91:02:6e:26:08: 79:08:ce:d9:fa:4f:ac:22:a0:b9:97:ea:2d:99:07:35:4a:f6: 88:4c:1b:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnhJ9yG2aHV7w/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2E4ZDA4ZjQtZDFjNS00MTM2LTgyMmYtODA1MTFjNjgwOTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1p4husksrNLLH+1v3QIuB5JQ1Wsla02pFCi Hn0qHgcDqA5GbKQQPZ+i4UR6ytUxwFZVClYdOO/54qupvX7UKQoemAukpd6E+bXr lB6hiivzeBf8ofCewOiG3NILElGVVW7P1ZAcb8FtGQe4q//5Zckd+CItQa1I6jT8 0jTshSse3Fcacigb5PoJCSI/tMomfoUM+RNE+Z1KYdjmefNyiASDBXjNz7EwmXJg qyjmTvlZ+/poJEjeuMQojCZ+FpZEr42KOMwz4Gxh24QWyu29RjUPhTuWB4MzdkCo FM2OruZ/A9+Q3UPYUjHIQ4ctDZBWBwZG0ge0aHeZ3n95xCvK8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaa2McXRc5knuNug1AFDYjDroPoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzJmMzg5MWQtY2RlYi0z OWM4LTk3OGMtNzc5YWRkY2JlNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7SPsVhCvA1l6YEvWkZCFD1vagOSQRCnYN3xVzxTnrmEvs8wa3b/axl wSKDoEuo0pXGFa7ruHxwJNlRhpQeq1JZmN6O7dtvQZpaxypIYGridfWIhxEhTbG9 ly6emsrR4FvSISx2nGz8hjtKEzTQt/8+kFnAsXR/ywINfxFIfS/lwe+U6phJCJVv fHsCUNH6AUQcNQ5rMl5lI2tFlJS32tpQbPCb5mvxiPsls6pVVvseFJ1hr2V6fdnU EEoY78IJxpsq7IysUyLQLckBEBUL/nKNmZSGJdSeEGcHOFmhB+rmR4fEOW+RAm4m CHkIztn6T6wioLmX6i2ZBzVK9ohMG1U= -----END CERTIFICATE-----Generated at Wed Jul 29 04:16:16 2026 by rpki-client