$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/875e1d65-b3a3-3f98-a573-0d5574a74afe.roa File: 875e1d65-b3a3-3f98-a573-0d5574a74afe.roa (raw, json) Hash identifier: 7CKtSC16WS2Y+GLJDe5YG1E85jn7I3fYiuyxrb40UTA= Subject key identifier: 46:56:A6:FA:C2:42:9C:E4:18:4C:66:A5:11:0C:7B:72:81:C8:19:AA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B95FD17B7FDA1C3797CC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/875e1d65-b3a3-3f98-a573-0d5574a74afe.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.242.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:95:fd:17:b7:fd:a1:c3:79:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=87d99ac8-6357-42bc-92a1-102b82b24e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7b:09:19:1c:3a:36:63:46:2a:ca:93:c4:fd: 19:f8:57:b7:57:3c:bf:18:e4:1f:24:61:c6:7d:ab: db:83:89:91:11:ab:03:33:63:a1:2b:f5:d9:14:a9: 1f:e8:eb:26:af:ce:a9:94:c8:de:9b:90:0d:af:a5: 62:3f:1f:ba:e4:0f:11:07:40:e9:db:62:bc:24:9e: 47:36:13:1f:bd:ce:b2:c3:a3:63:e0:74:1c:ca:4d: eb:b5:0a:48:5a:29:10:60:bb:09:7a:66:33:03:6d: ef:7e:74:18:91:b8:42:3c:a8:0c:47:35:73:35:37: cc:f8:29:66:aa:da:20:bb:30:ba:08:bc:94:98:41: 22:34:9e:5e:fc:20:59:73:43:f2:d6:aa:19:bb:d9: 8a:49:12:a7:89:5e:a5:e9:06:89:f0:a3:6f:22:05: 70:91:aa:df:9e:f4:72:1c:d6:7e:75:74:15:58:ed: a6:fa:ec:0f:7f:99:a0:3a:14:06:25:04:50:26:9f: bd:3a:2a:15:39:57:43:91:d5:83:5b:dc:ef:fa:c0: 0e:1a:8d:12:68:80:86:82:75:8e:bf:53:4b:68:d0: 6b:3f:bc:13:c3:07:6d:4e:96:7b:73:32:4f:2c:64: 15:5f:de:28:58:34:fb:18:d9:49:d7:a2:7a:e8:18: 05:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:56:A6:FA:C2:42:9C:E4:18:4C:66:A5:11:0C:7B:72:81:C8:19:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/875e1d65-b3a3-3f98-a573-0d5574a74afe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:cc:3b:bf:7a:c9:2c:7f:db:7b:da:4c:86:be:73:b3:63:ff: 39:b6:f5:44:12:54:c5:1b:8e:a7:84:3e:04:27:c5:77:f2:d5: 53:85:2e:13:3d:8b:98:a1:ec:71:bf:ae:b7:85:e8:5c:0b:1f: 74:80:9f:8e:cf:2a:db:14:59:fe:73:69:19:a1:f3:86:a2:1a: 14:71:35:fe:c6:c4:bd:97:61:c9:f6:87:6a:4d:b4:34:c1:78: eb:e4:07:31:6a:04:7d:63:b3:f2:17:62:a6:97:53:54:6b:a8: 87:e5:4c:ce:e5:4f:8f:44:17:33:17:99:84:24:57:ae:89:0a: 53:46:8c:1f:22:74:96:96:37:35:fd:68:35:e5:07:82:85:61: e5:ae:88:1a:2d:80:50:7a:8d:8d:73:72:37:61:bd:fb:9b:42: e0:9d:0e:20:94:2e:33:5a:28:b9:fc:e8:4d:73:85:e4:23:fa: f9:6f:4f:2b:a7:10:4b:cd:20:9c:a9:21:df:35:0f:c9:04:69: 68:e2:25:b2:aa:4f:45:22:17:6c:e5:e7:d2:97:84:3c:a2:9b: a8:f1:0e:ae:d3:5e:93:7d:97:0c:9c:5a:ca:ac:bc:27:1f:f1: b9:6c:6e:e6:4c:49:4c:b9:46:0a:ac:87:2c:33:8d:ce:93:c8: 4e:9a:af:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm5X9F7f9ocN5fMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ODdkOTlhYzgtNjM1Ny00MmJjLTkyYTEtMTAyYjgyYjI0ZTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnsJGRw6NmNGKsqTxP0Z+Fe3Vzy/GOQfJGHG favbg4mREasDM2OhK/XZFKkf6Osmr86plMjem5ANr6ViPx+65A8RB0Dp22K8JJ5H NhMfvc6yw6Nj4HQcyk3rtQpIWikQYLsJemYzA23vfnQYkbhCPKgMRzVzNTfM+Clm qtoguzC6CLyUmEEiNJ5e/CBZc0Py1qoZu9mKSRKniV6l6QaJ8KNvIgVwkarfnvRy HNZ+dXQVWO2m+uwPf5mgOhQGJQRQJp+9OioVOVdDkdWDW9zv+sAOGo0SaICGgnWO v1NLaNBrP7wTwwdtTpZ7czJPLGQVX94oWDT7GNlJ16J66BgFRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZWpvrCQpzkGExmpREMe3KByBmqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODc1ZTFkNjUtYjNhMy0z Zjk4LWE1NzMtMGQ1NTc0YTc0YWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjMO796ySx/23vaTIa+c7Nj/zm29UQSVMUbjqeEPgQnxXfy1VOFLhM9 i5ih7HG/rreF6FwLH3SAn47PKtsUWf5zaRmh84aiGhRxNf7GxL2XYcn2h2pNtDTB eOvkBzFqBH1js/IXYqaXU1RrqIflTM7lT49EFzMXmYQkV66JClNGjB8idJaWNzX9 aDXlB4KFYeWuiBotgFB6jY1zcjdhvfubQuCdDiCULjNaKLn86E1zheQj+vlvTyun EEvNIJypId81D8kEaWjiJbKqT0UiF2zl59KXhDyim6jxDq7TXpN9lwycWsqsvCcf 8blsbuZMSUy5Rgqshywzjc6TyE6aryQ= -----END CERTIFICATE-----Generated at Sat Jun 13 21:49:16 2026 by rpki-client