$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa File: 8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa (raw, json) Hash identifier: +QBdA/7Rvcf15bwhUvuRkUaXrjMGjJQ1ogqTPqgddCY= Subject key identifier: 47:78:57:AC:6E:69:37:2E:B6:66:92:D2:6A:52:2E:B8:C8:F3:C3:D9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C1E285F53B70321FC8D80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.243.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:1e:28:5f:53:b7:03:21:fc:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=2cd47e0a-1346-48b9-b714-a5f1cee194e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d6:d5:68:f7:46:76:b1:e7:14:d3:b5:ff:d3: df:de:52:51:16:54:e9:2e:59:2a:ef:6e:6a:3a:68: 28:e2:73:76:04:f3:64:20:2a:c5:e3:fb:4a:92:fc: 2f:11:39:99:c3:c1:25:0d:c6:1f:89:78:49:02:72: df:1e:3f:c1:0a:d6:4b:a4:cd:56:bb:e3:51:1b:8b: a0:6d:f7:b9:d0:aa:ab:87:e9:88:ab:fe:98:62:37: ea:59:75:9d:66:8a:58:51:e2:a5:a5:2d:c2:88:73: ea:0c:99:65:c0:00:fa:4d:6c:e7:63:d3:28:a5:25: ff:76:4b:9c:af:18:37:ca:ed:e0:46:03:a3:c3:b9: 52:44:ba:c1:dd:cd:a3:65:5a:4c:6f:27:9f:6b:0e: c6:d3:ec:7f:37:81:0b:d8:f9:38:7a:33:36:cc:bb: 6e:98:50:1c:9a:10:80:bf:3b:7d:d7:5e:d5:78:65: 7f:23:30:15:66:bc:65:a5:7e:ad:e0:9b:6a:1a:85: c7:2b:1e:06:20:81:68:11:b5:58:84:56:d3:7f:86: 04:8e:5f:70:fa:cd:66:77:68:52:28:0b:b0:da:80: 16:2e:7a:fb:4a:dc:11:8b:10:6f:77:36:a9:15:9f: 3b:9b:b4:08:80:62:a1:8d:81:7f:c5:76:33:fe:b2: 5a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:78:57:AC:6E:69:37:2E:B6:66:92:D2:6A:52:2E:B8:C8:F3:C3:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:4c:9d:89:35:69:4d:5c:40:61:79:5e:26:00:38:52:20:dc: 2b:15:ee:7f:5a:ea:9a:30:77:55:17:e2:67:13:e4:88:7b:9c: 7f:f2:28:17:a2:0b:42:13:d8:d5:24:83:e8:89:22:5e:08:c3: 05:8a:cd:23:bf:e5:3b:f6:5f:e7:68:ff:d6:0b:44:aa:4c:f1: b5:46:f9:d1:23:b9:9c:36:3a:46:9a:a1:d0:28:fb:c5:61:de: 0b:2c:3f:68:4f:b2:df:4c:f5:1a:7f:71:7a:4e:5c:dc:4f:02: 56:82:6a:a7:42:1f:30:79:95:07:52:87:c0:d8:33:c6:9b:56: ef:fa:b6:ec:fe:18:e9:d2:12:98:b5:40:49:82:87:59:86:db: 3c:be:96:62:35:80:ed:32:06:00:ae:81:c5:99:03:1f:87:ea: ea:bd:2f:37:f9:c3:82:ff:f8:1b:f1:42:9e:7c:e2:16:84:11: f5:93:58:00:0c:82:b7:1e:54:b7:3c:82:7e:be:2e:95:fd:52: 39:1d:77:66:83:dc:39:c4:da:08:b8:49:19:52:57:c0:db:7a: 29:60:3f:5e:e2:91:57:45:bc:94:eb:e7:e7:af:3b:8c:87:9d: c7:ac:2c:15:ec:9c:f8:b6:ff:3f:e5:15:60:89:56:34:39:a7: aa:0f:ea:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnB4oX1O3AyH8jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MmNkNDdlMGEtMTM0Ni00OGI5LWI3MTQtYTVmMWNlZTE5NGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtbVaPdGdrHnFNO1/9Pf3lJRFlTpLlkq725q Omgo4nN2BPNkICrF4/tKkvwvETmZw8ElDcYfiXhJAnLfHj/BCtZLpM1Wu+NRG4ug bfe50Kqrh+mIq/6YYjfqWXWdZopYUeKlpS3CiHPqDJllwAD6TWznY9MopSX/dkuc rxg3yu3gRgOjw7lSRLrB3c2jZVpMbyefaw7G0+x/N4EL2Pk4ejM2zLtumFAcmhCA vzt9117VeGV/IzAVZrxlpX6t4JtqGoXHKx4GIIFoEbVYhFbTf4YEjl9w+s1md2hS KAuw2oAWLnr7StwRixBvdzapFZ87m7QIgGKhjYF/xXYz/rJarQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEd4V6xuaTcutmaS0mpSLrjI88PZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGZmYTViNjctM2Q2ZC0z OWNiLTg3YzItMDI3ZTk5OGRiZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBMnYk1aU1cQGF5XiYAOFIg3CsV7n9a6powd1UX4mcT5Ih7nH/yKBei C0IT2NUkg+iJIl4IwwWKzSO/5Tv2X+do/9YLRKpM8bVG+dEjuZw2OkaaodAo+8Vh 3gssP2hPst9M9Rp/cXpOXNxPAlaCaqdCHzB5lQdSh8DYM8abVu/6tuz+GOnSEpi1 QEmCh1mG2zy+lmI1gO0yBgCugcWZAx+H6uq9Lzf5w4L/+BvxQp584haEEfWTWAAM grceVLc8gn6+LpX9Ujkdd2aD3DnE2gi4SRlSV8DbeilgP17ikVdFvJTr5+evO4yH ncesLBXsnPi2/z/lFWCJVjQ5p6oP6rg= -----END CERTIFICATE-----Generated at Sat Jun 13 20:49:18 2026 by rpki-client