$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa File: 8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa (raw, json) Hash identifier: uQvpo0Fnvjh05C0MfUyLfL6rdAFp2UhOS89e1R543qc= Subject key identifier: 46:7E:EB:55:1C:B2:49:57:6C:D9:49:C3:11:CC:1F:A4:2B:CB:67:C9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79FD28CF5092BFA11F50380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.243.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:d2:8c:f5:09:2b:fa:11:f5:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f3edb3e5-b889-42f3-b749-e65959753aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:a7:49:4f:e2:9d:7e:8c:69:4a:4e:af:7f: 53:b9:4f:84:d2:09:be:66:15:47:f2:60:38:ed:b0: 69:96:ac:4a:85:9f:8e:d9:2e:67:cc:7d:2c:ad:34: 2f:d4:e7:e6:67:f8:4b:0e:bd:9f:00:80:96:bb:0f: 32:53:82:ef:10:eb:0c:e9:f9:cc:ee:4d:90:5b:fc: d6:fd:7b:c9:b1:15:df:2f:a3:f0:08:1b:3d:41:2d: 8d:b4:d2:7e:c2:e8:56:ac:db:0d:23:62:32:03:39: 28:3b:e0:19:9c:91:54:7e:ff:9a:cf:e6:ba:88:a5: cb:15:4d:22:14:ad:60:77:13:d4:5a:02:d1:23:06: 7c:7a:45:46:a5:b4:f2:df:1a:19:6a:ed:16:e2:c7: 96:39:7c:14:e2:88:76:6b:88:23:9c:05:d4:50:4b: e1:8a:d2:3a:ce:7d:11:04:a7:53:1b:ec:25:87:2f: e9:0e:fb:6d:c3:9b:b8:b5:e1:c9:e5:2e:7c:4b:51: 96:52:88:aa:1c:0e:66:74:04:e5:82:2e:82:97:41: a3:a8:66:1d:df:d3:6b:f2:00:07:96:24:43:a5:ef: 3f:78:f6:04:b8:7a:e0:f3:7d:83:0a:8b:53:cc:78: 8d:f4:9c:ce:eb:74:e5:f8:62:22:1a:ab:13:ce:b9: b8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7E:EB:55:1C:B2:49:57:6C:D9:49:C3:11:CC:1F:A4:2B:CB:67:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:cf:42:ba:50:a5:cf:65:72:24:4c:a9:43:3f:b6:07:d0:06: 1c:3a:b5:65:4f:a7:c7:ca:91:57:7f:e8:7a:a5:11:69:5c:a7: 01:8b:26:91:26:02:7c:25:c0:fa:d1:7c:9f:cb:3a:f5:19:57: 4c:1a:69:d6:4a:53:dd:ff:cb:ea:f6:82:be:38:d5:4d:69:c7: 70:5f:e0:f6:ce:c9:44:14:8d:7e:5c:c5:3a:48:44:4f:65:0a: d0:8f:4d:67:50:03:f4:fc:b8:3f:df:f2:5b:07:a3:9c:d4:b8: a2:d6:85:b4:20:73:d2:06:26:cf:3d:b9:fb:9b:53:9f:0c:34: 8c:e4:4e:6d:c5:44:a3:bb:1e:2e:d5:a8:72:a7:0d:a3:9b:0f: 3c:aa:0a:63:49:cb:55:28:37:67:97:43:ac:39:e1:ee:09:ff: a2:1c:8a:1a:43:32:2b:4b:e6:87:d2:e7:7f:16:f3:34:74:b8: 16:fa:1d:5a:dc:e1:76:d7:66:db:e7:b6:61:f8:f6:b2:92:f5: e2:de:80:fa:ab:48:b6:6e:b2:16:55:30:6c:fc:b8:6e:b4:52: 53:5b:10:9a:a1:1a:92:c5:88:25:c9:01:f0:3e:48:b9:71:69: 3c:52:c0:6d:bf:a6:ca:2d:d7:f5:00:f7:3f:74:20:5d:97:c8: 7d:88:88:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn9KM9Qkr+hH1A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjNlZGIzZTUtYjg4OS00MmYzLWI3NDktZTY1OTU5NzUzYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSCnSU/inX6MaUpOr39TuU+E0gm+ZhVH8mA4 7bBplqxKhZ+O2S5nzH0srTQv1OfmZ/hLDr2fAICWuw8yU4LvEOsM6fnM7k2QW/zW /XvJsRXfL6PwCBs9QS2NtNJ+wuhWrNsNI2IyAzkoO+AZnJFUfv+az+a6iKXLFU0i FK1gdxPUWgLRIwZ8ekVGpbTy3xoZau0W4seWOXwU4oh2a4gjnAXUUEvhitI6zn0R BKdTG+wlhy/pDvttw5u4teHJ5S58S1GWUoiqHA5mdATlgi6Cl0GjqGYd39Nr8gAH liRDpe8/ePYEuHrg832DCotTzHiN9JzO63Tl+GIiGqsTzrm4XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZ+61UcsklXbNlJwxHMH6Qry2fJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGZmYTViNjctM2Q2ZC0z OWNiLTg3YzItMDI3ZTk5OGRiZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALvPQrpQpc9lciRMqUM/tgfQBhw6tWVPp8fKkVd/6HqlEWlcpwGLJpEm AnwlwPrRfJ/LOvUZV0waadZKU93/y+r2gr441U1px3Bf4PbOyUQUjX5cxTpIRE9l CtCPTWdQA/T8uD/f8lsHo5zUuKLWhbQgc9IGJs89ufubU58MNIzkTm3FRKO7Hi7V qHKnDaObDzyqCmNJy1UoN2eXQ6w54e4J/6IcihpDMitL5ofS538W8zR0uBb6HVrc 4XbXZtvntmH49rKS9eLegPqrSLZushZVMGz8uG60UlNbEJqhGpLFiCXJAfA+SLlx aTxSwG2/psot1/UA9z90IF2XyH2IiIA= -----END CERTIFICATE-----Generated at Wed Jul 29 04:16:09 2026 by rpki-client