$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2002b14-896a-3c37-9c2d-2dc5e00ae522.roa File: a2002b14-896a-3c37-9c2d-2dc5e00ae522.roa (raw, json) Hash identifier: TSov9hpNYe6XtJG/hIdBgQQAoxe81tMDNYc52EICw6g= Subject key identifier: A2:6E:6C:07:2D:DE:02:5A:22:03:3B:D4:43:33:6F:1C:49:A6:05:EB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B9CED951FFE78E9DE5D80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2002b14-896a-3c37-9c2d-2dc5e00ae522.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.243.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:9c:ed:95:1f:fe:78:e9:de:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=c14b3be1-9b00-482d-adcd-27e8b4a28f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e7:ec:a5:b0:68:05:af:c0:ad:1b:af:f1:24: f9:ce:b3:36:ef:a5:4b:a7:74:ac:66:58:e2:55:2d: 93:59:00:ab:5b:97:bc:84:23:ae:fb:6b:b4:ad:ad: ad:d9:9e:7b:47:b2:4b:f3:e8:9f:a6:eb:4d:62:ec: 91:a9:50:92:80:af:af:a0:da:e1:b1:70:5c:f8:67: 58:d1:a2:2e:87:6d:16:b2:67:0c:1d:ca:f9:65:0a: 76:48:7b:a8:66:d6:f4:e4:b8:61:03:71:83:7c:11: f9:91:92:c7:ed:ee:bc:12:42:c7:cc:bf:c7:ee:ed: 64:5d:3e:80:f9:5e:3d:11:6c:68:ed:4f:e2:d7:ec: 2c:12:d1:14:8b:16:ec:28:49:55:16:f4:f8:fe:95: 68:eb:88:30:29:90:43:ef:ce:fe:74:8f:e1:58:23: 03:51:ba:bf:d1:72:df:ba:d6:8b:c3:6a:8b:13:03: 88:71:b2:a8:ea:20:c4:3f:88:59:b3:af:df:f0:41: 45:99:d6:30:a5:f2:04:78:75:af:b9:77:3e:a2:0a: 79:bb:d4:b0:ca:79:96:be:ec:50:b9:5e:32:4e:9f: 47:d7:69:36:c9:6c:dc:b4:1d:70:ea:62:1b:e6:2b: 49:4d:0a:6e:00:61:be:cc:74:a5:35:ba:c6:a1:69: 1e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6E:6C:07:2D:DE:02:5A:22:03:3B:D4:43:33:6F:1C:49:A6:05:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2002b14-896a-3c37-9c2d-2dc5e00ae522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:70:28:60:9d:af:f5:87:e2:33:41:15:0d:99:a4:c6:93:40: 6e:c6:f3:b6:da:e6:19:37:c8:c0:e0:3a:15:bc:7b:1e:b0:10: 2e:f6:91:bd:03:7f:e6:ac:8e:7f:1c:19:95:32:16:f6:8e:12: dc:d1:19:d4:b1:36:d9:52:9e:51:bf:8c:1c:c9:51:2a:e2:c4: cc:4c:64:96:6c:5b:db:b3:4c:8a:a8:66:d7:8c:6e:95:2c:5d: 69:c8:1f:02:a8:e6:f6:6e:29:d8:34:91:36:98:87:48:21:19: d9:93:c5:87:67:a1:0f:0c:a7:63:e2:04:43:9c:bf:aa:d9:7d: 07:a9:1c:6b:a5:e2:5a:7f:22:c2:ac:dc:dc:87:64:13:6c:f9: b4:24:1c:35:aa:2d:4a:3a:20:03:aa:0f:60:5a:e7:d3:77:9b: 5b:29:16:68:79:8a:c2:47:65:db:2f:8b:86:cb:ff:f7:a0:32: 67:ce:fc:9d:2f:9b:0b:81:55:43:b3:e3:ac:0d:87:bb:b3:11: 02:16:4e:73:51:e2:d1:c2:e5:8f:5e:7b:3e:11:cf:ac:6c:3b: 0d:1d:c9:09:6c:d7:42:e8:b6:a0:e1:56:be:0f:38:e3:e2:33: 6f:24:f0:ea:8e:a2:79:b8:85:73:56:ab:0b:c6:5a:88:2b:da: 48:b3:c5:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm5ztlR/+eOneXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YzE0YjNiZTEtOWIwMC00ODJkLWFkY2QtMjdlOGI0YTI4ZjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+fspbBoBa/ArRuv8ST5zrM276VLp3SsZlji VS2TWQCrW5e8hCOu+2u0ra2t2Z57R7JL8+ifputNYuyRqVCSgK+voNrhsXBc+GdY 0aIuh20WsmcMHcr5ZQp2SHuoZtb05LhhA3GDfBH5kZLH7e68EkLHzL/H7u1kXT6A +V49EWxo7U/i1+wsEtEUixbsKElVFvT4/pVo64gwKZBD787+dI/hWCMDUbq/0XLf utaLw2qLEwOIcbKo6iDEP4hZs6/f8EFFmdYwpfIEeHWvuXc+ogp5u9SwynmWvuxQ uV4yTp9H12k2yWzctB1w6mIb5itJTQpuAGG+zHSlNbrGoWke0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJubAct3gJaIgM71EMzbxxJpgXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTIwMDJiMTQtODk2YS0z YzM3LTljMmQtMmRjNWUwMGFlNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClwKGCdr/WH4jNBFQ2ZpMaTQG7G87ba5hk3yMDgOhW8ex6wEC72kb0D f+asjn8cGZUyFvaOEtzRGdSxNtlSnlG/jBzJUSrixMxMZJZsW9uzTIqoZteMbpUs XWnIHwKo5vZuKdg0kTaYh0ghGdmTxYdnoQ8Mp2PiBEOcv6rZfQepHGul4lp/IsKs 3NyHZBNs+bQkHDWqLUo6IAOqD2Ba59N3m1spFmh5isJHZdsvi4bL//egMmfO/J0v mwuBVUOz46wNh7uzEQIWTnNR4tHC5Y9eez4Rz6xsOw0dyQls10LotqDhVr4POOPi M28k8OqOonm4hXNWqwvGWogr2kizxWM= -----END CERTIFICATE-----Generated at Sat Jun 13 17:35:17 2026 by rpki-client