$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa File: a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa (raw, json) Hash identifier: 74MZhhfUkxsqhQ8Oqt4ldKaRia/mfpIq/roJ5sK8qZk= Subject key identifier: 17:29:99:6D:19:12:4C:CF:92:A7:0E:99:83:6D:E7:F9:D9:69:06:A0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C14F82CDF88AB735B7280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.242.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:14:f8:2c:df:88:ab:73:5b:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=41c58cbc-e1b2-4004-9bd7-b21c45f318e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d2:34:ac:87:33:d9:81:4a:fa:97:11:38:1d: 12:e4:90:ba:19:8b:fc:94:3f:13:39:b9:9d:c4:33: 30:45:7a:77:62:ee:01:76:2c:72:b1:6a:99:e2:58: 19:01:5f:0e:90:a7:ea:14:22:43:65:c3:9c:6d:bb: 12:b2:64:d0:ba:55:57:46:2a:29:7a:b5:f9:a0:bb: 6a:71:4f:81:5d:29:97:69:52:e6:61:ab:9b:a5:63: b8:e0:f3:d3:44:91:c2:f5:6b:94:25:72:c9:19:33: b1:37:50:9b:b3:c6:c1:b1:4a:7b:fe:f7:b7:64:da: c0:a1:77:00:19:7e:27:15:85:d4:0a:4c:08:f7:83: 65:f2:fc:5f:38:5d:8c:68:c0:47:45:a4:92:c5:df: 5a:cf:0e:8b:1e:10:d6:11:52:5a:32:f8:75:9d:22: 6c:c2:80:37:98:bf:a9:47:5e:bd:88:92:7c:e4:a1: 2b:70:95:a7:ea:94:c4:02:fe:b0:50:de:65:8b:15: 4d:25:e7:75:6e:e6:20:6d:fd:7d:b1:e3:d7:7e:ed: 04:e8:5c:a7:df:db:62:93:08:ef:16:b6:f4:03:d2: c6:b5:ad:52:18:79:fe:cd:4a:43:63:7a:2b:a0:48: 47:5f:a8:79:f5:a5:a3:c2:53:5b:14:7e:ce:18:8a: c4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:29:99:6D:19:12:4C:CF:92:A7:0E:99:83:6D:E7:F9:D9:69:06:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:4c:c1:11:a0:86:23:01:58:85:48:31:03:6c:27:d3:8e:12: 4c:03:a9:85:13:b0:0d:a3:d8:4d:61:ba:5e:d7:53:b0:ba:61: eb:7d:3b:e9:a7:d8:93:b6:54:a9:c2:aa:6c:c7:38:1a:bb:64: 96:4c:bc:ec:8e:d0:7b:b9:09:ff:12:12:03:2a:d4:22:0f:34: 7b:61:b4:e9:95:a3:4a:84:c5:3f:72:5b:0f:a5:5f:c9:93:4b: 01:42:2a:66:aa:c7:e7:f0:a5:7c:11:39:da:fa:30:0d:ec:62: ae:81:7d:0c:c7:2c:bf:de:f8:b1:d3:c1:91:51:f4:2a:6c:6a: af:aa:72:90:7b:7e:fe:5d:2b:7b:9d:f0:45:51:f4:fe:3d:a5: d2:b4:84:b7:86:c9:fc:13:78:88:e1:33:f2:b8:7b:9b:8c:27: d4:68:a7:f1:31:39:97:03:30:c2:64:37:9a:ab:d2:ee:3d:9e: d5:b6:dc:62:9d:29:6d:aa:7c:54:e6:11:68:f8:02:30:24:cf: 86:9d:82:a6:95:a1:03:2d:71:53:dd:dd:b9:c9:25:fc:3d:ec: 7f:4c:ff:0a:04:fa:0a:b4:86:d8:3a:c4:39:7d:84:47:dc:cc: c0:d0:b7:d6:e9:e7:c8:ff:90:b5:98:4e:d5:0c:4c:fd:63:89: 9c:48:c4:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnBT4LN+Iq3NbcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NDFjNThjYmMtZTFiMi00MDA0LTliZDctYjIxYzQ1ZjMxOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9I0rIcz2YFK+pcROB0S5JC6GYv8lD8TObmd xDMwRXp3Yu4BdixysWqZ4lgZAV8OkKfqFCJDZcOcbbsSsmTQulVXRioperX5oLtq cU+BXSmXaVLmYaubpWO44PPTRJHC9WuUJXLJGTOxN1Cbs8bBsUp7/ve3ZNrAoXcA GX4nFYXUCkwI94Nl8vxfOF2MaMBHRaSSxd9azw6LHhDWEVJaMvh1nSJswoA3mL+p R169iJJ85KErcJWn6pTEAv6wUN5lixVNJed1buYgbf19sePXfu0E6Fyn39tikwjv Frb0A9LGta1SGHn+zUpDY3oroEhHX6h59aWjwlNbFH7OGIrEgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcpmW0ZEkzPkqcOmYNt5/nZaQagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTI4ZTFjOTctMDVhOS0z NmUyLWFiYmYtMDA5Y2Q0ZDgwOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJMwRGghiMBWIVIMQNsJ9OOEkwDqYUTsA2j2E1hul7XU7C6Yet9O+mn 2JO2VKnCqmzHOBq7ZJZMvOyO0Hu5Cf8SEgMq1CIPNHthtOmVo0qExT9yWw+lX8mT SwFCKmaqx+fwpXwROdr6MA3sYq6BfQzHLL/e+LHTwZFR9Cpsaq+qcpB7fv5dK3ud 8EVR9P49pdK0hLeGyfwTeIjhM/K4e5uMJ9Rop/ExOZcDMMJkN5qr0u49ntW23GKd KW2qfFTmEWj4AjAkz4adgqaVoQMtcVPd3bnJJfw97H9M/woE+gq0htg6xDl9hEfc zMDQt9bp58j/kLWYTtUMTP1jiZxIxK0= -----END CERTIFICATE-----Generated at Sat Jun 13 18:01:12 2026 by rpki-client