$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3117d42-d5b8-3316-afa1-5b3198177348.roa File: a3117d42-d5b8-3316-afa1-5b3198177348.roa (raw, json) Hash identifier: rc3yRHvRbNd31PrbES5fpHGSnKwDDrrk0Yh5TVVWKk0= Subject key identifier: AA:0C:7C:54:C9:80:75:DB:3E:CB:A8:F4:03:8A:30:03:DE:1C:D0:49 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C16DF85AD7570A0C36C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3117d42-d5b8-3316-afa1-5b3198177348.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.242.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:16:df:85:ad:75:70:a0:c3:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=5c290d93-5581-4cff-846a-315591dbde65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f2:b9:9c:e4:f4:ca:00:89:ff:be:ed:3d:bf: 16:65:67:a5:2f:de:c2:98:f2:30:99:71:59:a0:b9: 8c:7f:85:12:73:68:ca:5d:f5:45:b4:ac:4c:5e:2a: 1f:7d:a3:14:6b:10:db:dc:88:e5:9e:b5:53:7f:1d: 14:58:b1:6d:32:57:b2:13:97:7f:70:b5:5c:e1:56: c1:de:b5:23:2c:9f:f1:75:7f:d0:4b:fc:63:aa:53: 45:95:9f:7a:13:35:59:0e:3d:fb:0a:20:ba:5d:06: 90:07:86:52:3d:9f:05:14:d6:a1:89:44:d2:45:df: f7:6c:63:98:33:d6:af:9d:45:44:9a:fc:40:4d:90: 1b:68:f5:0b:0f:2e:a5:90:0d:4f:1c:37:d8:8a:c4: f3:a9:4f:b9:5a:8a:7c:d9:db:9c:81:6e:c1:17:30: 3b:40:ef:d3:08:b2:4f:7b:ab:7a:0f:22:19:7b:b6: 91:59:4a:1f:35:d1:79:3d:0a:61:85:da:89:5d:79: a2:9e:4d:c8:a3:29:34:13:c4:3b:5d:11:de:51:87: 39:a2:56:25:7c:8f:fa:3f:08:27:a7:a4:a2:d6:f5: 27:b4:be:74:54:8a:df:26:e5:a3:53:83:b5:b1:cb: c9:27:bf:fd:a3:04:b4:6d:b1:c2:59:0e:2f:e4:dc: eb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0C:7C:54:C9:80:75:DB:3E:CB:A8:F4:03:8A:30:03:DE:1C:D0:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3117d42-d5b8-3316-afa1-5b3198177348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:53:d6:84:b9:8b:e2:70:1e:4c:cf:8f:56:d6:86:d6:2b:b8: 88:8c:e3:fd:17:5b:3e:2e:a3:d3:23:7d:81:92:de:f1:6d:b1: c8:ea:c6:4b:93:21:87:1d:45:88:89:56:fc:81:78:9e:e5:5a: b9:b0:9a:43:c6:bf:e0:60:ce:c6:b9:d6:48:fe:3e:30:58:b0: 6d:2f:5c:89:82:ac:f5:ac:fa:a0:25:35:2e:fb:b3:96:90:df: 6c:28:2b:df:c7:b8:d2:d0:fc:cd:0e:d1:9d:b2:3f:af:e9:0c: 7d:65:77:cb:40:6a:b3:df:04:9a:3b:63:10:96:ff:b8:bc:13: d8:be:c0:a6:1e:04:02:c4:ee:ec:7f:4a:15:c4:e1:ef:80:65: dc:cb:f9:ec:33:d9:f4:ae:49:e4:57:d1:10:d4:df:15:47:b0: 24:79:47:ea:21:c3:2d:2b:0a:a4:64:3c:a3:33:d4:f3:ea:83: 79:d1:7b:82:f4:43:6f:16:d1:8f:11:74:74:9d:2c:e9:69:db: e5:b4:4f:2e:ea:03:00:ac:69:99:bf:ec:8c:70:f4:67:e6:74: 82:81:1c:a3:53:f6:e4:d3:cd:32:e8:c5:c1:72:89:a2:09:02: 04:4e:ef:55:73:f3:da:3e:5f:b2:16:b9:9a:35:25:b1:72:c5: fe:da:72:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnBbfha11cKDDbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NWMyOTBkOTMtNTU4MS00Y2ZmLTg0NmEtMzE1NTkxZGJkZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfK5nOT0ygCJ/77tPb8WZWelL97CmPIwmXFZ oLmMf4USc2jKXfVFtKxMXioffaMUaxDb3IjlnrVTfx0UWLFtMleyE5d/cLVc4VbB 3rUjLJ/xdX/QS/xjqlNFlZ96EzVZDj37CiC6XQaQB4ZSPZ8FFNahiUTSRd/3bGOY M9avnUVEmvxATZAbaPULDy6lkA1PHDfYisTzqU+5Wop82ducgW7BFzA7QO/TCLJP e6t6DyIZe7aRWUofNdF5PQphhdqJXXmink3Ioyk0E8Q7XRHeUYc5olYlfI/6Pwgn p6Si1vUntL50VIrfJuWjU4O1scvJJ7/9owS0bbHCWQ4v5NzrlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoMfFTJgHXbPsuo9AOKMAPeHNBJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTMxMTdkNDItZDViOC0z MzE2LWFmYTEtNWIzMTk4MTc3MzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJ5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtT1oS5i+JwHkzPj1bWhtYruIiM4/0XWz4uo9MjfYGS3vFtscjqxkuT IYcdRYiJVvyBeJ7lWrmwmkPGv+Bgzsa51kj+PjBYsG0vXImCrPWs+qAlNS77s5aQ 32woK9/HuNLQ/M0O0Z2yP6/pDH1ld8tAarPfBJo7YxCW/7i8E9i+wKYeBALE7ux/ ShXE4e+AZdzL+ewz2fSuSeRX0RDU3xVHsCR5R+ohwy0rCqRkPKMz1PPqg3nRe4L0 Q28W0Y8RdHSdLOlp2+W0Ty7qAwCsaZm/7Ixw9GfmdIKBHKNT9uTTzTLoxcFyiaIJ AgRO71Vz89o+X7IWuZo1JbFyxf7actI= -----END CERTIFICATE-----Generated at Sun Jun 14 01:44:17 2026 by rpki-client