$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5640d06-d4ec-33b7-b775-706c2d848417.roa File: a5640d06-d4ec-33b7-b775-706c2d848417.roa (raw, json) Hash identifier: xT3jOPNNPh3KSNn9abyXPhbfg8eMUiUYJFZvD9+bJj0= Subject key identifier: 2B:37:A6:31:EE:0B:90:AE:6A:18:9C:5F:68:F9:07:D1:79:DE:87:03 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C1D3016DE78E97BDB4F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5640d06-d4ec-33b7-b775-706c2d848417.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.243.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:1d:30:16:de:78:e9:7b:db:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=676a93da-3a0d-4468-8097-cc1cf1c3d9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:29:d2:c6:6c:fd:61:9c:6d:0b:75:c7:99:e9: 7f:eb:67:c4:73:73:fc:0f:5b:73:0c:d4:b7:23:03: 47:55:71:07:e2:4d:7c:05:fa:1c:35:d2:6a:15:48: b7:6a:55:0c:d3:cf:11:ee:a8:df:26:a3:51:76:33: 74:d0:d0:6e:c5:0a:bf:4d:ed:0e:8e:24:a9:85:17: 6f:c7:88:c3:4c:33:c8:fd:68:cb:6b:bd:b3:d6:22: a5:7e:61:ae:d4:04:c4:90:04:55:94:59:6a:00:a7: 6b:ef:01:93:29:fa:cd:cc:ea:30:25:29:4d:b0:7f: 2f:5b:ef:1f:78:64:08:33:88:cd:f0:68:4f:76:8b: d2:af:01:35:45:14:76:67:d8:d3:b7:4b:0c:8c:74: 5a:01:0c:a8:7e:05:c0:1f:cc:66:49:5e:b5:25:2f: 14:23:62:fe:ca:2e:07:cc:de:5c:03:da:65:d5:5c: 84:d0:ca:d0:ad:55:4b:73:4a:7b:5d:e9:65:c9:26: cc:39:00:4e:ea:2b:5f:a3:c6:12:33:f5:ba:7c:7b: 78:0f:d6:71:f3:10:d4:20:e0:70:79:6e:fe:c4:4b: 3d:8e:81:b6:c1:05:c6:98:ca:95:55:21:76:b5:71: 7f:f5:61:f2:a8:29:42:4d:fb:99:bf:c5:ae:b7:8a: 7e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:37:A6:31:EE:0B:90:AE:6A:18:9C:5F:68:F9:07:D1:79:DE:87:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5640d06-d4ec-33b7-b775-706c2d848417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d2:82:e3:94:90:b3:3c:f5:c7:b1:1f:82:ea:af:58:f8:70: 7e:ca:cb:5b:99:37:70:75:2d:1b:50:bd:51:7e:35:e2:0b:5d: 7a:72:5f:75:d1:b1:ae:e1:e3:e7:84:df:0f:f2:5b:dc:cc:39: c1:9a:d2:34:0d:85:c4:c8:fc:86:58:77:7b:41:ac:d1:44:5d: 10:87:aa:bc:2e:7a:de:18:ce:20:ca:fa:90:05:c1:25:02:51: 75:96:51:8c:50:e5:1d:29:2c:70:7b:1c:d5:4b:5b:ba:0b:42: f3:5e:69:1c:e4:9d:5d:79:e6:1d:fe:69:aa:41:ac:92:fb:59: 62:49:0f:0e:06:94:ac:2b:f7:48:8a:e3:89:6c:64:a0:40:59: 78:ab:fb:1f:71:8c:76:98:5e:6f:66:b1:b4:18:90:8c:b2:e3: 1f:da:b3:5d:a5:83:d9:fa:20:11:42:5b:99:da:f2:22:ae:d8: 9f:45:5a:95:68:be:74:cb:32:6e:b2:64:32:27:80:71:8a:e7: de:32:ae:ce:50:7b:25:c4:8f:1c:2c:8f:5b:c9:4f:c6:c9:e3: e8:67:e1:ac:a2:43:2d:fa:94:df:20:46:25:c3:af:d0:5e:99: d2:92:bb:a3:8d:25:66:43:ac:5e:90:ac:82:8c:6b:ca:bc:65: 79:ee:ee:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnB0wFt546XvbT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk Njc2YTkzZGEtM2EwZC00NDY4LTgwOTctY2MxY2YxYzNkOWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhynSxmz9YZxtC3XHmel/62fEc3P8D1tzDNS3 IwNHVXEH4k18BfocNdJqFUi3alUM088R7qjfJqNRdjN00NBuxQq/Te0OjiSphRdv x4jDTDPI/WjLa72z1iKlfmGu1ATEkARVlFlqAKdr7wGTKfrNzOowJSlNsH8vW+8f eGQIM4jN8GhPdovSrwE1RRR2Z9jTt0sMjHRaAQyofgXAH8xmSV61JS8UI2L+yi4H zN5cA9pl1VyE0MrQrVVLc0p7XellySbMOQBO6itfo8YSM/W6fHt4D9Zx8xDUIOBw eW7+xEs9joG2wQXGmMqVVSF2tXF/9WHyqClCTfuZv8Wut4p+VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCs3pjHuC5CuahicX2j5B9F53ocDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTU2NDBkMDYtZDRlYy0z M2I3LWI3NzUtNzA2YzJkODQ4NDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfSguOUkLM89cexH4Lqr1j4cH7Ky1uZN3B1LRtQvVF+NeILXXpyX3XR sa7h4+eE3w/yW9zMOcGa0jQNhcTI/IZYd3tBrNFEXRCHqrwuet4YziDK+pAFwSUC UXWWUYxQ5R0pLHB7HNVLW7oLQvNeaRzknV155h3+aapBrJL7WWJJDw4GlKwr90iK 44lsZKBAWXir+x9xjHaYXm9msbQYkIyy4x/as12lg9n6IBFCW5na8iKu2J9FWpVo vnTLMm6yZDIngHGK594yrs5QeyXEjxwsj1vJT8bJ4+hn4ayiQy36lN8gRiXDr9Be mdKSu6ONJWZDrF6QrIKMa8q8ZXnu7vo= -----END CERTIFICATE-----Generated at Sat Jun 13 23:35:33 2026 by rpki-client