$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2abfc-596d-3dac-bd9e-885e14e1c43c.roa File: a6f2abfc-596d-3dac-bd9e-885e14e1c43c.roa (raw, json) Hash identifier: gc+sv6rd+z+FoV5mWuXZJx+6Aov8KLZwdRHz0NXOsJ8= Subject key identifier: 1B:30:A8:95:A2:2F:A5:D5:29:CA:EB:1C:53:BD:79:04:B0:CA:4B:75 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C1C1C27556D5835687F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2abfc-596d-3dac-bd9e-885e14e1c43c.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.243.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:1c:1c:27:55:6d:58:35:68:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=b7a51a55-4860-4571-87e8-2f636cb3bb36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:3f:e8:91:87:d4:b6:d5:42:82:a1:95:24: e1:e1:ee:a9:c4:72:38:81:54:d4:e0:e9:cc:79:42: 52:a3:c8:9d:04:e1:d2:aa:57:69:dd:42:06:fa:50: 5c:86:f6:64:07:90:6d:67:b4:6f:cd:af:94:67:29: 2d:a8:07:d8:d2:54:da:e2:64:3b:09:29:1f:b9:e5: 4e:9e:a3:12:6d:ca:fc:42:1f:c7:ac:79:9b:15:2a: fa:4b:e7:87:f9:d0:43:c2:7c:75:69:ed:9c:56:05: 46:22:1f:99:3b:4c:88:95:30:35:d6:88:9d:70:fd: 4d:4d:17:27:f6:9f:c9:e2:b9:c2:a3:47:0c:de:47: af:b2:d3:4d:0e:b0:12:45:a4:47:c7:86:80:b6:01: e9:d4:54:21:bb:38:e5:aa:14:6a:d3:8f:74:c5:df: cd:6b:75:d8:c0:27:ca:4e:83:08:aa:97:03:07:db: 79:81:74:1c:ef:10:0b:86:16:18:a4:ff:49:f1:43: ff:2f:3c:27:9f:4c:08:68:a0:f1:89:2c:68:99:a1: ba:41:d4:5e:c0:f0:01:55:1e:f8:c0:65:82:4c:d5: cf:7d:f5:e5:62:b7:ad:a9:6b:e0:2f:0a:05:b9:e7: cc:08:59:76:10:0f:ae:45:99:cd:13:ca:10:29:e8: 4b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:30:A8:95:A2:2F:A5:D5:29:CA:EB:1C:53:BD:79:04:B0:CA:4B:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2abfc-596d-3dac-bd9e-885e14e1c43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:42:bd:7f:fc:8f:7a:8e:a7:42:20:16:33:c3:ce:7f:98:9c: ea:3e:14:16:e5:e1:01:ae:0b:90:40:a2:1a:6d:57:8c:f3:fa: e7:ea:bf:97:c7:93:a2:58:96:9b:4e:87:1e:fd:de:ab:80:2c: 0c:8b:8f:97:8e:eb:22:0d:97:18:5c:b3:cc:27:b7:65:2f:c0: 44:71:f0:7f:76:0f:10:d7:d1:57:e3:12:e8:cb:1d:46:61:de: 6a:55:02:2f:ae:bb:2d:d5:20:7b:b3:cb:75:22:dd:33:de:dd: e0:fb:f1:5a:53:fe:bb:7c:49:71:5b:8f:88:80:19:d9:a7:c4: 24:09:1b:fe:5d:70:22:f3:d6:ce:00:41:f6:4e:c4:64:e4:2e: 6d:b9:27:b9:ab:9f:33:a0:0e:cf:d1:8e:7f:0f:ad:ee:e8:df: ef:69:01:de:3b:f5:f5:3d:8e:61:47:5b:53:40:09:eb:e3:99: 72:d7:06:4a:80:23:d9:9b:22:6b:c7:bb:bc:cf:93:92:95:20: ac:02:f2:53:09:e1:24:49:7b:56:b5:c1:7e:ad:86:91:00:92: 77:6f:7d:64:1a:2c:6c:77:5e:b8:58:8f:11:5b:08:66:cc:cb: e0:f0:51:ec:38:05:23:52:b7:a0:66:f4:94:38:f7:1a:fa:40: d6:5a:0d:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnBwcJ1VtWDVof4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YjdhNTFhNTUtNDg2MC00NTcxLTg3ZTgtMmY2MzZjYjNiYjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpw/6JGH1LbVQoKhlSTh4e6pxHI4gVTU4OnM eUJSo8idBOHSqldp3UIG+lBchvZkB5BtZ7Rvza+UZyktqAfY0lTa4mQ7CSkfueVO nqMSbcr8Qh/HrHmbFSr6S+eH+dBDwnx1ae2cVgVGIh+ZO0yIlTA11oidcP1NTRcn 9p/J4rnCo0cM3kevstNNDrASRaRHx4aAtgHp1FQhuzjlqhRq0490xd/Na3XYwCfK ToMIqpcDB9t5gXQc7xALhhYYpP9J8UP/Lzwnn0wIaKDxiSxomaG6QdRewPABVR74 wGWCTNXPffXlYretqWvgLwoFuefMCFl2EA+uRZnNE8oQKehLUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBswqJWiL6XVKcrrHFO9eQSwykt1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTZmMmFiZmMtNTk2ZC0z ZGFjLWJkOWUtODg1ZTE0ZTFjNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1CvX/8j3qOp0IgFjPDzn+YnOo+FBbl4QGuC5BAohptV4zz+ufqv5fH k6JYlptOhx793quALAyLj5eO6yINlxhcs8wnt2UvwERx8H92DxDX0VfjEujLHUZh 3mpVAi+uuy3VIHuzy3Ui3TPe3eD78VpT/rt8SXFbj4iAGdmnxCQJG/5dcCLz1s4A QfZOxGTkLm25J7mrnzOgDs/Rjn8Pre7o3+9pAd479fU9jmFHW1NACevjmXLXBkqA I9mbImvHu7zPk5KVIKwC8lMJ4SRJe1a1wX6thpEAkndvfWQaLGx3XrhYjxFbCGbM y+DwUew4BSNSt6Bm9JQ49xr6QNZaDWo= -----END CERTIFICATE-----Generated at Sat Jun 13 15:14:37 2026 by rpki-client