$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8e3cf40-2e09-3f9a-b4f0-c59b5a190456.roa File: a8e3cf40-2e09-3f9a-b4f0-c59b5a190456.roa (raw, json) Hash identifier: Fa9YumGy4b8voDvtGRdTr/FGglvVtpC31exe+bma2iA= Subject key identifier: A0:0C:F6:66:92:A1:5C:09:7B:34:DB:9D:CB:50:BD:3F:08:8B:5A:45 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B6967B51210533B2C9080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8e3cf40-2e09-3f9a-b4f0-c59b5a190456.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 72.173.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:69:67:b5:12:10:53:3b:2c:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=d45f316e-0731-4d51-84a9-75b9f8980bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:6e:4c:f1:0d:b5:9f:45:51:6f:f0:1b:70: cf:fc:86:81:e9:69:28:60:62:10:e2:06:61:09:1d: 01:50:2a:81:60:7a:4d:96:49:cd:f2:ff:1f:f2:fc: 5c:ce:95:96:71:01:34:c1:19:82:b8:a3:9f:68:7a: 72:d6:71:a0:da:66:96:d5:75:40:2c:07:07:f2:58: f0:6f:fb:1b:20:e7:c7:38:a7:2c:21:99:88:29:5c: 36:2a:d8:e9:82:d8:b3:e1:ee:df:17:56:83:62:bc: 67:31:ec:e9:6c:2d:e0:ba:18:82:eb:d4:04:f9:04: 12:98:ee:9f:62:58:59:0d:d9:2a:64:5f:36:20:bb: 23:f1:01:07:14:39:8b:61:07:7a:4f:22:05:d8:28: 42:41:29:1b:2f:11:b2:1c:12:b7:24:9c:d9:a7:68: 34:f3:95:f0:a9:b7:88:3d:10:4d:0f:d5:fa:67:79: db:ed:ea:8c:02:8b:fe:04:f1:b6:f8:8a:ac:11:14: 8d:3a:8f:36:a1:ae:19:f4:38:90:85:04:f9:f0:bd: db:d8:33:b1:68:f6:82:a5:90:1e:d1:f2:fb:d2:37: 65:82:b9:9d:05:24:86:63:19:08:9f:4d:18:0c:62: 2f:f4:21:e1:b2:fb:d6:5c:12:8a:59:7a:64:bb:aa: 9f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0C:F6:66:92:A1:5C:09:7B:34:DB:9D:CB:50:BD:3F:08:8B:5A:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8e3cf40-2e09-3f9a-b4f0-c59b5a190456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:2a:e8:8a:b7:b4:52:5e:7e:0d:b9:27:c4:a9:fb:a9:ec:39: e0:35:bf:d8:6a:d7:50:78:b5:93:3b:e4:12:20:93:05:75:3b: 58:83:fb:f0:2a:45:f5:e8:d8:ed:1e:c7:6e:cc:b3:1d:be:9e: 96:e4:26:ff:cf:7e:b7:d6:b1:8d:34:22:bf:57:2d:78:5c:ca: 02:05:8e:34:c9:18:bd:60:ca:e0:8b:ef:ff:42:64:de:e0:27: 5a:0d:0b:14:45:df:5e:e9:bf:74:a9:34:d4:4f:a5:4c:61:71: cf:ab:08:f3:c1:be:5e:ec:a1:ad:93:64:d0:de:7e:6d:bf:7d: 44:24:b8:cb:33:f6:da:4e:21:37:a0:41:c0:17:6e:c5:09:34: b9:d9:8c:0e:45:7b:c4:48:52:ed:4f:49:ed:34:8b:78:2a:85: 8a:ce:27:2f:8e:d7:a9:4e:c5:f9:1c:f2:e7:5d:e4:b5:cd:1b: 54:5e:da:79:57:b8:26:51:29:59:e0:a1:be:88:97:f7:20:14: bc:85:80:62:ae:2f:56:07:9c:09:b4:5a:8a:a8:3f:7b:10:f1: c2:ef:dd:e8:1d:10:91:bf:0d:f1:f5:d7:39:b9:8b:ad:ba:58: f6:00:88:0b:b4:b8:18:f1:d7:e1:96:f3:4c:ec:eb:cc:30:bc: dc:b1:c6:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm2lntRIQUzsskIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZDQ1ZjMxNmUtMDczMS00ZDUxLTg0YTktNzViOWY4OTgwYmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNpuTPENtZ9FUW/wG3DP/IaB6WkoYGIQ4gZh CR0BUCqBYHpNlknN8v8f8vxczpWWcQE0wRmCuKOfaHpy1nGg2maW1XVALAcH8ljw b/sbIOfHOKcsIZmIKVw2Ktjpgtiz4e7fF1aDYrxnMezpbC3guhiC69QE+QQSmO6f YlhZDdkqZF82ILsj8QEHFDmLYQd6TyIF2ChCQSkbLxGyHBK3JJzZp2g085XwqbeI PRBND9X6Z3nb7eqMAov+BPG2+IqsERSNOo82oa4Z9DiQhQT58L3b2DOxaPaCpZAe 0fL70jdlgrmdBSSGYxkIn00YDGIv9CHhsvvWXBKKWXpku6qf+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAM9maSoVwJezTbnctQvT8Ii1pFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYThlM2NmNDAtMmUwOS0z ZjlhLWI0ZjAtYzU5YjVhMTkwNDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcq6Iq3tFJefg25J8Sp+6nsOeA1v9hq11B4tZM75BIgkwV1O1iD+/Aq RfXo2O0ex27Msx2+npbkJv/PfrfWsY00Ir9XLXhcygIFjjTJGL1gyuCL7/9CZN7g J1oNCxRF317pv3SpNNRPpUxhcc+rCPPBvl7soa2TZNDefm2/fUQkuMsz9tpOITeg QcAXbsUJNLnZjA5Fe8RIUu1PSe00i3gqhYrOJy+O16lOxfkc8udd5LXNG1Re2nlX uCZRKVngob6Il/cgFLyFgGKuL1YHnAm0WoqoP3sQ8cLv3egdEJG/DfH11zm5i626 WPYAiAu0uBjx1+GW80zs68wwvNyxxtw= -----END CERTIFICATE-----Generated at Sat Jun 13 18:03:52 2026 by rpki-client