$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa39a6ce-2914-30d6-8ada-a97f77613312.roa File: aa39a6ce-2914-30d6-8ada-a97f77613312.roa (raw, json) Hash identifier: 1LKcnFnfqJFMep3w8FAk52KqxJJ5hqz9wSddPHY5cVg= Subject key identifier: A1:17:20:86:F6:7C:48:6F:FA:27:62:49:72:2A:29:4E:89:12:FF:BF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E0ACF92AB055819ECA240 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa39a6ce-2914-30d6-8ada-a97f77613312.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.242.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:0a:cf:92:ab:05:58:19:ec:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1958da9c-3e3a-4dd9-8a14-f363fa53dc10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d0:12:43:cc:f9:a3:1c:25:d5:b0:1a:23:96: 18:b9:ca:6e:97:a4:3a:0c:0a:31:26:c9:a7:45:da: 62:49:c7:63:e2:91:7b:6c:97:39:21:62:cb:ad:55: 11:d9:e7:c6:bd:ba:62:8a:c7:de:34:fd:eb:d4:ab: 04:f0:35:b6:82:40:1f:5d:69:ee:c0:1b:01:58:a9: 39:80:84:77:5c:4d:7b:77:7a:ff:c4:c5:d6:2b:bd: bc:52:78:c5:a6:46:e4:f9:9c:21:84:bf:e3:8d:05: c9:3b:12:34:2d:74:38:de:57:c8:ae:4a:1a:18:37: df:e5:ed:e4:d1:72:e5:0b:26:e4:74:65:7e:73:a4: 29:d5:35:23:3d:8e:06:63:2c:58:0f:07:9b:36:2e: ce:40:bd:71:1b:ab:aa:7a:89:f9:bc:f8:ae:3c:55: 90:7b:c6:ce:0e:36:1d:a7:2e:c3:da:6c:c1:ad:07: 11:e3:bf:2d:62:ee:29:d2:ae:a2:83:62:56:f6:43: 8e:2e:d2:1e:4d:42:ed:e2:61:9c:81:26:5c:21:50: 7b:ee:b5:af:ef:95:81:74:06:fb:74:f9:e2:e0:74: cb:98:ea:6f:df:39:e3:6a:6b:23:3d:41:ba:d3:f5: 76:cd:cd:20:c7:94:2d:6a:95:22:67:17:36:21:4b: 1c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:17:20:86:F6:7C:48:6F:FA:27:62:49:72:2A:29:4E:89:12:FF:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa39a6ce-2914-30d6-8ada-a97f77613312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:95:e1:b6:b3:33:4c:9c:ec:bc:4b:8a:dd:62:63:6d:6c:81: 2d:19:e4:67:a9:dd:33:c0:c3:0c:70:0f:e6:17:db:c0:3e:b1: b6:78:31:30:bd:62:0e:bb:dc:7c:18:48:dc:5c:82:e4:55:0a: 9c:f5:14:c0:61:1c:a2:a9:db:2a:9e:d3:bd:31:aa:c0:d3:4a: c4:aa:51:56:85:ad:b9:68:53:cd:5e:42:d5:04:25:b3:36:c4: de:88:14:a6:37:63:18:fb:c6:5b:4b:a9:b6:fb:bb:3d:1a:1c: fe:ec:93:b6:e4:0f:69:f3:09:29:e0:1b:32:25:a3:7e:6f:83: 6b:6d:cc:13:c8:0b:05:98:fb:5b:f9:ac:a1:51:df:9f:cf:e1: c8:8a:61:b2:ad:39:2e:a0:5b:cc:cd:94:7c:04:21:43:07:0a: 4e:73:80:fe:d1:54:f3:a4:3f:60:71:38:42:aa:be:b3:c6:23: 80:29:57:be:ff:a9:09:05:9b:10:41:56:51:03:8a:1b:d4:b0: d0:b2:f2:ac:2b:c6:71:4e:03:cf:c7:7b:e7:f9:b4:7b:80:33: 00:6a:92:d0:b4:6d:5f:c2:3a:9d:4f:ca:a4:2e:22:d9:f6:79: 01:54:2e:f4:70:6d:71:32:c2:d8:7a:9d:5a:a8:27:6e:5a:60: 22:22:8c:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nngrPkqsFWBnsokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTk1OGRhOWMtM2UzYS00ZGQ5LThhMTQtZjM2M2ZhNTNkYzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NASQ8z5oxwl1bAaI5YYucpul6Q6DAoxJsmn RdpiScdj4pF7bJc5IWLLrVUR2efGvbpiisfeNP3r1KsE8DW2gkAfXWnuwBsBWKk5 gIR3XE17d3r/xMXWK728UnjFpkbk+ZwhhL/jjQXJOxI0LXQ43lfIrkoaGDff5e3k 0XLlCybkdGV+c6Qp1TUjPY4GYyxYDwebNi7OQL1xG6uqeon5vPiuPFWQe8bODjYd py7D2mzBrQcR478tYu4p0q6ig2JW9kOOLtIeTULt4mGcgSZcIVB77rWv75WBdAb7 dPni4HTLmOpv3znjamsjPUG60/V2zc0gx5QtapUiZxc2IUscdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEXIIb2fEhv+idiSXIqKU6JEv+/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWEzOWE2Y2UtMjkxNC0z MGQ2LThhZGEtYTk3Zjc3NjEzMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaV4bazM0yc7LxLit1iY21sgS0Z5Gep3TPAwwxwD+YX28A+sbZ4MTC9 Yg673HwYSNxcguRVCpz1FMBhHKKp2yqe070xqsDTSsSqUVaFrbloU81eQtUEJbM2 xN6IFKY3Yxj7xltLqbb7uz0aHP7sk7bkD2nzCSngGzIlo35vg2ttzBPICwWY+1v5 rKFR35/P4ciKYbKtOS6gW8zNlHwEIUMHCk5zgP7RVPOkP2BxOEKqvrPGI4ApV77/ qQkFmxBBVlEDihvUsNCy8qwrxnFOA8/He+f5tHuAMwBqktC0bV/COp1PyqQuItn2 eQFULvRwbXEywth6nVqoJ25aYCIijFE= -----END CERTIFICATE-----Generated at Wed Jul 29 06:49:43 2026 by rpki-client