$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa39a6ce-2914-30d6-8ada-a97f77613312.roa File: aa39a6ce-2914-30d6-8ada-a97f77613312.roa (raw, json) Hash identifier: MqtkjmKU6hvLCRHQY+E2BJ9AkwptEWXecPgKlvJvF/o= Subject key identifier: CA:98:4B:EB:6A:A4:E8:09:74:BA:4A:08:26:BF:9B:AA:08:8C:F3:0A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B93CD1FFEFBBDBC5A9900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa39a6ce-2914-30d6-8ada-a97f77613312.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.242.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:93:cd:1f:fe:fb:bd:bc:5a:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=63ce230e-8f49-4b24-87dc-4e7ce1c0ff66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e7:3e:ff:45:ee:3a:4e:1b:d6:e0:36:f7:d1: aa:e6:4c:71:ff:a0:af:05:2e:f5:31:db:c1:2b:68: e6:53:b7:0b:cd:ca:c1:e5:65:41:9d:7b:38:c4:10: e7:23:63:bf:19:e6:4a:84:ef:4b:87:52:b6:d3:f5: 4e:bd:10:72:a1:3b:3f:9c:2c:2b:30:d0:7e:7f:b6: 82:9a:c9:d4:76:69:85:da:cc:81:c4:4a:d1:b2:32: eb:fd:20:b3:61:26:3e:6a:43:fd:be:d7:8f:46:e4: f7:e0:c6:38:25:ef:c2:f6:17:38:75:5c:ac:d8:30: 29:d8:e6:f5:45:6f:d0:d2:ba:a3:4f:a5:12:b9:6e: b2:44:6c:1a:3e:ae:c5:fc:c6:58:10:3e:9d:0d:4f: ae:09:5a:dd:d3:8c:72:2c:f9:66:bd:b6:f6:17:2b: 33:b5:7a:40:d8:54:00:d8:2a:63:43:85:05:72:0a: 8b:7b:93:1b:9b:04:9a:6e:9a:95:a6:fb:df:98:0d: 82:26:14:6b:5c:9b:98:fa:c9:c2:e1:b2:c3:64:0c: c0:0d:53:34:da:18:e0:ab:cf:d4:76:fc:9c:65:3b: 4f:5c:80:04:63:8b:f5:2c:07:66:da:c8:a1:64:db: db:4d:61:0c:dd:77:db:6a:3e:4b:54:c1:e6:83:d2: f4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:98:4B:EB:6A:A4:E8:09:74:BA:4A:08:26:BF:9B:AA:08:8C:F3:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa39a6ce-2914-30d6-8ada-a97f77613312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:02:12:bd:43:b4:f3:9a:8f:76:66:b7:69:a3:15:3c:3d:11: 7a:5d:55:8e:51:f8:32:8b:93:0a:21:ed:bd:04:46:7b:a5:d6: 1b:b1:43:92:d7:d3:21:c5:86:f6:fd:0b:1f:ec:18:09:25:75: 48:4d:81:f8:24:2d:c4:53:8f:13:3f:1f:83:76:1d:01:05:8c: af:65:ab:c0:ef:55:23:d4:98:ee:8d:00:54:b0:3e:a2:88:bf: bf:01:ad:8d:9b:eb:3d:64:9d:7c:f5:c3:fc:9b:e6:33:84:bc: 05:6b:c3:bb:fc:0c:60:a8:cb:bd:f5:91:7e:4b:64:7a:a1:1c: 88:f1:ec:f0:b2:fb:5b:7d:24:db:fd:f0:a5:33:5d:a5:b8:29: 32:5f:cf:1b:38:17:2d:46:ad:ea:7d:2c:46:e4:b8:29:97:be: 0a:41:cd:7c:65:60:1f:2c:21:72:80:8f:69:eb:f7:11:65:77: de:6d:4c:98:0e:d0:10:55:2c:a0:fb:f1:4f:99:33:09:02:38: ec:45:30:d4:0a:13:6e:2b:aa:ae:24:08:34:3e:03:41:d8:13: ce:05:e6:7f:c3:0e:76:ea:87:45:25:ae:44:4f:c3:bf:97:80: 83:09:c8:90:af:fc:8d:33:d5:87:f9:19:80:be:59:a7:75:31: f7:4a:8c:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm5PNH/77vbxamQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NjNjZTIzMGUtOGY0OS00YjI0LTg3ZGMtNGU3Y2UxYzBmZjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOc+/0XuOk4b1uA299Gq5kxx/6CvBS71MdvB K2jmU7cLzcrB5WVBnXs4xBDnI2O/GeZKhO9Lh1K20/VOvRByoTs/nCwrMNB+f7aC msnUdmmF2syBxErRsjLr/SCzYSY+akP9vtePRuT34MY4Je/C9hc4dVys2DAp2Ob1 RW/Q0rqjT6USuW6yRGwaPq7F/MZYED6dDU+uCVrd04xyLPlmvbb2FysztXpA2FQA 2CpjQ4UFcgqLe5MbmwSabpqVpvvfmA2CJhRrXJuY+snC4bLDZAzADVM02hjgq8/U dvycZTtPXIAEY4v1LAdm2sihZNvbTWEM3Xfbaj5LVMHmg9L0ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqYS+tqpOgJdLpKCCa/m6oIjPMKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWEzOWE2Y2UtMjkxNC0z MGQ2LThhZGEtYTk3Zjc3NjEzMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4CEr1DtPOaj3Zmt2mjFTw9EXpdVY5R+DKLkwoh7b0ERnul1huxQ5LX 0yHFhvb9Cx/sGAkldUhNgfgkLcRTjxM/H4N2HQEFjK9lq8DvVSPUmO6NAFSwPqKI v78BrY2b6z1knXz1w/yb5jOEvAVrw7v8DGCoy731kX5LZHqhHIjx7PCy+1t9JNv9 8KUzXaW4KTJfzxs4Fy1Grep9LEbkuCmXvgpBzXxlYB8sIXKAj2nr9xFld95tTJgO 0BBVLKD78U+ZMwkCOOxFMNQKE24rqq4kCDQ+A0HYE84F5n/DDnbqh0UlrkRPw7+X gIMJyJCv/I0z1Yf5GYC+Wad1MfdKjNM= -----END CERTIFICATE-----Generated at Sat Jun 13 23:24:49 2026 by rpki-client