$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa File: ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa (raw, json) Hash identifier: hFk1pC53M3n3w6gbKngH6qlyzX7ywhtoVbcyTlCYDEo= Subject key identifier: E5:AA:20:FF:A9:1C:39:1B:71:E2:5E:11:C1:0A:60:A1:A5:B6:B3:FB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B6C6FF59511C0714E7E68 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 72.173.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:6c:6f:f5:95:11:c0:71:4e:7e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=bf7451f6-ea3c-4475-b6fe-06448332a400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ca:5e:5d:50:9a:79:e2:e3:86:36:bf:47:de: df:20:92:b5:2f:bd:80:ab:09:48:f4:92:14:69:42: 0e:e6:9b:39:2b:fe:45:a5:a3:81:40:4e:2e:d7:3e: 7b:97:93:3d:93:1e:b8:ba:4c:37:9c:27:26:01:e6: 78:e1:fb:b4:62:88:88:77:f4:a7:8c:1c:92:3d:d3: 08:88:8e:88:fa:e9:3c:5c:49:aa:11:7c:ad:ca:89: 36:5a:79:1e:ba:3f:2a:86:d7:7e:47:48:be:36:93: ff:6b:a5:c9:ad:97:3e:bd:86:cf:52:ab:30:31:87: 2c:28:2c:ea:c7:b5:c3:1e:6c:04:78:72:3a:d0:c8: 09:4d:8c:64:b3:39:8e:21:04:ed:0b:2e:30:26:6f: 94:da:81:17:05:bf:9d:43:ba:13:49:4c:8a:b1:4b: 18:cf:02:60:1b:cf:76:79:e3:c7:65:84:40:9f:28: 59:cf:eb:e2:92:d6:bd:e6:48:1d:61:a3:7d:ae:4b: 07:f6:96:52:05:01:d1:6c:55:3b:d3:34:45:ac:6e: 74:26:89:25:a8:84:f6:99:79:52:8c:d0:2e:fa:2c: 8e:81:17:57:51:c6:ca:e3:6d:1b:2b:c1:b4:eb:23: ac:0f:e2:15:4a:43:0e:35:15:91:1d:c8:1b:1f:5d: 98:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AA:20:FF:A9:1C:39:1B:71:E2:5E:11:C1:0A:60:A1:A5:B6:B3:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:16:31:1b:6a:e4:04:38:e1:40:5e:b4:dc:6b:21:d8:75:50: a1:4d:23:9d:6e:73:7a:20:9f:6e:8e:fd:93:e7:f8:f4:36:ef: 53:84:c9:9a:6c:b2:65:35:1d:02:0c:98:3b:c0:a6:55:d8:9c: 76:02:27:a8:b3:fd:50:44:0b:b4:6c:1e:60:b1:c5:28:6a:c6: 04:fc:72:38:77:93:a5:67:60:98:1b:77:dd:25:2a:c2:38:b7: 63:98:8c:4d:ee:f3:9a:29:f5:dd:c9:0e:2d:ac:a2:c4:bf:f1: 5b:1c:19:38:4c:dc:7e:94:32:47:67:66:04:9d:d9:9c:c5:5f: c4:36:dd:f5:31:8c:06:2a:97:f4:9e:c0:08:ea:97:8a:9c:ff: 41:d1:7c:e9:02:b8:89:18:a3:85:0e:35:7d:fd:12:fa:fa:06: 24:87:2b:32:ba:2c:df:4f:ec:79:d4:ff:97:a3:fa:79:1d:af: f3:3b:75:1e:84:a3:5d:45:f2:52:28:97:db:3c:78:42:13:29: d8:9e:82:c6:fe:0a:6b:80:d4:dc:a4:14:82:9e:04:5b:db:1d: f6:fe:1f:d8:c2:54:d5:10:67:06:99:97:a8:e2:ca:18:4f:72: 7b:14:fb:c6:af:22:4d:89:78:a4:0c:a0:00:2d:73:4a:22:09: 2b:3f:38:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm2xv9ZURwHFOfmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YmY3NDUxZjYtZWEzYy00NDc1LWI2ZmUtMDY0NDgzMzJhNDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkspeXVCaeeLjhja/R97fIJK1L72AqwlI9JIU aUIO5ps5K/5FpaOBQE4u1z57l5M9kx64ukw3nCcmAeZ44fu0YoiId/SnjBySPdMI iI6I+uk8XEmqEXytyok2Wnkeuj8qhtd+R0i+NpP/a6XJrZc+vYbPUqswMYcsKCzq x7XDHmwEeHI60MgJTYxkszmOIQTtCy4wJm+U2oEXBb+dQ7oTSUyKsUsYzwJgG892 eePHZYRAnyhZz+vikta95kgdYaN9rksH9pZSBQHRbFU70zRFrG50JoklqIT2mXlS jNAu+iyOgRdXUcbK420bK8G06yOsD+IVSkMONRWRHcgbH12YrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWqIP+pHDkbceJeEcEKYKGltrP7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWU0YmE4NjctYjA3Ny0z ZjU0LWE4YWYtOWZiMTJmZTdlOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8WMRtq5AQ44UBetNxrIdh1UKFNI51uc3ogn26O/ZPn+PQ271OEyZps smU1HQIMmDvAplXYnHYCJ6iz/VBEC7RsHmCxxShqxgT8cjh3k6VnYJgbd90lKsI4 t2OYjE3u85op9d3JDi2sosS/8VscGThM3H6UMkdnZgSd2ZzFX8Q23fUxjAYql/Se wAjql4qc/0HRfOkCuIkYo4UONX39Evr6BiSHKzK6LN9P7HnU/5ej+nkdr/M7dR6E o11F8lIol9s8eEITKdiegsb+CmuA1NykFIKeBFvbHfb+H9jCVNUQZwaZl6jiyhhP cnsU+8avIk2JeKQMoAAtc0oiCSs/OEA= -----END CERTIFICATE-----Generated at Sat Jun 13 19:36:09 2026 by rpki-client