$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa File: b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa (raw, json) Hash identifier: 7YaQxp+jDfXVov7TD40HKUzhuO7DkBDaQJJYH2an+CE= Subject key identifier: 52:7C:18:28:74:5E:DC:E4:09:86:58:EE:FA:32:D6:7F:A7:27:0F:3E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C1D3AEF643066ABEDBA80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.243.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:1d:3a:ef:64:30:66:ab:ed:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=acdba74c-f7b3-489d-a649-54cc47033b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a8:90:e9:80:64:79:65:9a:2e:96:e4:ae:28: f6:24:5a:a8:88:85:9b:a8:73:69:04:5b:97:e6:3e: 8d:c0:6f:8a:5d:cc:e5:6a:70:53:47:b5:8e:0c:1e: 0c:f9:92:35:eb:95:e0:6b:2f:94:d0:b4:d6:5d:d9: 78:cf:76:88:12:ce:70:e3:51:2d:9c:ea:58:94:9f: 67:1a:48:92:f9:05:26:4d:be:50:1a:ea:50:d8:7f: 6d:36:e7:77:e3:7e:88:94:5e:cc:99:b2:42:78:89: e1:50:ed:05:6b:11:55:95:ab:8e:a2:9a:a9:72:a8: 10:5d:17:70:49:82:66:b1:6e:3f:6d:e2:c0:43:91: 05:cd:32:8f:69:8c:58:f6:81:e3:e4:bc:c3:b4:c0: 96:26:f6:b2:a6:40:84:1d:d6:13:83:6b:26:e7:63: 3b:00:0d:61:1a:83:4b:d6:0f:ea:b6:f6:c4:0b:60: a0:92:f8:61:4d:0c:4d:36:14:1c:eb:7c:e0:d2:f8: 46:82:1b:a4:1f:93:77:6f:a0:9d:7d:03:51:60:17: 59:7a:48:b0:b4:5d:51:98:94:98:16:e3:88:af:90: 63:9b:db:45:dc:f6:a0:5d:a4:08:d9:b5:94:9a:d1: 6c:4f:02:de:75:ef:6f:b3:31:ad:ca:f1:82:b1:27: 4a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7C:18:28:74:5E:DC:E4:09:86:58:EE:FA:32:D6:7F:A7:27:0F:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:50:d3:86:a3:68:55:69:fc:66:b9:dc:ae:2b:d6:20:50:41: 19:47:cf:eb:ae:a1:7a:91:4e:71:15:98:e9:75:6e:0e:ad:73: 30:2b:67:ea:79:eb:5c:7c:da:d1:66:6b:5a:d9:1f:91:0a:28: 31:21:bd:e4:a9:91:3e:0c:f5:ec:08:2d:8f:55:21:91:43:48: c6:7a:40:e4:f8:26:60:9a:8f:c5:13:f1:a8:1a:10:1c:f8:d3: ee:03:10:4f:49:bd:5d:4b:13:71:f8:88:29:09:9a:c9:6b:e9: 1f:a3:bb:93:47:5f:fb:e2:56:b8:4d:02:ba:1d:28:82:ec:e5: 38:e8:a9:35:9b:da:76:42:49:4e:b8:9b:94:65:f6:35:b6:f5: d0:02:e1:49:c8:f7:b1:8f:86:4e:eb:d6:3e:aa:1f:77:15:3e: 12:47:7f:52:56:7c:d2:e9:fd:f2:2b:b0:78:70:43:df:ee:99: 5b:de:53:58:72:bb:fb:23:71:b5:8b:c4:39:3b:3c:eb:a9:ec: 6b:c8:30:01:c3:7b:4e:bf:9d:c4:c5:52:44:3b:56:a8:a1:f4: c3:41:b8:e0:6c:c2:f3:5e:38:e9:66:69:9b:a8:59:f2:e1:e9: ea:f8:20:05:c8:ad:d4:8b:f5:c0:0b:50:1a:e3:16:5b:0e:28: 23:a1:13:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnB0672QwZqvtuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YWNkYmE3NGMtZjdiMy00ODlkLWE2NDktNTRjYzQ3MDMzYjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKiQ6YBkeWWaLpbkrij2JFqoiIWbqHNpBFuX 5j6NwG+KXczlanBTR7WODB4M+ZI165Xgay+U0LTWXdl4z3aIEs5w41EtnOpYlJ9n GkiS+QUmTb5QGupQ2H9tNud3436IlF7MmbJCeInhUO0FaxFVlauOopqpcqgQXRdw SYJmsW4/beLAQ5EFzTKPaYxY9oHj5LzDtMCWJvaypkCEHdYTg2sm52M7AA1hGoNL 1g/qtvbEC2CgkvhhTQxNNhQc63zg0vhGghukH5N3b6CdfQNRYBdZekiwtF1RmJSY FuOIr5Bjm9tF3PagXaQI2bWUmtFsTwLede9vszGtyvGCsSdKAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ8GCh0XtzkCYZY7voy1n+nJw8+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjM2ODVlMGQtNmE4NS0z NmQ0LWFhOWYtMTJiYjMwYWViYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBQ04ajaFVp/Ga53K4r1iBQQRlHz+uuoXqRTnEVmOl1bg6tczArZ+p5 61x82tFma1rZH5EKKDEhveSpkT4M9ewILY9VIZFDSMZ6QOT4JmCaj8UT8agaEBz4 0+4DEE9JvV1LE3H4iCkJmslr6R+ju5NHX/viVrhNArodKILs5TjoqTWb2nZCSU64 m5Rl9jW29dAC4UnI97GPhk7r1j6qH3cVPhJHf1JWfNLp/fIrsHhwQ9/umVveU1hy u/sjcbWLxDk7POup7GvIMAHDe06/ncTFUkQ7Vqih9MNBuOBswvNeOOlmaZuoWfLh 6er4IAXIrdSL9cALUBrjFlsOKCOhE/U= -----END CERTIFICATE-----Generated at Sat Jun 13 17:27:26 2026 by rpki-client