$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8197550-4b47-3563-b11c-54b7f751a9c0.roa File: b8197550-4b47-3563-b11c-54b7f751a9c0.roa (raw, json) Hash identifier: OXEjO1QN7vSeSu4rnnllmF7bZKHgzhIFDoN1MyFurX4= Subject key identifier: B1:D6:6D:53:4F:13:30:38:FC:39:7E:36:D3:3E:CF:CA:96:A9:0E:AA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C351E611662A5470E6700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8197550-4b47-3563-b11c-54b7f751a9c0.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 198.45.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:35:1e:61:16:62:a5:47:0e:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=595f1f58-6930-4667-9a99-345472daa8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:25:6d:5b:2d:8d:ed:87:e3:ad:87:c2:cd:1f: 82:61:0e:a0:8a:6c:8a:bc:2c:6b:9a:10:ba:36:21: 96:c6:ef:3d:73:6a:42:0a:e7:40:62:40:c8:41:58: 1a:07:90:89:4b:93:ce:45:5a:67:45:4a:0c:dd:c6: 64:c0:a9:21:f5:cd:e9:3a:79:da:a3:dd:23:ac:40: 47:82:4a:68:e6:f8:3f:1a:a4:48:79:cf:62:97:45: 53:4e:16:f5:d6:c9:b3:70:2b:4e:8c:b1:60:9b:fd: eb:35:c2:b7:67:cd:a3:43:2d:38:ae:62:28:56:d8: d7:1b:cd:60:83:39:d8:d2:82:c7:c4:1d:c9:af:4e: 87:34:33:b9:54:91:26:09:a7:64:b7:cb:c9:5e:e7: 74:e5:ec:68:34:2e:bb:c3:e1:05:f0:28:4f:a1:66: 12:33:ed:d1:d9:f6:57:5c:d7:3a:8f:f5:3d:2c:38: dd:8b:0e:f6:a5:e7:b7:a4:e1:1e:d7:78:a6:b1:a8: 7f:cc:32:93:33:4f:ef:c5:23:38:56:3c:79:d0:d4: cf:53:c8:14:03:64:ba:bb:f2:6e:3f:6f:51:a8:f2: 63:69:a3:d5:e1:e4:9b:43:5e:a9:e8:02:40:51:51: 00:76:44:6a:c1:1a:dd:ed:e8:d4:61:e2:da:e9:48: 03:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D6:6D:53:4F:13:30:38:FC:39:7E:36:D3:3E:CF:CA:96:A9:0E:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8197550-4b47-3563-b11c-54b7f751a9c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:cc:07:01:78:2a:65:bc:cf:4c:d1:c7:a8:fd:fe:1b:c6:ad: e7:4c:f9:d1:72:8d:02:63:d8:42:81:2a:ce:e2:02:59:d8:42: d2:bf:73:70:d8:90:3e:b7:e3:5a:b9:8b:97:b3:7f:31:39:ba: fa:a1:61:aa:48:71:80:59:5d:7e:16:58:ea:bd:11:2e:44:ee: 45:45:98:af:44:52:e5:27:9a:8f:6d:75:f8:0c:f8:3f:b6:1e: 38:30:05:b7:77:b3:a1:54:d0:67:37:29:28:46:e3:cf:54:55: 38:43:a2:06:bb:99:10:34:aa:3e:8b:95:1a:ac:cf:ec:83:65: 0e:cc:be:b8:5e:b6:a0:c9:e7:4c:1f:ee:85:6a:5e:ee:9e:5a: 10:62:22:00:32:79:a9:11:55:85:a1:dc:07:ff:09:a2:bc:36: 09:03:ee:b3:3b:bc:c5:6e:e9:d2:7e:39:24:19:16:49:42:a2: f6:1f:c8:ed:27:98:20:ed:d5:32:e9:99:c4:e2:a6:34:76:ff: 1b:f4:b2:e7:75:4c:fe:b5:b5:4e:51:24:22:6b:21:56:06:b9: 76:09:81:58:3a:8c:b8:bb:b2:4e:0b:08:4b:56:21:d9:cd:be: 84:db:80:f1:80:95:1a:a6:c2:c3:d0:e9:3c:a0:77:9d:7e:7e: fc:fe:40:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnDUeYRZipUcOZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NTk1ZjFmNTgtNjkzMC00NjY3LTlhOTktMzQ1NDcyZGFhOGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCVtWy2N7YfjrYfCzR+CYQ6gimyKvCxrmhC6 NiGWxu89c2pCCudAYkDIQVgaB5CJS5PORVpnRUoM3cZkwKkh9c3pOnnao90jrEBH gkpo5vg/GqRIec9il0VTThb11smzcCtOjLFgm/3rNcK3Z82jQy04rmIoVtjXG81g gznY0oLHxB3Jr06HNDO5VJEmCadkt8vJXud05exoNC67w+EF8ChPoWYSM+3R2fZX XNc6j/U9LDjdiw72pee3pOEe13imsah/zDKTM0/vxSM4Vjx50NTPU8gUA2S6u/Ju P29RqPJjaaPV4eSbQ16p6AJAUVEAdkRqwRrd7ejUYeLa6UgDJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHWbVNPEzA4/Dl+NtM+z8qWqQ6qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjgxOTc1NTAtNGI0Ny0z NTYzLWIxMWMtNTRiN2Y3NTFhOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7MBwF4KmW8z0zRx6j9/hvGredM+dFyjQJj2EKBKs7iAlnYQtK/c3DY kD6341q5i5ezfzE5uvqhYapIcYBZXX4WWOq9ES5E7kVFmK9EUuUnmo9tdfgM+D+2 HjgwBbd3s6FU0Gc3KShG489UVThDoga7mRA0qj6LlRqsz+yDZQ7MvrhetqDJ50wf 7oVqXu6eWhBiIgAyeakRVYWh3Af/CaK8NgkD7rM7vMVu6dJ+OSQZFklCovYfyO0n mCDt1TLpmcTipjR2/xv0sud1TP61tU5RJCJrIVYGuXYJgVg6jLi7sk4LCEtWIdnN voTbgPGAlRqmwsPQ6Tygd51+fvz+QAA= -----END CERTIFICATE-----Generated at Sun Jun 14 00:24:06 2026 by rpki-client