$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb3fa1de-32de-3305-ba48-5f16a7fc507f.roa File: bb3fa1de-32de-3305-ba48-5f16a7fc507f.roa (raw, json) Hash identifier: u3NzBYrA/eyn1kv2a3uix6ggYpXZ64uO5kyha4KZEa0= Subject key identifier: 15:03:A6:DB:DC:C5:4A:BB:83:32:1F:1A:F6:15:0B:E1:FD:B2:42:0F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B9EE646BA1D346EAE8E80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb3fa1de-32de-3305-ba48-5f16a7fc507f.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.243.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:9e:e6:46:ba:1d:34:6e:ae:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=ef1982d1-4b01-4cf6-bbe1-fbae4405a304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5f:56:91:5f:f3:5b:55:82:5f:35:04:20:2b: dd:96:15:5f:41:b8:af:3d:f0:60:19:3f:ae:41:f0: 9b:62:ca:64:e0:06:3f:43:32:a9:68:c7:84:3c:2d: 1f:e4:30:58:c5:1e:3a:42:e8:88:20:1e:f6:fb:b9: 5d:37:b8:62:dd:67:60:a0:04:1e:ca:9b:9f:8f:ba: f3:27:d3:be:cb:cf:a3:23:bf:9e:6b:12:39:f4:5d: fd:bf:79:e8:5d:40:56:dd:12:82:9d:0e:98:e2:1c: 0c:b4:55:47:5e:c0:15:55:80:cd:2e:7c:7e:ac:89: bd:fa:60:52:1e:ee:fb:89:31:dc:94:30:2b:57:6c: 04:28:aa:eb:f1:ec:82:a8:04:e1:5d:9c:1f:06:51: 7b:00:be:3d:7f:63:17:74:0a:92:9f:9c:3a:0d:3f: ed:5b:f5:32:d9:aa:aa:85:d1:8e:59:c3:3d:14:61: 40:b6:d2:e7:ac:aa:c3:f0:e1:9c:c1:88:1d:de:be: 6f:fe:95:d4:b7:77:15:89:7d:41:38:8c:69:aa:85: ec:68:49:b8:ef:a7:f9:e4:25:1a:f1:98:41:48:af: 92:5f:22:16:23:85:93:84:15:cc:a1:34:27:48:26: 7e:22:f8:ca:fd:e0:ef:f8:41:fd:be:a1:e9:e0:d2: 3b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:03:A6:DB:DC:C5:4A:BB:83:32:1F:1A:F6:15:0B:E1:FD:B2:42:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb3fa1de-32de-3305-ba48-5f16a7fc507f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:06:15:52:f4:45:c7:33:55:3b:d7:b2:16:11:c6:5e:e4:f2: 99:ef:e4:e8:43:c8:24:45:a3:96:b3:f1:f3:5f:53:ae:32:f3: 7e:83:f5:2d:06:b5:d4:45:57:cd:ea:7d:f2:74:42:4e:d7:6e: 4d:a0:ca:f0:84:2c:e8:b3:cc:4d:19:7d:53:fe:40:6e:5c:12: 31:43:c2:7c:13:7e:3b:9f:66:66:92:f1:6d:ac:24:7a:98:c9: 9e:f3:17:c0:6d:63:8b:42:f5:db:94:a1:f7:aa:88:23:f5:59: 4b:ea:2f:77:3f:ce:bc:5d:50:01:d6:7a:a3:85:e6:96:6b:8c: 5c:0b:8e:39:7b:d0:cc:b2:f5:48:bd:6e:2c:eb:81:0f:bd:f5: 3f:be:f3:3a:61:31:72:9c:27:4c:26:ef:be:71:50:21:6f:b5: f1:fe:5f:8e:06:45:2a:60:dc:1e:c1:17:55:e4:c6:56:03:d7: 00:74:4f:bf:81:46:33:b2:b1:66:9e:5d:44:b5:ff:1b:65:85: 86:92:0d:53:9a:60:41:8b:c0:8c:64:11:95:a9:fd:82:a6:36: 64:c6:85:c3:d6:d8:d7:ab:e9:26:57:53:e8:77:e3:64:41:fe: f3:81:b6:bf:26:da:b6:98:46:fd:5a:c8:93:c9:b4:fa:6b:58: 9d:1e:e5:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm57mRrodNG6ujoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZWYxOTgyZDEtNGIwMS00Y2Y2LWJiZTEtZmJhZTQ0MDVhMzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F9WkV/zW1WCXzUEICvdlhVfQbivPfBgGT+u QfCbYspk4AY/QzKpaMeEPC0f5DBYxR46QuiIIB72+7ldN7hi3WdgoAQeypufj7rz J9O+y8+jI7+eaxI59F39v3noXUBW3RKCnQ6Y4hwMtFVHXsAVVYDNLnx+rIm9+mBS Hu77iTHclDArV2wEKKrr8eyCqAThXZwfBlF7AL49f2MXdAqSn5w6DT/tW/Uy2aqq hdGOWcM9FGFAttLnrKrD8OGcwYgd3r5v/pXUt3cViX1BOIxpqoXsaEm476f55CUa 8ZhBSK+SXyIWI4WThBXMoTQnSCZ+IvjK/eDv+EH9vqHp4NI7XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUDptvcxUq7gzIfGvYVC+H9skIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmIzZmExZGUtMzJkZS0z MzA1LWJhNDgtNWYxNmE3ZmM1MDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYGFVL0RcczVTvXshYRxl7k8pnv5OhDyCRFo5az8fNfU64y836D9S0G tdRFV83qffJ0Qk7Xbk2gyvCELOizzE0ZfVP+QG5cEjFDwnwTfjufZmaS8W2sJHqY yZ7zF8BtY4tC9duUofeqiCP1WUvqL3c/zrxdUAHWeqOF5pZrjFwLjjl70Myy9Ui9 bizrgQ+99T++8zphMXKcJ0wm775xUCFvtfH+X44GRSpg3B7BF1XkxlYD1wB0T7+B RjOysWaeXUS1/xtlhYaSDVOaYEGLwIxkEZWp/YKmNmTGhcPW2Ner6SZXU+h342RB /vOBtr8m2raYRv1ayJPJtPprWJ0e5aU= -----END CERTIFICATE-----Generated at Sun Jun 14 02:14:43 2026 by rpki-client