$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bec9a80f-acd4-3872-a1ea-a77e19ee2294.roa File: bec9a80f-acd4-3872-a1ea-a77e19ee2294.roa (raw, json) Hash identifier: BA3/aM2lX7VRpSFkyG9PTnIQph07xP9lGDx6tKdOlRc= Subject key identifier: AD:51:74:96:F2:89:82:CE:72:F8:56:74:34:F3:97:5C:5B:29:E1:EF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C18CE77DC1ED6B8D55100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bec9a80f-acd4-3872-a1ea-a77e19ee2294.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.242.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:18:ce:77:dc:1e:d6:b8:d5:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=3a63b4ed-eae6-4b44-a40e-f687c267b342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3b:98:29:96:72:6f:84:f2:91:c1:fb:06:08: 73:ff:f9:41:a8:21:75:51:9d:08:68:13:16:34:4c: dc:bc:5f:ae:db:08:be:04:ff:25:4e:c4:03:fd:36: fb:34:fd:87:ca:7e:88:e6:3d:b4:0e:14:d2:2e:7f: 96:86:82:64:24:95:9f:75:35:f3:d9:86:7c:69:38: 3f:82:e6:96:b5:de:2e:b9:c4:0b:fd:3a:34:82:58: 25:77:eb:69:1c:52:41:89:72:4b:3e:f8:8a:80:39: eb:e9:9d:52:ce:da:45:b2:b7:24:2e:ae:a7:45:c1: 91:15:a9:2f:7a:09:75:79:89:66:e0:2b:41:92:49: 35:14:08:b5:6a:2b:61:e6:a7:dd:97:01:c0:e2:49: a0:14:77:be:c7:5a:0a:1b:af:b1:5f:b1:bb:73:97: a1:e6:d8:89:26:e5:f1:32:56:11:75:b1:c0:44:60: 08:1d:6e:a0:35:20:3c:fc:0f:d9:a7:7e:92:73:11: c7:ef:25:fa:20:31:62:8a:81:b1:0a:54:f2:23:2c: 98:ac:4a:6f:02:bd:5a:d8:3b:79:b1:03:a6:57:53: 02:1c:02:af:f4:9a:7a:6a:d9:a4:7d:ab:96:d9:d0: f2:9a:e0:c0:b5:49:29:26:ed:0e:86:40:42:ee:04: e8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:51:74:96:F2:89:82:CE:72:F8:56:74:34:F3:97:5C:5B:29:E1:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bec9a80f-acd4-3872-a1ea-a77e19ee2294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:16:39:de:13:39:16:35:b9:1e:91:a9:23:c9:41:04:5c:34: 66:30:b6:51:77:5a:0b:db:cd:f0:20:e7:45:29:21:cf:f9:34: 06:3d:13:ef:77:8b:60:94:e3:a8:f5:08:b4:66:3e:e6:28:fd: 0f:dd:1f:54:1b:62:f2:08:37:a9:72:11:12:51:8d:0d:b8:53: 1d:30:1d:07:3a:54:ba:4e:44:34:eb:7e:f8:9e:48:95:d7:a1: 5c:a5:c0:76:d3:78:55:46:a6:c8:30:b9:b7:16:be:3f:35:74: 04:55:f5:05:42:a0:e6:7c:8b:3f:fb:4a:03:cf:f9:bf:a8:61: 1b:f0:a3:d9:cb:30:0f:00:b6:65:4d:bd:8d:07:58:cf:ce:6a: 56:22:47:e5:d3:2e:13:7a:52:11:88:75:d5:68:6a:a2:5f:59: 1d:2e:a1:2b:dc:80:30:12:8c:42:5f:43:da:88:90:69:d5:25: 78:a8:5d:4b:44:e9:ff:71:5a:ad:08:10:fa:46:f0:aa:ee:57: 44:c5:31:80:ea:92:38:6c:f4:29:a0:c6:c2:56:20:5c:a6:57: e4:94:fa:42:a0:bf:db:40:f9:42:43:04:63:bb:13:52:7e:dd: 84:c0:74:c5:a5:84:8b:95:28:2a:a3:1e:bc:8c:71:4c:51:bb: 91:c3:a2:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnBjOd9we1rjVUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk M2E2M2I0ZWQtZWFlNi00YjQ0LWE0MGUtZjY4N2MyNjdiMzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTuYKZZyb4TykcH7Bghz//lBqCF1UZ0IaBMW NEzcvF+u2wi+BP8lTsQD/Tb7NP2Hyn6I5j20DhTSLn+WhoJkJJWfdTXz2YZ8aTg/ guaWtd4uucQL/To0glgld+tpHFJBiXJLPviKgDnr6Z1SztpFsrckLq6nRcGRFakv egl1eYlm4CtBkkk1FAi1aith5qfdlwHA4kmgFHe+x1oKG6+xX7G7c5eh5tiJJuXx MlYRdbHARGAIHW6gNSA8/A/Zp36ScxHH7yX6IDFiioGxClTyIyyYrEpvAr1a2Dt5 sQOmV1MCHAKv9Jp6atmkfauW2dDymuDAtUkpJu0OhkBC7gTo5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1RdJbyiYLOcvhWdDTzl1xbKeHvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmVjOWE4MGYtYWNkNC0z ODcyLWExZWEtYTc3ZTE5ZWUyMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYWOd4TORY1uR6RqSPJQQRcNGYwtlF3WgvbzfAg50UpIc/5NAY9E+93 i2CU46j1CLRmPuYo/Q/dH1QbYvIIN6lyERJRjQ24Ux0wHQc6VLpORDTrfvieSJXX oVylwHbTeFVGpsgwubcWvj81dARV9QVCoOZ8iz/7SgPP+b+oYRvwo9nLMA8AtmVN vY0HWM/OalYiR+XTLhN6UhGIddVoaqJfWR0uoSvcgDASjEJfQ9qIkGnVJXioXUtE 6f9xWq0IEPpG8KruV0TFMYDqkjhs9CmgxsJWIFymV+SU+kKgv9tA+UJDBGO7E1J+ 3YTAdMWlhIuVKCqjHryMcUxRu5HDois= -----END CERTIFICATE-----Generated at Sat Jun 13 19:33:15 2026 by rpki-client