$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfaacc0d-5171-3bf3-9d23-9b276aa315a1.roa File: bfaacc0d-5171-3bf3-9d23-9b276aa315a1.roa (raw, json) Hash identifier: usTqACM66FmSmbhwbrkorma0cwghswEpBY9wa7jPDgQ= Subject key identifier: B7:81:33:D3:C1:2B:7A:60:CB:A6:12:EA:0B:BE:BD:F4:2E:35:6C:FA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C147248548B3B81213B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfaacc0d-5171-3bf3-9d23-9b276aa315a1.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.242.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:14:72:48:54:8b:3b:81:21:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=4230019d-6bb9-40f9-8ca0-3555a4ab8076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bb:aa:e3:ca:03:21:af:91:53:f0:d2:fd:e2: 79:88:ee:d5:f4:6e:62:cb:c5:f2:8b:55:6d:75:a6: 0e:0f:c1:f3:fb:b4:4d:fe:0f:6a:18:99:79:1d:1b: e2:82:94:0d:28:12:d3:e5:39:77:9c:11:80:db:c3: 30:50:39:a7:08:b8:f4:8c:c6:ac:5a:0b:fb:f3:7e: 6a:2e:cb:6a:a1:63:95:b0:90:cd:b8:75:0b:5b:3f: b0:92:7e:5e:4f:12:f6:8e:eb:23:75:02:da:dd:6e: 1c:89:b8:81:0a:2d:8c:5e:23:77:21:bb:4e:4e:71: df:f9:0c:b7:45:fd:59:08:42:81:e0:29:9a:5a:b9: c0:d6:eb:02:24:42:d3:f2:54:30:d0:a7:fb:3a:e2: 7b:bf:bc:5b:79:d9:a3:6d:5a:80:74:b3:d7:89:cf: 2f:e6:18:a4:bf:72:52:75:9d:7d:54:89:30:0e:f2: ec:20:26:c4:8a:9d:b1:74:7c:34:26:bd:90:73:cb: 7b:2c:3b:1a:8c:f8:b2:e1:bc:3b:98:f3:90:33:3b: 0a:d4:9a:43:45:23:0f:0c:b4:e0:5a:cd:17:7e:25: df:8f:93:ff:47:04:64:31:0f:63:2e:6b:63:4d:0a: e5:f9:fc:b0:ad:2f:5e:22:4a:16:39:7e:d9:a7:70: bd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:81:33:D3:C1:2B:7A:60:CB:A6:12:EA:0B:BE:BD:F4:2E:35:6C:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfaacc0d-5171-3bf3-9d23-9b276aa315a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:aa:e4:e6:81:e7:27:e0:d7:fc:a8:57:4f:f3:34:69:b0:b1: 3b:cd:fc:56:f5:6e:e9:cb:1b:b3:8a:8b:18:82:ba:fc:11:35: 2c:71:b5:fa:a5:76:0d:2f:e2:c8:ef:2c:61:db:e2:1e:47:1d: 01:ba:cf:ff:85:c7:61:aa:c7:08:ff:99:77:96:78:7b:a4:52: 53:22:aa:96:ad:8d:3f:35:19:d3:9e:af:db:81:65:bd:02:46: 8c:6b:22:43:57:83:8b:31:47:8a:26:e0:3b:e7:e1:d4:19:b1: 56:6b:2e:35:a1:af:f8:d6:32:a7:a9:40:8a:7d:fd:57:c5:a6: 6a:34:2a:49:a9:bc:b8:df:c3:cf:77:46:3e:b6:47:3c:20:7a: a8:b7:2c:2f:81:3c:be:1c:8d:ec:84:b0:96:b6:40:51:a7:c1: 6c:dd:cd:a6:32:ac:32:b1:14:ca:6d:9c:8d:4a:89:9d:a4:ca: 1c:74:3f:fe:b5:b2:e6:60:1f:ee:03:2a:28:ec:71:76:b1:9b: d2:e9:a8:b9:08:d0:14:18:bb:b1:f4:a5:73:64:92:e5:99:aa: f9:16:6e:78:b4:12:5e:c3:0e:f5:82:bb:2c:c9:b4:b9:b8:63: 3e:69:e8:90:0c:51:da:ee:77:6d:74:94:ea:af:f0:3d:73:48: 5c:1c:2c:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnBRySFSLO4EhOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NDIzMDAxOWQtNmJiOS00MGY5LThjYTAtMzU1NWE0YWI4MDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzruq48oDIa+RU/DS/eJ5iO7V9G5iy8Xyi1Vt daYOD8Hz+7RN/g9qGJl5HRvigpQNKBLT5Tl3nBGA28MwUDmnCLj0jMasWgv7835q LstqoWOVsJDNuHULWz+wkn5eTxL2jusjdQLa3W4cibiBCi2MXiN3IbtOTnHf+Qy3 Rf1ZCEKB4CmaWrnA1usCJELT8lQw0Kf7OuJ7v7xbedmjbVqAdLPXic8v5hikv3JS dZ19VIkwDvLsICbEip2xdHw0Jr2Qc8t7LDsajPiy4bw7mPOQMzsK1JpDRSMPDLTg Ws0XfiXfj5P/RwRkMQ9jLmtjTQrl+fywrS9eIkoWOX7Zp3C95QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeBM9PBK3pgy6YS6gu+vfQuNWz6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmZhYWNjMGQtNTE3MS0z YmYzLTlkMjMtOWIyNzZhYTMxNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuq5OaB5yfg1/yoV0/zNGmwsTvN/Fb1bunLG7OKixiCuvwRNSxxtfql dg0v4sjvLGHb4h5HHQG6z/+Fx2Gqxwj/mXeWeHukUlMiqpatjT81GdOer9uBZb0C RoxrIkNXg4sxR4om4Dvn4dQZsVZrLjWhr/jWMqepQIp9/VfFpmo0KkmpvLjfw893 Rj62Rzwgeqi3LC+BPL4cjeyEsJa2QFGnwWzdzaYyrDKxFMptnI1KiZ2kyhx0P/61 suZgH+4DKijscXaxm9LpqLkI0BQYu7H0pXNkkuWZqvkWbni0El7DDvWCuyzJtLm4 Yz5p6JAMUdrud210lOqv8D1zSFwcLEQ= -----END CERTIFICATE-----Generated at Sat Jun 13 23:29:57 2026 by rpki-client