$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1ab7ccf-4c1c-31e9-b08e-e0e3b126240a.roa File: c1ab7ccf-4c1c-31e9-b08e-e0e3b126240a.roa (raw, json) Hash identifier: SQ1YvuM5gL9tA1wz84YvRotI45kvo7+Z/TXvNKFJizI= Subject key identifier: 52:F6:7E:E4:E7:E5:2E:69:41:01:E9:1E:9F:47:D2:F8:C1:C4:50:79 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C145D285D34CC44D65600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1ab7ccf-4c1c-31e9-b08e-e0e3b126240a.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.242.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:14:5d:28:5d:34:cc:44:d6:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=1904cc2e-ec43-4124-87f1-9dd04acd51eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:48:68:01:87:c2:f1:54:6b:18:4f:be:06:b2: d7:f3:26:2c:a4:b4:25:b4:11:e2:90:fa:e8:88:a1: 51:e2:a2:e8:76:14:31:a5:0e:cb:ab:fd:92:31:4e: 36:4d:39:41:7c:89:34:6e:f7:73:46:55:f3:93:10: a2:8c:20:8a:b9:b2:d7:ec:02:83:e2:2d:b6:94:fd: bf:36:56:6a:d8:23:69:61:3f:79:26:dd:22:c5:76: bd:80:f9:3f:36:20:2c:9c:a3:cb:56:a8:1a:aa:4b: b5:a5:07:af:d0:63:22:ac:41:d4:71:09:c0:41:38: ca:84:af:ce:5d:e1:b8:47:7d:6f:21:8a:ce:fd:6d: 8c:8c:da:43:65:67:50:0e:ce:d5:ad:0c:a0:db:cb: 0c:f1:68:a0:e6:0a:13:0e:63:85:07:e0:59:2e:b4: 3d:0e:34:af:19:fd:e7:66:ab:97:0f:10:1a:0b:97: 9b:92:d2:c5:bb:dd:6e:a8:eb:fa:9b:c3:87:41:74: dd:cf:e6:3f:bc:ca:18:2a:27:a1:cf:66:7b:44:2f: f1:03:e5:67:c6:8e:2c:a8:f9:1f:1a:9c:0f:8f:6e: d9:e1:09:8d:13:9c:99:90:2a:9d:4d:f4:75:cf:5b: f0:4b:f4:e1:79:16:d3:c6:a4:38:a5:5c:95:f8:c1: 53:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F6:7E:E4:E7:E5:2E:69:41:01:E9:1E:9F:47:D2:F8:C1:C4:50:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1ab7ccf-4c1c-31e9-b08e-e0e3b126240a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:9f:de:ee:6e:ae:c7:9f:be:97:ed:8e:d8:3c:51:fe:f3:1f: 0a:df:ac:19:e6:78:5a:af:b1:67:43:be:6e:3c:46:f3:17:14: d1:46:38:5a:54:e4:45:7f:2f:9d:eb:29:21:98:5d:e0:a2:59: ca:86:de:10:fc:eb:3e:88:84:40:2a:c9:7a:ad:0b:39:59:73: b0:3f:0a:8c:d4:c4:b5:77:e1:4f:48:c0:16:d1:e6:44:90:19: 18:87:fa:32:04:26:34:07:1c:c5:fc:80:97:5b:15:d2:e8:c3: c4:b2:69:39:c3:ab:d7:84:5a:d7:71:ea:77:42:fe:0f:cd:87: 05:9a:fc:c7:bb:b4:0d:35:13:55:15:b5:85:74:20:8e:9d:e1: 18:83:69:30:35:19:f3:74:45:3e:d4:37:32:96:cc:dc:78:ce: dc:1b:13:7c:d1:f5:8a:18:0c:aa:1c:21:30:8f:48:7a:43:64: ca:26:5b:83:88:91:fe:04:81:93:1e:a1:60:7a:c0:52:18:c8: 74:2a:a2:c6:5b:86:37:a1:01:67:d3:a8:46:8f:e9:13:c5:be: 5b:de:6e:ce:65:8a:f4:c4:b4:7c:94:6d:90:59:ae:ea:e9:4f: f5:4a:29:88:4e:51:0e:07:e4:0d:43:91:67:32:3e:6e:b3:c3: 4c:ac:9e:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnBRdKF00zETWVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MTkwNGNjMmUtZWM0My00MTI0LTg3ZjEtOWRkMDRhY2Q1MWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkhoAYfC8VRrGE++BrLX8yYspLQltBHikPro iKFR4qLodhQxpQ7Lq/2SMU42TTlBfIk0bvdzRlXzkxCijCCKubLX7AKD4i22lP2/ NlZq2CNpYT95Jt0ixXa9gPk/NiAsnKPLVqgaqku1pQev0GMirEHUcQnAQTjKhK/O XeG4R31vIYrO/W2MjNpDZWdQDs7VrQyg28sM8Wig5goTDmOFB+BZLrQ9DjSvGf3n ZquXDxAaC5ebktLFu91uqOv6m8OHQXTdz+Y/vMoYKiehz2Z7RC/xA+Vnxo4sqPkf GpwPj27Z4QmNE5yZkCqdTfR1z1vwS/TheRbTxqQ4pVyV+MFTswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFL2fuTn5S5pQQHpHp9H0vjBxFB5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzFhYjdjY2YtNGMxYy0z MWU5LWIwOGUtZTBlM2IxMjYyNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPILMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyf3u5ursefvpftjtg8Uf7zHwrfrBnmeFqvsWdDvm48RvMXFNFGOFpU 5EV/L53rKSGYXeCiWcqG3hD86z6IhEAqyXqtCzlZc7A/CozUxLV34U9IwBbR5kSQ GRiH+jIEJjQHHMX8gJdbFdLow8SyaTnDq9eEWtdx6ndC/g/NhwWa/Me7tA01E1UV tYV0II6d4RiDaTA1GfN0RT7UNzKWzNx4ztwbE3zR9YoYDKocITCPSHpDZMomW4OI kf4EgZMeoWB6wFIYyHQqosZbhjehAWfTqEaP6RPFvlvebs5livTEtHyUbZBZrurp T/VKKYhOUQ4H5A1DkWcyPm6zw0ysnks= -----END CERTIFICATE-----Generated at Sat Jun 13 19:48:49 2026 by rpki-client