$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1f6a7a6-07dc-354d-9fa6-0a1c4c177eee.roa File: c1f6a7a6-07dc-354d-9fa6-0a1c4c177eee.roa (raw, json) Hash identifier: OlBaxm45hShJ9CcMKkyhDzxDhPDuqmsBaxymY7Ou2wg= Subject key identifier: 44:48:5F:06:63:50:EB:56:2D:83:EE:03:89:0D:41:DB:D1:24:5D:5F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B6B0F16C0C03DFB3CB880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1f6a7a6-07dc-354d-9fa6-0a1c4c177eee.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 72.173.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:6b:0f:16:c0:c0:3d:fb:3c:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=aad6fb75-cc63-4ab5-b5bb-e9ea17715f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:21:e5:e6:4c:d8:84:bf:91:10:63:e2:36:fb: d6:1b:87:ee:aa:c5:e4:96:4d:09:63:3e:56:d4:3a: a4:d3:59:d0:a6:91:1b:0f:69:c4:a7:f2:77:1a:e7: 93:70:fd:d3:f8:93:9a:40:91:02:72:97:8f:8b:ad: 14:46:d8:9f:47:44:e5:d5:3a:f2:9b:59:db:e9:39: 8e:49:a6:a6:78:a4:6c:7d:c1:ad:ff:17:ea:e4:96: 95:d1:4e:b7:0f:3f:1c:0d:82:ee:bc:48:b2:bd:06: d1:db:09:d4:06:c0:90:bb:bc:7c:fb:9b:7c:65:e3: d4:ea:84:db:2e:b9:51:1f:2b:60:93:70:7c:2c:6d: cd:8a:72:b5:a3:ef:0f:7c:fe:07:39:95:2e:ac:97: 4a:5e:53:87:0f:d3:49:9d:0d:e2:cb:d8:3d:55:98: 74:93:7a:b2:ab:16:54:e1:6b:c9:cb:36:ea:de:37: 6f:98:47:4b:e3:fd:1a:8b:43:0d:b2:9a:72:bb:07: 7d:51:23:39:ac:48:9c:00:3c:b1:bf:70:69:34:d1: c9:75:86:89:e2:1c:c7:86:4e:9b:5b:1f:07:2a:e7: 48:99:91:56:6c:8a:31:09:5e:6b:42:52:44:48:a3: 60:0e:e4:a1:2c:87:0c:df:59:90:09:fb:5c:86:8a: bd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:48:5F:06:63:50:EB:56:2D:83:EE:03:89:0D:41:DB:D1:24:5D:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1f6a7a6-07dc-354d-9fa6-0a1c4c177eee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:fe:aa:e4:7c:68:29:bb:b7:fc:e7:bb:f2:14:dd:53:ae:cb: 30:9e:72:f2:40:d9:de:c0:bd:01:34:50:97:f0:5b:fd:2b:c7: 56:43:87:e8:80:53:b3:9b:06:fc:a8:8a:e2:23:d9:e8:cf:46: 30:a0:88:40:7f:19:d3:7a:a5:72:d8:21:6e:a1:7e:94:39:0c: 80:4e:0c:53:d5:13:cf:a1:0b:71:cf:a7:b1:e3:c0:c4:f4:93: 0a:54:14:d7:41:1e:7a:9b:30:b7:75:8b:2e:c7:e8:b4:a4:ce: d1:c5:80:81:b8:e2:67:62:45:6f:7b:71:1d:96:ed:7e:cd:c0: 11:30:e4:1f:2f:90:ba:59:07:53:99:da:80:77:9a:fe:d5:e1: 01:11:77:72:15:15:c0:36:4d:49:33:58:36:2f:a7:8e:f4:f9: 21:73:72:07:6b:db:5d:8b:04:25:9c:4f:ce:67:dd:09:24:96: d9:1c:8f:8f:e6:01:e0:ef:53:aa:31:92:23:b9:63:0e:43:b4: 74:6c:19:73:23:c2:26:cd:ad:59:10:67:9b:94:43:04:9b:8f: 9d:de:40:4f:ed:dc:02:35:85:14:58:35:92:30:5e:f1:76:9c: 86:27:ca:50:15:e0:78:8c:91:76:93:33:ee:f1:0d:cb:63:17: b2:b3:30:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm2sPFsDAPfs8uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YWFkNmZiNzUtY2M2My00YWI1LWI1YmItZTllYTE3NzE1ZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyHl5kzYhL+REGPiNvvWG4fuqsXklk0JYz5W 1Dqk01nQppEbD2nEp/J3GueTcP3T+JOaQJECcpePi60URtifR0Tl1Trym1nb6TmO SaameKRsfcGt/xfq5JaV0U63Dz8cDYLuvEiyvQbR2wnUBsCQu7x8+5t8ZePU6oTb LrlRHytgk3B8LG3NinK1o+8PfP4HOZUurJdKXlOHD9NJnQ3iy9g9VZh0k3qyqxZU 4WvJyzbq3jdvmEdL4/0ai0MNsppyuwd9USM5rEicADyxv3BpNNHJdYaJ4hzHhk6b Wx8HKudImZFWbIoxCV5rQlJESKNgDuShLIcM31mQCftchoq9hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERIXwZjUOtWLYPuA4kNQdvRJF1fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzFmNmE3YTYtMDdkYy0z NTRkLTlmYTYtMGExYzRjMTc3ZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr+quR8aCm7t/znu/IU3VOuyzCecvJA2d7AvQE0UJfwW/0rx1ZDh+iA U7ObBvyoiuIj2ejPRjCgiEB/GdN6pXLYIW6hfpQ5DIBODFPVE8+hC3HPp7HjwMT0 kwpUFNdBHnqbMLd1iy7H6LSkztHFgIG44mdiRW97cR2W7X7NwBEw5B8vkLpZB1OZ 2oB3mv7V4QERd3IVFcA2TUkzWDYvp470+SFzcgdr212LBCWcT85n3Qkkltkcj4/m AeDvU6oxkiO5Yw5DtHRsGXMjwibNrVkQZ5uUQwSbj53eQE/t3AI1hRRYNZIwXvF2 nIYnylAV4HiMkXaTM+7xDctjF7KzMDI= -----END CERTIFICATE-----Generated at Sat Jun 13 19:51:18 2026 by rpki-client