$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c65a1971-3cf4-3034-a4a3-4973e93d544d.roa File: c65a1971-3cf4-3034-a4a3-4973e93d544d.roa (raw, json) Hash identifier: tbElkd9xRMPwXC5IbOF7GAcxSnaAbR05KVtJQKvAyBI= Subject key identifier: E5:0E:58:CF:6E:BF:2F:95:03:A9:B4:F4:A8:E0:FC:7B:A0:52:CC:AD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C1C32E4F84C2B5CC56780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c65a1971-3cf4-3034-a4a3-4973e93d544d.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.243.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:1c:32:e4:f8:4c:2b:5c:c5:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=cd7b117e-29c4-48e4-91d0-ec1a25e34e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:18:0a:21:f4:65:ce:36:02:2f:44:a8:43: b6:70:d5:53:99:34:35:a1:57:32:9e:7f:10:d7:ef: 88:7a:eb:94:56:0f:8c:59:29:9d:f0:c2:9b:56:c3: 87:53:c5:b2:bb:d1:ad:0c:59:e4:fb:a4:d5:46:e9: 80:8c:36:c2:f1:f7:db:81:26:f8:bf:a0:a2:15:fe: 59:b6:79:0f:1a:af:66:3e:69:60:ce:9c:93:21:db: f8:cd:d3:7e:79:65:c6:1a:04:43:1a:e0:b2:39:81: 14:2e:62:33:03:46:ae:64:eb:7c:81:35:97:4e:e7: 88:91:09:f7:23:58:19:93:7d:38:82:f2:db:b5:11: 80:14:5c:cd:9f:d9:a1:a9:c8:af:08:30:77:1a:04: 95:a6:09:5a:08:2b:9a:b5:8c:2b:96:08:ee:75:54: fb:44:e3:32:d3:8d:30:2d:49:68:1a:f4:f0:61:0d: 65:2c:18:f1:9f:23:88:ac:62:00:68:53:d6:10:f3: 46:70:b4:a7:47:12:fd:0f:d7:c9:0e:ac:d1:7b:00: ae:92:da:c4:b8:3e:a6:c5:0c:07:92:4f:f4:b7:a2: 2d:f2:79:ff:26:71:04:72:c6:2e:f5:ce:47:d2:01: 9b:c6:8d:89:d4:e7:7b:6a:92:5d:65:7e:fa:58:fa: 3d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0E:58:CF:6E:BF:2F:95:03:A9:B4:F4:A8:E0:FC:7B:A0:52:CC:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c65a1971-3cf4-3034-a4a3-4973e93d544d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:27:c3:67:e6:d0:b8:e0:cd:aa:f3:95:dd:6c:80:62:e8:67: 6f:a3:11:e8:e3:08:13:fd:f0:9b:a9:8d:21:d5:4f:62:c1:43: ab:25:74:a7:73:49:63:50:00:e9:1b:44:e7:0d:08:a2:4a:30: 6e:fb:35:67:fe:05:4e:4e:91:e9:f7:15:df:8a:2b:d2:3d:68: 01:09:2c:2c:da:54:5c:44:20:ff:d3:72:82:78:7d:e1:35:60: a4:1f:95:40:58:9d:91:5c:f0:5e:0c:63:62:f7:02:96:34:6a: e7:3f:1d:8c:10:ea:a4:30:73:e5:78:7f:a7:14:fb:64:a5:bb: d8:64:f7:98:52:e8:eb:54:07:27:e0:43:c7:57:dd:2e:73:49: 16:1a:a6:c2:6c:bb:50:9d:7c:76:b8:3c:b4:11:2a:5a:ae:2f: c8:0c:94:fb:60:5e:55:c9:11:f2:ea:64:b5:d9:85:63:36:88: 39:30:7b:21:10:cc:c5:32:c4:65:8c:6c:19:f7:57:ca:f0:3b: 49:7b:9f:0c:0d:40:0c:10:e7:7a:77:29:8e:09:6e:65:a7:f0: eb:15:45:1f:39:30:83:41:99:c2:f9:3d:58:fd:f2:d8:1b:fa: a9:63:58:78:22:19:63:3a:bc:32:64:dd:42:1a:07:53:44:36: be:ae:ed:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnBwy5PhMK1zFZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk Y2Q3YjExN2UtMjljNC00OGU0LTkxZDAtZWMxYTI1ZTM0ZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/EYCiH0Zc42Ai9EqEO2cNVTmTQ1oVcynn8Q 1++IeuuUVg+MWSmd8MKbVsOHU8Wyu9GtDFnk+6TVRumAjDbC8ffbgSb4v6CiFf5Z tnkPGq9mPmlgzpyTIdv4zdN+eWXGGgRDGuCyOYEULmIzA0auZOt8gTWXTueIkQn3 I1gZk304gvLbtRGAFFzNn9mhqcivCDB3GgSVpglaCCuatYwrlgjudVT7ROMy040w LUloGvTwYQ1lLBjxnyOIrGIAaFPWEPNGcLSnRxL9D9fJDqzRewCuktrEuD6mxQwH kk/0t6It8nn/JnEEcsYu9c5H0gGbxo2J1Od7apJdZX76WPo9iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUOWM9uvy+VA6m09Kjg/HugUsytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzY1YTE5NzEtM2NmNC0z MDM0LWE0YTMtNDk3M2U5M2Q1NDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwnw2fm0Ljgzarzld1sgGLoZ2+jEejjCBP98JupjSHVT2LBQ6sldKdz SWNQAOkbROcNCKJKMG77NWf+BU5Oken3Fd+KK9I9aAEJLCzaVFxEIP/TcoJ4feE1 YKQflUBYnZFc8F4MY2L3ApY0auc/HYwQ6qQwc+V4f6cU+2Slu9hk95hS6OtUByfg Q8dX3S5zSRYapsJsu1CdfHa4PLQRKlquL8gMlPtgXlXJEfLqZLXZhWM2iDkweyEQ zMUyxGWMbBn3V8rwO0l7nwwNQAwQ53p3KY4JbmWn8OsVRR85MINBmcL5PVj98tgb +qljWHgiGWM6vDJk3UIaB1NENr6u7R0= -----END CERTIFICATE-----Generated at Sat Jun 13 21:00:26 2026 by rpki-client