$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8574d4e-5560-35cd-add8-50076ff8eb18.roa File: c8574d4e-5560-35cd-add8-50076ff8eb18.roa (raw, json) Hash identifier: Tz3jZQSe5X3/Bq6qrtlKMzssE7LgIkVl1J8Zc7jCnkw= Subject key identifier: E9:48:1B:B4:2B:58:E5:65:E9:1F:75:A7:CF:9F:9C:86:70:25:E7:EE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B94504ACBF59B998F95C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8574d4e-5560-35cd-add8-50076ff8eb18.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.242.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:94:50:4a:cb:f5:9b:99:8f:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=ba068786-df29-4bf7-8d5e-dd99b90dc2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:05:30:56:f5:b2:6e:ee:f0:cc:c3:c5:02: c9:b9:13:06:85:08:64:72:96:b3:cd:93:f3:bd:2e: d6:1b:92:de:8e:da:39:d1:d5:52:59:30:f7:5b:5f: 41:c6:84:3b:97:15:d5:c0:1a:d7:80:87:6f:88:08: dd:3f:a8:d8:9c:be:e8:b5:71:2f:27:06:32:64:3b: 55:1f:66:46:46:2c:f8:57:d4:01:34:69:d7:17:c8: cc:0c:53:fc:f5:73:8c:0b:eb:1d:7d:bf:f9:cd:da: 48:b4:89:90:a4:96:29:b8:ea:ba:e6:dc:42:40:20: 61:f9:84:79:3b:8b:7d:ef:9e:c2:28:64:dd:23:fe: 08:61:3c:82:ad:9c:dc:4e:66:bf:c7:c9:d7:e7:51: b1:a8:9a:1e:a5:8d:d9:e8:34:1c:85:c1:24:7c:b4: 37:1d:c2:18:4e:34:da:cb:4b:a1:6d:d4:ad:c0:38: f0:f7:40:c6:10:ee:98:cc:85:96:fb:ad:72:c7:c0: cd:aa:c4:e8:7f:c2:ec:19:3b:3b:b1:06:4a:81:f1: 68:26:92:28:00:99:f0:98:06:3f:c8:d4:72:c6:33: 21:23:60:8d:22:6b:b4:b0:6f:ae:e3:57:21:c1:64: eb:42:a9:f5:4a:d8:5e:8a:c2:4a:e6:db:24:25:62: 22:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:48:1B:B4:2B:58:E5:65:E9:1F:75:A7:CF:9F:9C:86:70:25:E7:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8574d4e-5560-35cd-add8-50076ff8eb18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:46:22:38:12:f1:4f:de:ae:46:2d:15:18:eb:06:2e:3c:0e: 7d:87:03:3d:a9:b5:4c:20:7c:44:ac:c7:b5:d7:77:ee:61:66: 4a:e3:de:62:84:ad:26:25:ce:b3:f5:8c:25:c5:29:f7:1b:23: 54:17:61:7e:ee:af:3b:7e:36:64:ca:e0:31:f2:ad:27:35:9b: 79:b4:42:db:90:81:d9:7f:50:4c:7c:51:43:3a:1f:a2:70:5a: de:ed:65:04:5d:a0:a4:ba:ab:8a:52:96:0e:fd:e6:08:55:7a: a0:96:7a:56:e6:10:59:3d:ef:73:d8:37:73:8e:b0:3e:10:53: b8:1e:38:1a:f7:fc:b1:9a:ae:ad:1d:99:5d:a4:84:46:1b:3c: 1e:2b:13:d1:bc:59:f2:db:7d:c6:13:52:cb:8c:c1:ce:93:63: 12:c6:48:06:2d:8d:64:c3:56:18:f5:05:11:72:5c:40:a1:eb: 8c:71:b4:13:e9:a5:4b:dd:80:d4:8d:c4:5f:f3:84:25:36:1a: e5:80:75:79:c4:2b:ab:39:00:7a:2c:4c:30:58:6f:a1:00:7e: 06:de:5e:e5:53:f5:de:64:bd:b8:f4:41:a8:9e:e1:2a:c7:06: fc:ea:3f:08:26:13:0c:ad:a9:f4:82:44:7c:cf:e2:ed:6a:5d: eb:1e:f1:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm5RQSsv1m5mPlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YmEwNjg3ODYtZGYyOS00YmY3LThkNWUtZGQ5OWI5MGRjMmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1YFMFb1sm7u8MzDxQLJuRMGhQhkcpazzZPz vS7WG5Lejto50dVSWTD3W19BxoQ7lxXVwBrXgIdviAjdP6jYnL7otXEvJwYyZDtV H2ZGRiz4V9QBNGnXF8jMDFP89XOMC+sdfb/5zdpItImQpJYpuOq65txCQCBh+YR5 O4t9757CKGTdI/4IYTyCrZzcTma/x8nX51GxqJoepY3Z6DQchcEkfLQ3HcIYTjTa y0uhbdStwDjw90DGEO6YzIWW+61yx8DNqsTof8LsGTs7sQZKgfFoJpIoAJnwmAY/ yNRyxjMhI2CNImu0sG+u41chwWTrQqn1StheisJK5tskJWIiUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlIG7QrWOVl6R91p8+fnIZwJefuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzg1NzRkNGUtNTU2MC0z NWNkLWFkZDgtNTAwNzZmZjhlYjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNGIjgS8U/erkYtFRjrBi48Dn2HAz2ptUwgfESsx7XXd+5hZkrj3mKE rSYlzrP1jCXFKfcbI1QXYX7urzt+NmTK4DHyrSc1m3m0QtuQgdl/UEx8UUM6H6Jw Wt7tZQRdoKS6q4pSlg795ghVeqCWelbmEFk973PYN3OOsD4QU7geOBr3/LGarq0d mV2khEYbPB4rE9G8WfLbfcYTUsuMwc6TYxLGSAYtjWTDVhj1BRFyXECh64xxtBPp pUvdgNSNxF/zhCU2GuWAdXnEK6s5AHosTDBYb6EAfgbeXuVT9d5kvbj0Qaie4SrH BvzqPwgmEwytqfSCRHzP4u1qXese8bI= -----END CERTIFICATE-----Generated at Sat Jun 13 15:34:01 2026 by rpki-client