$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9f98c55-1da8-38c8-a9a1-b424ddeff17e.roa File: c9f98c55-1da8-38c8-a9a1-b424ddeff17e.roa (raw, json) Hash identifier: 6eoep9Wete0oosxqlx0J6kMyrvcloWNMz9r8PWqda8k= Subject key identifier: 10:96:E7:A4:38:C7:42:6B:16:6D:01:4B:58:24:5F:03:95:52:45:B4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B97248C6D0320DDA9EE00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9f98c55-1da8-38c8-a9a1-b424ddeff17e.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.242.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:97:24:8c:6d:03:20:dd:a9:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=1c1b0a7c-600b-4dfa-b4b1-a7fae1d8d307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:55:04:c2:4d:28:be:4e:e0:91:65:a7:df:e9: 47:d4:93:6e:78:98:59:8f:2b:6f:90:99:88:c8:cb: 44:50:17:40:ed:40:eb:7d:ea:06:d1:32:b1:60:be: 20:a7:8c:82:7d:b9:cb:98:07:d2:3e:de:31:ad:6e: da:86:74:24:d3:a3:84:e5:d7:6e:c5:9c:3c:93:b2: d1:34:b2:6f:f6:6a:71:99:90:ed:00:f4:d6:51:1f: 09:4e:5a:99:d5:d5:c3:10:ff:ec:43:87:e1:60:65: 95:d3:12:ad:6a:83:f9:30:48:29:23:12:17:2c:20: b5:f1:ad:52:8a:b5:3f:bf:ae:44:1f:fd:f6:fc:ce: 45:d1:60:b1:95:56:b8:1a:dc:65:67:9f:9c:c7:d3: fc:5a:70:9f:78:93:39:32:a0:a4:32:c8:20:a8:fd: db:2d:0d:2a:47:cd:8c:d1:c8:b8:09:bc:73:24:08: 97:81:d7:46:18:bf:e3:33:f7:8d:b0:7a:96:9f:5b: 48:da:b5:f2:3d:16:71:2a:8c:17:44:e3:82:8d:0e: e0:79:eb:bf:a6:3e:34:40:bf:40:14:a2:78:5c:88: ad:d5:eb:f7:f0:44:9a:80:4e:16:16:5f:ab:d2:a4: 5f:ed:fd:55:37:ad:b9:37:42:e0:45:b8:18:d6:cc: eb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:96:E7:A4:38:C7:42:6B:16:6D:01:4B:58:24:5F:03:95:52:45:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9f98c55-1da8-38c8-a9a1-b424ddeff17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:60:a4:d7:99:ed:26:4e:84:57:8e:a7:4c:c8:4d:6f:3f:e4: 41:a4:4d:93:3e:00:51:00:14:51:cb:a4:56:8d:b3:85:1c:ee: aa:ed:80:00:52:12:1d:0b:d2:58:34:fd:6f:a5:83:b8:66:6b: 47:26:41:b5:f9:7f:5d:54:5e:11:1d:90:1e:cd:30:d1:f6:67: 98:c5:0a:75:4b:6e:56:b4:4f:ab:8d:5b:bc:b7:7b:51:17:ba: 01:42:6b:22:92:68:00:d6:a1:12:37:0c:04:b1:6f:38:03:c3: 9b:0d:82:3c:e5:7f:cb:93:d5:60:73:1d:ca:fe:9e:82:85:d2: d7:3b:bb:c8:d2:ef:59:98:2e:86:9c:20:a6:dd:8a:b1:c0:11: c1:be:0d:21:57:ce:81:67:d1:82:59:24:e0:53:08:d4:75:79: 30:5b:57:c8:3c:54:12:4e:c6:cf:3c:8d:f1:12:f6:62:de:8e: b9:49:9a:18:02:2a:1e:7d:6d:f2:88:f5:ce:7e:2c:82:39:ab: e5:05:0a:b2:0c:03:09:04:fc:43:c5:80:f8:6a:72:91:46:a5: c7:e9:af:14:a6:d3:d0:40:01:f4:83:67:d4:9c:25:34:79:4d: 89:bc:28:2d:63:9b:69:83:75:99:86:68:ae:4f:55:ae:28:25: 3c:84:d2:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm5ckjG0DIN2p7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MWMxYjBhN2MtNjAwYi00ZGZhLWI0YjEtYTdmYWUxZDhkMzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslUEwk0ovk7gkWWn3+lH1JNueJhZjytvkJmI yMtEUBdA7UDrfeoG0TKxYL4gp4yCfbnLmAfSPt4xrW7ahnQk06OE5dduxZw8k7LR NLJv9mpxmZDtAPTWUR8JTlqZ1dXDEP/sQ4fhYGWV0xKtaoP5MEgpIxIXLCC18a1S irU/v65EH/32/M5F0WCxlVa4GtxlZ5+cx9P8WnCfeJM5MqCkMsggqP3bLQ0qR82M 0ci4CbxzJAiXgddGGL/jM/eNsHqWn1tI2rXyPRZxKowXROOCjQ7geeu/pj40QL9A FKJ4XIit1ev38ESagE4WFl+r0qRf7f1VN625N0LgRbgY1szrNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCW56Q4x0JrFm0BS1gkXwOVUkW0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzlmOThjNTUtMWRhOC0z OGM4LWE5YTEtYjQyNGRkZWZmMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNgpNeZ7SZOhFeOp0zITW8/5EGkTZM+AFEAFFHLpFaNs4Uc7qrtgABS Eh0L0lg0/W+lg7hma0cmQbX5f11UXhEdkB7NMNH2Z5jFCnVLbla0T6uNW7y3e1EX ugFCayKSaADWoRI3DASxbzgDw5sNgjzlf8uT1WBzHcr+noKF0tc7u8jS71mYLoac IKbdirHAEcG+DSFXzoFn0YJZJOBTCNR1eTBbV8g8VBJOxs88jfES9mLejrlJmhgC Kh59bfKI9c5+LII5q+UFCrIMAwkE/EPFgPhqcpFGpcfprxSm09BAAfSDZ9ScJTR5 TYm8KC1jm2mDdZmGaK5PVa4oJTyE0vg= -----END CERTIFICATE-----Generated at Sat Jun 13 23:29:53 2026 by rpki-client