$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa File: cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa (raw, json) Hash identifier: xHy31r4ZpfwhGD+2WFQUf8hBVQ3Q1oydoKTth456gxs= Subject key identifier: 53:FF:99:6D:C6:EC:06:4A:91:B8:EC:83:76:57:B0:B3:EA:A8:40:C4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E18C37DD9F717A3097A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.242.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:18:c3:7d:d9:f7:17:a3:09:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=01af6bc7-aec6-4f8e-bb37-2e9aca716ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:73:41:a7:3d:7f:88:15:f7:97:76:10:d5:33: 52:18:2c:fc:a8:8d:95:c6:cf:53:ff:b4:96:18:25: 11:78:65:e8:d7:1b:ec:11:f8:88:33:c1:e1:2d:b9: c7:34:e5:72:da:69:7e:28:6c:98:d7:9f:e3:f5:a5: a8:d1:28:e8:db:e7:73:1f:c4:b8:f9:d9:21:25:61: ef:c9:c8:c8:0a:28:80:a6:55:26:aa:bd:32:a9:03: 59:cf:38:1d:6a:c6:3c:53:15:c5:d7:4b:d5:c9:7d: 12:44:8a:c1:9a:e4:c5:b2:55:99:30:f8:1a:42:37: 0c:c4:0f:4d:93:1e:39:88:79:d9:b5:b9:03:b9:6c: 96:56:b3:31:42:a2:aa:ad:52:06:56:20:7d:bf:f5: e4:ea:c3:7a:c6:ce:15:8b:fd:84:d3:da:2b:7a:4f: f8:14:97:b0:e9:74:0e:dc:2e:6b:c2:78:1c:f4:2c: d1:1b:d4:5b:7a:de:cf:28:84:34:3c:05:86:db:3c: b9:0b:9a:50:c2:ad:2b:7b:b7:71:a4:61:c2:da:db: b1:eb:42:49:0d:55:37:e5:fd:fd:d1:78:c9:53:b4: d7:98:72:41:1f:ab:7d:e2:3b:d1:9d:d2:12:1f:2b: 6e:ab:60:77:10:f2:93:86:3b:c5:41:cf:a9:44:c8: 94:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FF:99:6D:C6:EC:06:4A:91:B8:EC:83:76:57:B0:B3:EA:A8:40:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ce:9f:bb:a8:b4:0f:a1:14:e0:c7:05:6b:3a:d2:6b:34:5a: b2:83:eb:8b:b4:e6:2a:c1:36:46:c6:c2:95:b9:56:f2:aa:a8: 10:08:42:7a:fb:a4:ad:ad:8d:18:21:38:4f:93:58:ba:43:20: a3:67:5a:9c:b0:eb:3e:5f:da:84:64:2b:24:72:7c:05:ef:c2: 88:9e:8d:54:45:2a:f5:6d:f0:bc:de:54:5b:70:54:ec:f7:a5: 28:29:b4:d9:31:d1:28:f8:4e:93:00:2c:dc:50:a6:40:6d:b9: 39:29:02:59:f6:10:49:7f:d7:80:dd:6b:30:18:5b:4d:1b:7d: af:34:c7:d7:25:3a:a0:da:16:4f:6a:ab:db:f3:40:85:6e:12: f4:3f:be:67:01:64:81:c1:eb:8b:cc:80:1d:64:81:e3:46:c5: ca:48:a5:7b:22:6e:40:a4:54:1c:c7:0c:5b:ce:fd:24:12:2c: d2:9f:34:34:69:4f:93:1e:80:db:f5:8e:9e:0d:f0:ea:46:1d: 3a:ce:0f:35:e9:61:c6:62:ad:21:8e:c1:a9:02:e0:cf:23:03: 98:ed:45:e0:63:4c:37:5b:d4:a6:9e:e3:b1:4b:21:cb:6e:18: 10:d4:68:17:94:7d:64:33:03:ba:90:87:ea:c8:6e:61:a5:e2: f0:ce:55:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnhjDfdn3F6MJegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDFhZjZiYzctYWVjNi00ZjhlLWJiMzctMmU5YWNhNzE2YWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nNBpz1/iBX3l3YQ1TNSGCz8qI2Vxs9T/7SW GCUReGXo1xvsEfiIM8HhLbnHNOVy2ml+KGyY15/j9aWo0Sjo2+dzH8S4+dkhJWHv ycjICiiAplUmqr0yqQNZzzgdasY8UxXF10vVyX0SRIrBmuTFslWZMPgaQjcMxA9N kx45iHnZtbkDuWyWVrMxQqKqrVIGViB9v/Xk6sN6xs4Vi/2E09orek/4FJew6XQO 3C5rwngc9CzRG9Rbet7PKIQ0PAWG2zy5C5pQwq0re7dxpGHC2tux60JJDVU35f39 0XjJU7TXmHJBH6t94jvRndISHytuq2B3EPKThjvFQc+pRMiUFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFP/mW3G7AZKkbjsg3ZXsLPqqEDEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2ZlYzU4YjQtODE2Ny0z N2UyLWJlZjEtYzdiNDBhZTFlOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPOn7uotA+hFODHBWs60ms0WrKD64u05irBNkbGwpW5VvKqqBAIQnr7 pK2tjRghOE+TWLpDIKNnWpyw6z5f2oRkKyRyfAXvwoiejVRFKvVt8LzeVFtwVOz3 pSgptNkx0Sj4TpMALNxQpkBtuTkpAln2EEl/14DdazAYW00bfa80x9clOqDaFk9q q9vzQIVuEvQ/vmcBZIHB64vMgB1kgeNGxcpIpXsibkCkVBzHDFvO/SQSLNKfNDRp T5MegNv1jp4N8OpGHTrODzXpYcZirSGOwakC4M8jA5jtReBjTDdb1Kae47FLIctu GBDUaBeUfWQzA7qQh+rIbmGl4vDOVco= -----END CERTIFICATE-----Generated at Wed Jul 29 04:15:22 2026 by rpki-client