$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa File: d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa (raw, json) Hash identifier: mF2LE95D03jyuQmE7hAaCEWrkCvvjO/JIS5F6sG2mHs= Subject key identifier: 58:D2:AA:EA:A7:4B:8E:8E:C4:8F:0B:11:6B:2D:A7:7E:D7:04:7D:5D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B6B6201E7F41C354C2400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 72.173.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:6b:62:01:e7:f4:1c:35:4c:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=a3d94ae3-6bad-4af8-a928-ef76c5e86873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:97:2e:cf:4b:9a:d8:f7:32:50:b8:3f:9e:c8: ea:41:11:d6:8d:49:56:7f:73:d3:bf:1b:c7:9f:45: 34:13:cb:90:17:b4:c9:57:0a:13:ff:a7:47:78:4e: d5:f9:d1:27:c0:de:2e:dd:1b:78:13:55:f9:eb:46: 19:ee:bb:92:8d:a7:45:ad:62:fb:41:09:8e:82:4c: e2:33:47:60:f5:36:34:cb:bf:eb:f9:d7:cb:f8:d7: c1:a7:f1:f0:18:3d:05:8f:9e:9d:e9:6a:a4:f7:05: 5f:29:25:68:cd:49:9a:8e:08:64:e1:86:24:1a:7e: ee:d5:d3:d5:72:dd:1a:ce:9c:13:5b:4d:7c:c6:20: 0d:72:1c:52:52:f1:2c:ef:a2:ad:9d:ce:fb:8d:4d: de:79:8b:f2:44:f4:c3:e0:47:68:57:17:79:6d:47: d6:ec:25:70:3d:8a:35:7d:23:02:c9:c3:cd:9f:98: e7:f5:6a:ae:5c:e8:aa:c9:df:be:30:f8:2e:27:7a: 6d:a6:da:9b:f2:68:dd:f1:2b:07:03:33:d7:a6:66: 19:11:26:20:ec:aa:94:fc:99:54:f1:b2:6e:2f:bc: 26:e2:3a:a6:99:9f:7f:80:71:a2:6b:c1:3c:c9:87: 6f:51:66:88:34:be:8b:50:98:0a:ec:e5:7c:2c:5d: af:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D2:AA:EA:A7:4B:8E:8E:C4:8F:0B:11:6B:2D:A7:7E:D7:04:7D:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:1d:4c:66:cf:68:cc:d2:21:9c:87:12:14:7d:3a:52:fe:df: 4d:00:b0:d1:83:e8:fa:ba:12:2b:bf:51:f4:92:73:1d:4e:21: 48:42:61:3a:3f:26:22:08:19:b6:f6:e9:4f:bb:f4:b5:91:26: 1c:d1:f0:db:6b:56:e5:2d:c1:62:e3:25:a3:fa:31:a7:70:64: 7d:d9:f3:ac:18:c9:0f:24:49:48:68:b4:77:db:78:87:43:ac: 13:76:18:1f:28:82:49:34:f2:2a:87:5f:e8:8d:2e:e3:ea:47: 5c:3d:5b:a2:82:60:ee:75:c3:68:34:19:b8:82:5b:64:60:8b: 6c:bb:81:c8:dd:45:0f:0e:b4:7f:ea:87:d7:fa:04:ac:cd:b6: fc:8b:dd:8f:63:86:b0:aa:e2:6c:b1:da:c6:33:eb:ef:92:29: a8:60:8a:bb:2e:24:d2:86:b5:cc:07:db:23:38:0e:b8:4d:61: 87:f0:a1:39:f0:51:55:37:8b:02:52:32:57:c3:bb:f0:87:f0: d6:c0:58:51:ca:2e:f9:de:20:25:68:61:04:83:3c:25:eb:59: fb:c1:44:c8:ab:b6:ce:a9:bc:aa:c1:ae:ab:03:5d:96:e9:db: c2:26:bf:b2:38:dd:f3:0f:17:e7:7d:5a:38:8a:55:6d:7c:79: de:84:36:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm2tiAef0HDVMJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YTNkOTRhZTMtNmJhZC00YWY4LWE5MjgtZWY3NmM1ZTg2ODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35cuz0ua2PcyULg/nsjqQRHWjUlWf3PTvxvH n0U0E8uQF7TJVwoT/6dHeE7V+dEnwN4u3Rt4E1X560YZ7ruSjadFrWL7QQmOgkzi M0dg9TY0y7/r+dfL+NfBp/HwGD0Fj56d6Wqk9wVfKSVozUmajghk4YYkGn7u1dPV ct0azpwTW018xiANchxSUvEs76Ktnc77jU3eeYvyRPTD4EdoVxd5bUfW7CVwPYo1 fSMCycPNn5jn9WquXOiqyd++MPguJ3ptptqb8mjd8SsHAzPXpmYZESYg7KqU/JlU 8bJuL7wm4jqmmZ9/gHGia8E8yYdvUWaINL6LUJgK7OV8LF2vyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjSquqnS46OxI8LEWstp37XBH1dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDNmY2JkZGMtYmY5ZC0z MjBmLTlkNjUtOWExZWMwNjBlZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK28MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMUdTGbPaMzSIZyHEhR9OlL+300AsNGD6Pq6Eiu/UfSScx1OIUhCYTo/ JiIIGbb26U+79LWRJhzR8NtrVuUtwWLjJaP6MadwZH3Z86wYyQ8kSUhotHfbeIdD rBN2GB8ogkk08iqHX+iNLuPqR1w9W6KCYO51w2g0GbiCW2Rgi2y7gcjdRQ8OtH/q h9f6BKzNtvyL3Y9jhrCq4myx2sYz6++SKahgirsuJNKGtcwH2yM4DrhNYYfwoTnw UVU3iwJSMlfDu/CH8NbAWFHKLvneICVoYQSDPCXrWfvBRMirts6pvKrBrqsDXZbp 28Imv7I43fMPF+d9WjiKVW18ed6ENss= -----END CERTIFICATE-----Generated at Sat Jun 13 16:19:25 2026 by rpki-client