$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a9c5f-15f1-32a6-8a5f-5a2b444592c7.roa File: f39a9c5f-15f1-32a6-8a5f-5a2b444592c7.roa (raw, json) Hash identifier: gWHSHojBo2Qva2/SEVkDIr//t9mEZbZepoaubImvMuE= Subject key identifier: 9F:4F:13:2D:AD:74:70:02:67:28:D1:02:C6:8A:01:F2:3F:75:39:31 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79FCCD76FAFB98788D13B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a9c5f-15f1-32a6-8a5f-5a2b444592c7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.243.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:cc:d7:6f:af:b9:87:88:d1:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a49a35a5-bc7c-4fe1-81e1-17a517b5c8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0f:2c:d9:0a:44:f6:61:46:c1:ff:7b:ea:a0: 4e:25:00:40:0b:73:80:90:63:fc:87:9e:14:1a:9f: 43:0a:71:47:b5:ed:2a:25:38:76:47:52:f6:59:c4: aa:cc:19:6a:50:12:20:0c:5d:e8:9c:48:02:96:e1: bd:6d:42:2f:89:3f:19:e8:59:57:b2:ca:64:7d:cd: 74:07:a9:53:02:dc:c0:d3:1a:80:cd:29:ab:68:b0: 4e:ee:ee:b9:03:ae:9f:29:7b:be:9d:88:fd:32:73: a5:88:de:2f:dc:ce:48:32:3b:88:76:f1:8f:e8:48: b6:e5:8b:1c:09:a4:06:cc:b6:e1:6e:7e:bc:9f:0a: 64:9f:90:a6:5f:1f:d4:01:df:8d:ea:50:d3:75:87: ae:05:51:c9:41:9e:2c:56:41:63:3a:45:a7:b4:66: 0b:1e:b5:53:9d:47:83:dc:e8:75:d9:00:06:43:80: b1:4c:48:be:96:84:45:fa:a0:74:7e:e5:0a:68:ea: d0:43:a3:e2:8d:cc:d6:90:86:de:32:83:a2:1d:a2: 06:91:80:12:e1:f2:de:9e:38:d0:70:82:2e:e8:30: dc:83:b8:ce:6b:f6:08:4d:c0:72:bd:d8:2a:69:28: 09:0c:7e:bf:af:b5:96:3d:5e:f0:b4:eb:1a:49:b7: cb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4F:13:2D:AD:74:70:02:67:28:D1:02:C6:8A:01:F2:3F:75:39:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a9c5f-15f1-32a6-8a5f-5a2b444592c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:49:fb:55:b9:9d:3a:93:09:3e:0b:04:7f:99:ac:15:b0:13: 60:38:4d:45:4b:d3:0f:bc:be:03:d6:e9:b8:21:77:0e:3d:8f: ca:da:ad:23:a8:95:7b:65:ec:07:fe:29:ca:4e:7c:f5:aa:4b: aa:c8:10:90:30:04:a0:cf:2d:bd:0b:1d:37:cf:18:e0:ee:7a: a0:8e:fc:ab:87:58:7e:89:ad:4e:ff:44:f1:7b:88:e1:f0:05: 74:a7:d8:04:53:44:3d:e5:82:09:99:65:1e:ca:8c:41:59:48: 53:0e:e0:b3:dd:60:53:ac:d3:17:bc:f4:d7:c9:8e:9b:18:96: fa:b0:af:76:ae:5a:d5:11:55:ab:44:fc:c6:31:c6:22:d3:92: 77:46:ed:26:66:9c:94:20:61:05:83:19:46:c3:c2:03:8f:25: c7:09:bc:12:2e:2a:25:03:cc:f8:f3:fa:99:f5:94:e1:ce:ef: 05:da:21:d2:69:c4:f1:98:2e:1c:c8:cd:0e:c6:f0:3f:7d:28: de:ad:54:1f:8b:de:90:0a:19:ec:92:6f:87:60:37:48:22:29: c6:1e:98:de:1a:53:da:ac:5c:c0:fb:bf:e1:86:41:2e:65:dd: cd:53:3b:f3:49:c5:47:64:25:d8:05:c6:e4:48:b1:f9:77:f6: 33:d0:0b:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn8zXb6+5h4jRO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTQ5YTM1YTUtYmM3Yy00ZmUxLTgxZTEtMTdhNTE3YjVjOGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw8s2QpE9mFGwf976qBOJQBAC3OAkGP8h54U Gp9DCnFHte0qJTh2R1L2WcSqzBlqUBIgDF3onEgCluG9bUIviT8Z6FlXsspkfc10 B6lTAtzA0xqAzSmraLBO7u65A66fKXu+nYj9MnOliN4v3M5IMjuIdvGP6Ei25Ysc CaQGzLbhbn68nwpkn5CmXx/UAd+N6lDTdYeuBVHJQZ4sVkFjOkWntGYLHrVTnUeD 3Oh12QAGQ4CxTEi+loRF+qB0fuUKaOrQQ6PijczWkIbeMoOiHaIGkYAS4fLenjjQ cIIu6DDcg7jOa/YITcByvdgqaSgJDH6/r7WWPV7wtOsaSbfLcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9PEy2tdHACZyjRAsaKAfI/dTkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjM5YTljNWYtMTVmMS0z MmE2LThhNWYtNWEyYjQ0NDU5MmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPORMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRJ+1W5nTqTCT4LBH+ZrBWwE2A4TUVL0w+8vgPW6bghdw49j8rarSOo lXtl7Af+KcpOfPWqS6rIEJAwBKDPLb0LHTfPGODueqCO/KuHWH6JrU7/RPF7iOHw BXSn2ARTRD3lggmZZR7KjEFZSFMO4LPdYFOs0xe89NfJjpsYlvqwr3auWtURVatE /MYxxiLTkndG7SZmnJQgYQWDGUbDwgOPJccJvBIuKiUDzPjz+pn1lOHO7wXaIdJp xPGYLhzIzQ7G8D99KN6tVB+L3pAKGeySb4dgN0giKcYemN4aU9qsXMD7v+GGQS5l 3c1TO/NJxUdkJdgFxuRIsfl39jPQC40= -----END CERTIFICATE-----Generated at Wed Jul 29 04:15:42 2026 by rpki-client