$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa3fec4a-3b5b-3c46-a316-b2e4d06006c8.roa File: fa3fec4a-3b5b-3c46-a316-b2e4d06006c8.roa (raw, json) Hash identifier: kCR+1g5kmFtVBG9/kGBLx5ozVuCjEMSE8rey5mxiIs0= Subject key identifier: 1A:B6:AC:AB:99:54:B7:26:E0:9C:DE:ED:13:CD:B5:E3:F2:D0:E1:79 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059BE5889240D9170FDD7200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa3fec4a-3b5b-3c46-a316-b2e4d06006c8.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 72.173.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:e5:88:92:40:d9:17:0f:dd:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=d2fb99e6-d839-4203-a1a3-e3cebd8b822d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:60:e1:59:6d:27:05:7d:af:24:9a:da:d0:83: 81:00:ba:39:44:49:76:ee:8c:a3:0d:73:49:e0:c8: bd:f2:ec:61:72:26:ee:42:89:d8:c2:12:6e:aa:4c: cc:b7:e2:d1:a6:ab:01:eb:4f:7a:1c:af:21:da:92: 25:0e:20:9a:af:44:65:1b:0e:09:52:6f:c6:81:ac: 22:7b:a6:27:fe:67:32:65:f0:5b:4c:de:17:79:d3: e4:8b:32:29:82:f8:1e:9d:94:7f:23:c5:09:3b:d9: 94:e9:fa:49:f4:d8:86:79:87:20:d8:f6:73:c8:28: b6:4b:89:a3:29:0c:09:1d:7c:11:50:26:70:df:29: 09:22:80:50:c3:a0:58:78:98:a3:d6:f8:03:6e:5e: 52:e5:6a:ca:d7:d7:b3:51:1f:1d:92:0a:aa:f4:20: 39:15:32:f7:48:c1:23:1c:f3:50:2e:57:76:a6:0b: 91:8f:6d:7f:4d:4d:9c:00:c8:e3:6a:6d:03:ba:95: ac:cc:96:d5:54:a9:24:d3:c4:fd:d4:04:68:43:8b: 6b:7a:af:0e:16:fd:92:71:c2:33:d3:ec:dc:52:db: 2d:d6:ea:bb:1d:d3:09:23:71:20:3f:5e:58:f8:dc: c8:cf:28:0c:ec:52:9b:47:f0:f5:ea:67:3a:4f:c2: fe:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B6:AC:AB:99:54:B7:26:E0:9C:DE:ED:13:CD:B5:E3:F2:D0:E1:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa3fec4a-3b5b-3c46-a316-b2e4d06006c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:4a:32:34:ea:aa:c6:10:aa:b4:35:83:e2:9f:7a:38:33:cb: aa:32:52:d5:04:3b:a9:83:cd:6a:9b:9f:6e:ac:ad:a3:92:01: f1:79:b8:d3:a2:d8:06:15:c7:b2:09:85:a7:cc:8f:0a:df:e7: f2:2d:c3:04:80:8a:c5:b1:30:f0:b4:d2:77:4f:5a:1c:3d:83: 24:14:a8:84:0c:16:79:95:83:9d:12:eb:aa:1f:f9:19:22:42: 86:3a:04:ce:fd:4a:94:7e:22:87:84:0c:42:21:19:38:8f:a5: f3:f8:f3:f2:f3:58:1a:a1:71:29:f3:53:ce:07:fb:d8:1a:53: 7a:e8:9e:71:cb:00:17:fa:cb:2e:c7:7f:2f:d1:b9:3a:40:47: 7e:4c:4b:c0:88:32:9e:27:ba:82:c2:3f:cd:82:b8:e2:25:a7: 7b:d2:ed:b3:b1:d0:00:ab:7f:c0:7d:d5:e7:76:d8:2e:02:d1: 96:98:d2:67:8b:6c:90:67:42:25:fe:2d:b5:09:a1:85:47:52: f3:71:a2:85:c9:58:8e:9f:ce:a0:9b:9d:f7:45:e6:f8:3b:dc: e2:a2:bf:3a:58:0b:7f:9d:f8:f0:73:69:36:26:f0:1a:85:55: a5:8f:26:c8:23:c6:bf:24:47:f7:68:b5:5f:3d:01:11:a2:1f: 0a:ef:40:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm+WIkkDZFw/dcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZDJmYjk5ZTYtZDgzOS00MjAzLWExYTMtZTNjZWJkOGI4MjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGDhWW0nBX2vJJra0IOBALo5REl27oyjDXNJ 4Mi98uxhcibuQonYwhJuqkzMt+LRpqsB6096HK8h2pIlDiCar0RlGw4JUm/Ggawi e6Yn/mcyZfBbTN4XedPkizIpgvgenZR/I8UJO9mU6fpJ9NiGeYcg2PZzyCi2S4mj KQwJHXwRUCZw3ykJIoBQw6BYeJij1vgDbl5S5WrK19ezUR8dkgqq9CA5FTL3SMEj HPNQLld2pguRj21/TU2cAMjjam0DupWszJbVVKkk08T91ARoQ4treq8OFv2SccIz 0+zcUtst1uq7HdMJI3EgP15Y+NzIzygM7FKbR/D16mc6T8L+QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBq2rKuZVLcm4Jze7RPNtePy0OF5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmEzZmVjNGEtM2I1Yi0z YzQ2LWEzMTYtYjJlNGQwNjAwNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNKMjTqqsYQqrQ1g+Kfejgzy6oyUtUEO6mDzWqbn26sraOSAfF5uNOi 2AYVx7IJhafMjwrf5/ItwwSAisWxMPC00ndPWhw9gyQUqIQMFnmVg50S66of+Rki QoY6BM79SpR+IoeEDEIhGTiPpfP48/LzWBqhcSnzU84H+9gaU3ronnHLABf6yy7H fy/RuTpAR35MS8CIMp4nuoLCP82CuOIlp3vS7bOx0ACrf8B91ed22C4C0ZaY0meL bJBnQiX+LbUJoYVHUvNxooXJWI6fzqCbnfdF5vg73OKivzpYC3+d+PBzaTYm8BqF VaWPJsgjxr8kR/dotV89ARGiHwrvQLU= -----END CERTIFICATE-----Generated at Sat Jun 13 19:44:54 2026 by rpki-client