$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b94eb6e-546d-3206-8024-f1e432ee56f0.roa File: 0b94eb6e-546d-3206-8024-f1e432ee56f0.roa (raw, json) Hash identifier: Lri98+7NfMSwYq4gPDd63CKcE816hmrqxFvoZ5Krc/g= Subject key identifier: B8:FD:9E:4F:7A:E6:3E:18:AC:34:C4:60:00:89:9A:91:38:C7:65:D5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C1A4B92E5442A49D28200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b94eb6e-546d-3206-8024-f1e432ee56f0.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.243.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:1a:4b:92:e5:44:2a:49:d2:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=60f107e5-e91c-40bc-afcb-198c94f02d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d7:ad:d3:58:ab:67:89:1b:3e:3f:d6:8f:42: 16:53:66:de:98:9c:e4:23:6f:cb:99:37:bf:93:01: 10:a0:f1:e2:d3:4b:70:d1:cc:75:ed:74:45:53:55: 69:a8:b2:12:49:88:2e:90:29:38:c9:ea:54:be:9b: 61:7c:58:57:ea:9e:d0:1e:87:4c:fc:c7:0d:7d:94: d9:c0:30:3d:10:99:e9:13:55:65:e4:19:93:c6:bd: 71:2b:0c:11:51:53:ac:81:a0:45:fd:09:d5:c0:c1: aa:00:aa:4a:cc:f6:16:a1:a9:1b:19:a9:d9:3e:7f: 86:b1:69:94:7c:02:ed:e2:85:32:7e:dd:1f:f3:5c: 40:a2:74:04:8e:11:35:d3:b8:07:fd:18:d1:cb:36: 77:a0:cb:b8:f8:22:91:69:57:5a:ae:1b:7f:d8:c6: d0:ec:31:56:2d:8f:a2:ae:a5:a6:33:e1:2c:64:22: 08:93:15:c0:0f:de:1a:ed:ea:27:e1:17:4d:9e:83: 46:93:2b:12:64:17:62:7b:4c:37:5a:97:d8:cb:b7: d1:6f:1b:bb:e7:8e:c4:df:57:3f:c8:b6:d2:95:52: a2:17:72:fd:7e:8c:be:b5:00:49:39:68:79:b0:53: d5:33:d3:0d:9f:ff:cb:29:c9:96:25:53:b8:0f:f2: a3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FD:9E:4F:7A:E6:3E:18:AC:34:C4:60:00:89:9A:91:38:C7:65:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b94eb6e-546d-3206-8024-f1e432ee56f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:15:37:fd:07:af:e5:19:0f:ce:dd:dd:04:27:b5:fa:9a:c0: 7d:62:f2:eb:17:47:54:1e:d9:b6:a4:32:69:12:3c:7f:bb:b0: 17:0a:3e:a0:05:77:42:ba:41:87:d1:60:ff:b8:04:22:12:d8: 95:6f:50:01:ed:61:7b:3e:0e:fc:85:16:1f:2d:7b:18:4b:28: 99:58:88:54:33:46:5e:96:60:31:10:c3:e5:4a:76:d8:d2:0c: 0c:e6:ea:7c:db:f5:36:79:85:9b:c1:25:38:44:e4:d5:84:93: 85:99:c3:e2:4f:47:b7:ef:a9:c5:bf:b9:fb:d8:eb:f7:dd:40: 6d:42:88:f3:8d:36:c8:ce:f3:aa:fd:b2:76:17:3f:2f:48:cc: d7:95:d3:37:89:94:72:ff:0e:06:f5:44:29:0a:b7:4b:ed:9b: bc:e3:39:52:d2:d1:3d:f3:d2:31:bf:c6:4e:ce:62:e4:78:73: 8c:fc:5f:55:ef:bd:e1:88:ff:b0:77:be:ce:1b:66:b7:f6:c2: 57:82:1e:18:67:2a:02:41:a2:dd:2d:90:d5:fc:4b:9d:8a:93: 07:9d:28:3b:f9:21:f1:35:d7:0e:a7:3a:a4:38:27:78:18:e0: 9e:60:2b:b3:9f:42:4d:dc:67:46:48:ea:d8:18:17:77:7d:58: 3a:6d:4b:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnBpLkuVEKknSggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NjBmMTA3ZTUtZTkxYy00MGJjLWFmY2ItMTk4Yzk0ZjAyZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9et01irZ4kbPj/Wj0IWU2bemJzkI2/LmTe/ kwEQoPHi00tw0cx17XRFU1VpqLISSYgukCk4yepUvpthfFhX6p7QHodM/McNfZTZ wDA9EJnpE1Vl5BmTxr1xKwwRUVOsgaBF/QnVwMGqAKpKzPYWoakbGanZPn+GsWmU fALt4oUyft0f81xAonQEjhE107gH/RjRyzZ3oMu4+CKRaVdarht/2MbQ7DFWLY+i rqWmM+EsZCIIkxXAD94a7eon4RdNnoNGkysSZBdie0w3WpfYy7fRbxu7547E31c/ yLbSlVKiF3L9foy+tQBJOWh5sFPVM9MNn//LKcmWJVO4D/KjMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLj9nk965j4YrDTEYACJmpE4x2XVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGI5NGViNmUtNTQ2ZC0z MjA2LTgwMjQtZjFlNDMyZWU1NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgVN/0Hr+UZD87d3QQntfqawH1i8usXR1Qe2bakMmkSPH+7sBcKPqAF d0K6QYfRYP+4BCIS2JVvUAHtYXs+DvyFFh8texhLKJlYiFQzRl6WYDEQw+VKdtjS DAzm6nzb9TZ5hZvBJThE5NWEk4WZw+JPR7fvqcW/ufvY6/fdQG1CiPONNsjO86r9 snYXPy9IzNeV0zeJlHL/Dgb1RCkKt0vtm7zjOVLS0T3z0jG/xk7OYuR4c4z8X1Xv veGI/7B3vs4bZrf2wleCHhhnKgJBot0tkNX8S52KkwedKDv5IfE11w6nOqQ4J3gY 4J5gK7OfQk3cZ0ZI6tgYF3d9WDptS9M= -----END CERTIFICATE-----Generated at Thu Jun 11 21:26:26 2026 by rpki-client