$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/168db569-3818-3090-8b25-7a54194af43a.roa File: 168db569-3818-3090-8b25-7a54194af43a.roa (raw, json) Hash identifier: Gfcj8n60VYOyQvTJxXi9wcbRCw+w6rvwzAqCSt4KwFQ= Subject key identifier: 70:45:7E:2F:F2:97:6D:4A:F5:99:4A:A5:AC:6C:E6:1C:E4:6B:91:E9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C19A2F964055378215980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/168db569-3818-3090-8b25-7a54194af43a.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.242.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:19:a2:f9:64:05:53:78:21:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=020f7291-c69a-4752-bfdf-6d8fb8de8767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:33:dc:5f:a6:ef:2b:ac:64:61:7c:93:f6:0c: 46:d3:d3:9d:05:fd:23:09:7a:f8:70:71:3b:73:b9: ff:94:9c:4c:cd:50:14:e1:a5:23:1c:f6:78:4d:a7: 37:56:4a:3a:6d:f9:b0:fd:2e:b9:ac:fa:9f:99:3a: 6d:dd:9b:e5:55:b7:c5:62:c9:0b:12:28:84:17:13: ad:32:20:d5:a7:25:f0:f6:bf:d8:9b:7c:e9:75:de: 15:bc:9c:29:bd:2d:15:05:7b:7b:64:82:08:30:65: e1:8a:da:5c:43:90:1a:6d:77:fe:99:38:f3:25:0d: 99:9b:74:7f:10:ab:10:43:9b:c0:56:d7:75:9c:4e: f8:d2:50:c7:2d:43:93:da:e8:a4:09:77:1e:f5:8d: 3c:68:03:9c:3a:40:05:b9:e1:c5:9c:56:77:53:e7: 34:be:a0:28:5d:fb:4d:cd:74:a5:ab:14:d5:6f:b9: b7:3f:74:fa:46:f3:52:d0:99:bd:ee:42:b5:b3:e8: 58:46:61:08:fb:ad:a6:f3:7f:3e:44:1b:46:51:5a: cc:f0:16:f7:9a:e7:d2:b1:c9:04:9a:7b:c0:e0:64: 2c:55:dd:56:da:66:82:85:2b:81:99:02:c7:7a:a8: 69:f1:70:04:7f:b7:d1:7f:49:34:c1:37:ed:f4:05: 48:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:45:7E:2F:F2:97:6D:4A:F5:99:4A:A5:AC:6C:E6:1C:E4:6B:91:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/168db569-3818-3090-8b25-7a54194af43a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:22:3e:cb:ac:c9:fc:31:76:d5:cd:c8:d0:70:4b:50:a1:22: cd:12:22:99:7e:5c:53:9a:24:b2:f8:0d:51:8d:3d:5a:44:17: 7d:43:47:e7:2a:f4:76:02:91:0e:5b:c7:ba:29:93:c0:e6:e2: 55:c7:a0:cd:bf:89:56:5d:d6:9a:cd:9e:27:99:ea:92:69:42: 15:98:f6:35:ee:b1:5a:63:be:91:ee:67:dd:28:6f:54:50:8b: 5b:9b:0c:76:c5:17:26:44:d5:51:be:61:a3:e5:f4:42:63:46: 74:d0:b1:c7:6d:eb:23:f1:e0:02:a1:a2:61:16:23:f3:74:0d: ed:a5:1f:92:1b:56:dc:df:f8:48:ca:50:05:f7:05:a6:b4:e2: 1c:02:f1:57:74:e4:46:17:ab:58:00:da:97:23:98:90:f5:7a: 41:6e:9e:f9:f7:27:67:38:2b:44:94:0a:4c:ee:20:06:d2:15: 13:5b:38:39:96:32:95:43:79:28:b2:ae:fc:75:7d:be:2a:16: 3a:77:a1:b4:18:19:56:9f:7d:91:8c:24:e2:bf:1c:93:7c:2e: a5:84:c5:3e:96:f9:e4:55:55:04:4d:dc:44:6c:3c:26:4c:78: 8d:5b:9b:84:6f:b7:b5:2e:5d:f4:28:b2:a8:be:b2:54:8b:40: 95:f6:29:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnBmi+WQFU3ghWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MDIwZjcyOTEtYzY5YS00NzUyLWJmZGYtNmQ4ZmI4ZGU4NzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjPcX6bvK6xkYXyT9gxG09OdBf0jCXr4cHE7 c7n/lJxMzVAU4aUjHPZ4Tac3Vko6bfmw/S65rPqfmTpt3ZvlVbfFYskLEiiEFxOt MiDVpyXw9r/Ym3zpdd4VvJwpvS0VBXt7ZIIIMGXhitpcQ5AabXf+mTjzJQ2Zm3R/ EKsQQ5vAVtd1nE740lDHLUOT2uikCXce9Y08aAOcOkAFueHFnFZ3U+c0vqAoXftN zXSlqxTVb7m3P3T6RvNS0Jm97kK1s+hYRmEI+62m838+RBtGUVrM8Bb3mufSsckE mnvA4GQsVd1W2maChSuBmQLHeqhp8XAEf7fRf0k0wTft9AVISwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBFfi/yl21K9ZlKpaxs5hzka5HpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTY4ZGI1NjktMzgxOC0z MDkwLThiMjUtN2E1NDE5NGFmNDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANYiPsusyfwxdtXNyNBwS1ChIs0SIpl+XFOaJLL4DVGNPVpEF31DR+cq 9HYCkQ5bx7opk8Dm4lXHoM2/iVZd1prNnieZ6pJpQhWY9jXusVpjvpHuZ90ob1RQ i1ubDHbFFyZE1VG+YaPl9EJjRnTQscdt6yPx4AKhomEWI/N0De2lH5IbVtzf+EjK UAX3Baa04hwC8Vd05EYXq1gA2pcjmJD1ekFunvn3J2c4K0SUCkzuIAbSFRNbODmW MpVDeSiyrvx1fb4qFjp3obQYGVaffZGMJOK/HJN8LqWExT6W+eRVVQRN3ERsPCZM eI1bm4Rvt7UuXfQosqi+slSLQJX2Kb4= -----END CERTIFICATE-----Generated at Thu Jun 11 21:27:34 2026 by rpki-client