$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/188f921f-09e0-34fe-8a14-d0112f68652e.roa File: 188f921f-09e0-34fe-8a14-d0112f68652e.roa (raw, json) Hash identifier: bUHadXECk8pEr6g5+brNadOoaoW7Z35UPyoXW4jJH0Y= Subject key identifier: 24:D6:FF:33:75:05:11:D1:A8:2D:10:7C:EF:52:E4:34:DF:EC:B9:3B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059BE60CDC422E49CC807280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/188f921f-09e0-34fe-8a14-d0112f68652e.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 72.173.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:e6:0c:dc:42:2e:49:cc:80:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=5527ca08-b92b-41d6-b704-bfe307bcc78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:aa:c3:7b:5d:1c:49:c7:b6:ff:55:4e:ab: 9c:04:c9:a5:46:b4:57:9a:e9:ee:a8:c4:56:30:42: 92:a2:0b:36:01:aa:9d:cf:a6:e8:e7:db:54:4e:e8: 06:0b:ff:30:41:fa:e3:13:e9:6e:ed:8a:93:20:c0: 37:08:6a:34:f7:9d:5c:61:d7:66:ee:c7:2b:60:2c: 8c:6e:47:17:3a:80:f0:77:3d:58:08:00:71:d3:c6: 1c:5a:0d:78:6f:ac:85:2c:27:34:06:95:80:15:fb: bf:d6:ad:b2:d4:ad:28:9e:94:cb:b6:8d:53:58:50: 05:aa:1f:90:f7:5e:3e:f2:e7:e7:b4:a5:74:02:f6: 0d:e7:06:d4:21:41:d2:44:7d:81:a6:4d:c3:dc:35: fb:32:f6:5b:8b:22:c9:0d:16:53:65:9d:39:cb:5d: 92:04:e0:09:c3:64:c8:2e:0d:46:8e:a6:31:e9:16: 95:6d:ef:51:8b:9f:2b:fb:18:60:5f:2a:3a:44:ab: 9f:ca:77:8f:ae:64:5d:17:91:36:79:98:8d:e6:e3: bc:42:b1:26:16:2b:b1:e8:35:c7:6c:9b:47:e1:b6: cd:3e:3c:bb:98:a6:e7:14:e2:22:d5:33:0e:66:db: 89:ee:bf:52:ea:6c:b7:a8:84:a7:00:77:8a:cb:2b: 88:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D6:FF:33:75:05:11:D1:A8:2D:10:7C:EF:52:E4:34:DF:EC:B9:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/188f921f-09e0-34fe-8a14-d0112f68652e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:a6:91:d7:73:f4:ab:20:cb:fa:74:e5:c0:f3:fe:4e:8c:80: 12:de:6b:fc:54:2f:a8:bb:6c:a6:a6:0d:ea:a9:7d:78:4d:32: 79:4e:a8:c5:50:ba:bd:e1:58:c2:eb:30:af:bb:65:ec:5c:52: 3c:ff:81:fc:81:3c:5c:2d:54:c3:62:4d:03:4c:09:d8:25:51: 05:be:30:dc:39:49:c9:c7:26:c5:94:3b:5d:dc:ce:e4:db:dd: 6c:69:99:78:97:75:6d:1e:24:d3:ec:6a:99:a1:ef:b5:94:99: aa:87:15:40:31:52:20:f4:41:a9:0a:d6:76:7a:57:30:8d:47: 3b:e2:6e:95:38:e7:a0:20:0b:9b:52:af:64:65:6e:a3:7d:96: 60:89:3d:a0:19:52:66:ed:e6:46:b4:75:fc:ef:f9:00:1c:78: a3:cc:51:3b:b5:4d:a1:5c:ed:e7:c2:30:ae:bf:14:fa:49:bb: 23:a5:80:54:28:94:dc:7a:be:6c:d5:1b:00:44:5e:c3:b9:3e: 12:90:88:4e:ee:91:22:12:20:73:84:3b:5e:cd:44:65:91:96: 65:79:14:b5:1c:df:4c:d9:d1:4c:98:72:76:4e:22:ce:fd:3b: 27:7d:ac:b7:c7:d3:08:a3:a2:ab:fe:47:5d:84:af:12:9f:16: 3b:48:99:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm+YM3EIuScyAcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NTUyN2NhMDgtYjkyYi00MWQ2LWI3MDQtYmZlMzA3YmNjNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU2qw3tdHEnHtv9VTqucBMmlRrRXmunuqMRW MEKSogs2Aaqdz6bo59tUTugGC/8wQfrjE+lu7YqTIMA3CGo0951cYddm7scrYCyM bkcXOoDwdz1YCABx08YcWg14b6yFLCc0BpWAFfu/1q2y1K0onpTLto1TWFAFqh+Q 914+8ufntKV0AvYN5wbUIUHSRH2Bpk3D3DX7MvZbiyLJDRZTZZ05y12SBOAJw2TI Lg1GjqYx6RaVbe9Ri58r+xhgXyo6RKufynePrmRdF5E2eZiN5uO8QrEmFiux6DXH bJtH4bbNPjy7mKbnFOIi1TMOZtuJ7r9S6my3qISnAHeKyyuIVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTW/zN1BRHRqC0QfO9S5DTf7Lk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTg4ZjkyMWYtMDllMC0z NGZlLThhMTQtZDAxMTJmNjg2NTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANmmkddz9Ksgy/p05cDz/k6MgBLea/xUL6i7bKamDeqpfXhNMnlOqMVQ ur3hWMLrMK+7ZexcUjz/gfyBPFwtVMNiTQNMCdglUQW+MNw5ScnHJsWUO13czuTb 3WxpmXiXdW0eJNPsapmh77WUmaqHFUAxUiD0QakK1nZ6VzCNRzvibpU456AgC5tS r2RlbqN9lmCJPaAZUmbt5ka0dfzv+QAceKPMUTu1TaFc7efCMK6/FPpJuyOlgFQo lNx6vmzVGwBEXsO5PhKQiE7ukSISIHOEO17NRGWRlmV5FLUc30zZ0UyYcnZOIs79 Oyd9rLfH0wijoqv+R12ErxKfFjtImb0= -----END CERTIFICATE-----Generated at Thu Jun 11 21:23:56 2026 by rpki-client