$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa File: 3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa (raw, json) Hash identifier: R9N7doQYQiSpjXPdZaLi1jeD+bZ+NyNnAmWoD+kK5/8= Subject key identifier: 04:43:51:36:C8:5A:CC:B1:09:F4:F3:E6:19:5F:C6:50:03:26:55:51 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B5C529213DA7ED5ABF188 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 40306 IP address blocks: 72.173.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:5c:52:92:13:da:7e:d5:ab:f1:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=7d7d91b9-06b0-4a85-8bc0-588307c18723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a3:77:a4:06:b6:2e:46:3c:69:56:50:07:e3: 5e:50:2a:be:7e:a4:d7:2d:ec:88:85:46:29:41:be: 68:8c:94:fc:78:a6:35:e6:c3:0e:5b:3c:67:9c:6e: 4a:f5:b1:41:88:54:fc:31:20:fe:34:73:f3:e6:c3: ab:7f:88:be:eb:da:57:53:ef:93:6a:b2:d2:75:60: e1:69:0a:d8:0d:33:e8:f4:2f:55:ec:32:f7:db:5f: 07:c3:17:2e:ae:cc:75:d7:08:84:6d:98:57:e1:3a: bb:c6:71:fb:6f:27:3d:b8:96:59:8e:73:3b:b0:24: a5:74:d1:1e:f8:c7:9d:96:f9:25:8e:a9:65:af:4e: a1:09:06:09:1a:5e:9b:3e:f1:49:2e:3b:4e:96:c2: a2:c0:ce:e7:6e:15:77:fb:07:32:d9:ec:69:eb:7f: 0e:f1:9d:b8:4d:f2:90:55:58:8a:95:84:24:ec:6f: 74:4c:0c:f8:2a:51:2b:ed:cd:8a:bf:21:68:cd:72: 10:ca:73:d7:87:d6:27:2c:f2:8b:cf:d4:a9:bd:33: 29:35:1d:06:66:e1:9d:ed:a3:1a:b6:b1:f8:53:08: f6:bf:47:d4:fc:e2:cd:52:96:c5:94:8b:ab:40:c3: 5c:5b:8f:bb:3b:b9:ae:ba:e5:6b:7b:67:33:f6:0d: 25:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:43:51:36:C8:5A:CC:B1:09:F4:F3:E6:19:5F:C6:50:03:26:55:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:3e:d2:93:a4:5d:51:9f:ba:3a:6b:63:81:d2:95:4f:c1:dd: 8e:24:47:17:5c:ae:15:f4:3f:ee:a2:98:7c:36:34:f9:f0:bb: 09:25:79:2f:4e:23:0d:a2:6e:1e:a5:67:74:5c:9e:b0:ba:c1: 26:8e:29:48:cd:8f:76:2c:67:19:71:77:90:77:07:6b:29:a7: 6b:22:61:b5:0b:1b:06:30:d1:49:38:ab:87:ac:c1:e2:69:71: ab:f0:51:1c:d2:48:87:cf:c1:99:03:a5:63:9a:7e:22:6f:0b: 00:ca:53:52:fa:f8:26:cf:be:46:43:58:fc:d7:57:86:0d:c3: 75:76:90:d9:0f:2c:4c:44:71:5d:e4:13:67:8d:42:a4:23:55: 47:2e:13:0a:ff:89:01:df:7a:88:82:c7:bd:c7:50:6d:be:4a: e6:3c:33:3a:f9:81:4f:0d:e0:9d:ce:56:1b:47:9e:90:a6:6b: 30:f5:83:c2:b4:85:a4:0c:57:11:fb:1f:5d:32:e6:4d:85:1c: 92:50:7f:d9:8e:87:52:74:94:96:eb:a3:46:2d:31:2e:0b:46: fb:16:10:4d:b3:57:8c:bb:3d:4e:e4:33:98:4f:07:82:79:69: f5:2a:e7:d2:a4:77:8b:16:96:f3:d8:3a:be:8c:43:d9:d6:d8: 8e:27:17:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm1xSkhPaftWr8YgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk N2Q3ZDkxYjktMDZiMC00YTg1LThiYzAtNTg4MzA3YzE4NzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKN3pAa2LkY8aVZQB+NeUCq+fqTXLeyIhUYp Qb5ojJT8eKY15sMOWzxnnG5K9bFBiFT8MSD+NHPz5sOrf4i+69pXU++TarLSdWDh aQrYDTPo9C9V7DL3218Hwxcursx11wiEbZhX4Tq7xnH7byc9uJZZjnM7sCSldNEe +Medlvkljqllr06hCQYJGl6bPvFJLjtOlsKiwM7nbhV3+wcy2exp638O8Z24TfKQ VViKlYQk7G90TAz4KlEr7c2KvyFozXIQynPXh9YnLPKLz9SpvTMpNR0GZuGd7aMa trH4Uwj2v0fU/OLNUpbFlIurQMNcW4+7O7muuuVre2cz9g0lMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARDUTbIWsyxCfTz5hlfxlADJlVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2M1ZTUwYzYtMWIyMC0z MzUxLTgwZDgtMjY0YjFlM2Y1NDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADY+0pOkXVGfujprY4HSlU/B3Y4kRxdcrhX0P+6imHw2NPnwuwkleS9O Iw2ibh6lZ3RcnrC6wSaOKUjNj3YsZxlxd5B3B2spp2siYbULGwYw0Uk4q4esweJp cavwURzSSIfPwZkDpWOafiJvCwDKU1L6+CbPvkZDWPzXV4YNw3V2kNkPLExEcV3k E2eNQqQjVUcuEwr/iQHfeoiCx73HUG2+SuY8Mzr5gU8N4J3OVhtHnpCmazD1g8K0 haQMVxH7H10y5k2FHJJQf9mOh1J0lJbro0YtMS4LRvsWEE2zV4y7PU7kM5hPB4J5 afUq59Kkd4sWlvPYOr6MQ9nW2I4nF6g= -----END CERTIFICATE-----Generated at Fri Jun 12 06:12:47 2026 by rpki-client