$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41af6d99-9225-3ad6-9547-1b4352413597.roa File: 41af6d99-9225-3ad6-9547-1b4352413597.roa (raw, json) Hash identifier: OFUgryrCzOLjuOw20Xhrj0jv7oMHVTsihIa5Cwf0WGk= Subject key identifier: 00:67:D1:84:3D:50:84:FD:E2:DC:1C:19:C2:2C:D1:FC:A2:AA:D0:C3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B9444E6867B3A6294A4C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41af6d99-9225-3ad6-9547-1b4352413597.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.242.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:94:44:e6:86:7b:3a:62:94:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=928892c4-e34e-4b44-b0ab-a66016e6c496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:65:b1:0e:ba:2c:8c:76:11:04:4d:e3:8f:64: c9:93:e4:2a:6d:21:41:06:27:a2:7b:c9:48:33:63: bd:a1:c3:09:99:7d:70:75:24:ab:9e:6b:6c:d1:27: fe:58:18:ea:7d:3c:c5:6b:e0:b0:a4:cc:cf:b2:c7: 68:2a:1a:6a:56:73:90:f7:87:8e:af:9a:ce:55:5e: b1:bf:24:ac:a1:ab:c5:6e:9e:72:e5:96:8d:fa:7b: 17:0c:d9:9f:66:30:a7:42:b0:32:4e:10:e2:99:c6: ee:83:86:10:9b:d4:32:2b:9f:2a:8f:30:e7:67:b5: 57:dd:2a:10:10:37:d2:4c:f3:4b:0e:b2:5d:49:54: 31:28:41:1d:63:df:ce:ca:cf:d7:91:8f:41:06:65: b9:73:68:d1:1c:0e:62:c4:40:f6:fe:c8:38:cc:81: 3d:84:ed:84:c1:bc:c9:6e:9b:e0:58:6e:27:0c:eb: 2c:b8:38:d1:c7:04:b6:7d:6f:73:a9:9e:1c:50:1d: 0e:44:ce:c5:a7:45:54:01:d9:f5:e1:a7:68:88:4b: 6c:73:6c:45:c6:3e:9d:af:a4:38:07:56:f9:5b:f1: 7d:fa:1d:fa:66:6c:33:72:24:6c:94:10:32:31:6b: b5:8b:ca:78:2f:5b:0e:07:5e:cd:88:38:3e:58:c3: 2b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:67:D1:84:3D:50:84:FD:E2:DC:1C:19:C2:2C:D1:FC:A2:AA:D0:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41af6d99-9225-3ad6-9547-1b4352413597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:1a:69:42:2e:34:e9:93:ec:12:81:47:45:13:f4:06:05:94: d1:dc:c1:7e:6f:9b:87:f2:84:83:13:3d:a5:e4:d5:b7:d9:e4: 25:0e:5a:67:65:15:b1:7b:68:77:e9:79:3d:fe:29:06:92:0b: 28:23:96:de:fe:99:2a:5f:b0:29:03:e8:42:00:93:ff:44:73: 57:50:5b:33:7c:6c:fc:5e:a7:72:7c:e9:fa:61:a6:a8:a3:c2: 85:40:96:31:d6:6d:8f:8a:b0:12:00:b6:57:b6:78:25:eb:d6: 3e:89:b4:50:25:31:9e:5d:c1:fa:fd:24:d0:c0:29:67:f3:d0: 0d:e1:49:e6:9c:a4:a4:28:5f:88:ae:45:a9:5c:73:e6:3d:48: 02:fb:a7:bc:4f:b8:13:62:83:11:2a:5c:f0:29:12:1a:0f:03: 73:d0:39:e9:38:a6:1b:bf:fe:15:9b:cc:b8:09:01:6c:ad:30: 07:2a:ea:97:c0:c0:38:cc:95:8c:8f:29:1a:5a:e5:da:f1:69: 13:ee:96:b6:26:f5:81:9d:8a:00:ff:bc:45:a8:2b:6f:1c:0c: 24:86:15:28:38:1b:e8:58:e3:0f:ac:de:7a:3a:6a:63:5c:aa: 66:52:73:66:09:d7:82:3d:85:b4:3a:d2:c2:a7:ba:2a:76:b0: 27:03:c0:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm5RE5oZ7OmKUpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk OTI4ODkyYzQtZTM0ZS00YjQ0LWIwYWItYTY2MDE2ZTZjNDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWWxDrosjHYRBE3jj2TJk+QqbSFBBieie8lI M2O9ocMJmX1wdSSrnmts0Sf+WBjqfTzFa+CwpMzPssdoKhpqVnOQ94eOr5rOVV6x vySsoavFbp5y5ZaN+nsXDNmfZjCnQrAyThDimcbug4YQm9QyK58qjzDnZ7VX3SoQ EDfSTPNLDrJdSVQxKEEdY9/Oys/XkY9BBmW5c2jRHA5ixED2/sg4zIE9hO2EwbzJ bpvgWG4nDOssuDjRxwS2fW9zqZ4cUB0ORM7Fp0VUAdn14adoiEtsc2xFxj6dr6Q4 B1b5W/F9+h36ZmwzciRslBAyMWu1i8p4L1sOB17NiDg+WMMrSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABn0YQ9UIT94twcGcIs0fyiqtDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDFhZjZkOTktOTIyNS0z YWQ2LTk1NDctMWI0MzUyNDEzNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoaaUIuNOmT7BKBR0UT9AYFlNHcwX5vm4fyhIMTPaXk1bfZ5CUOWmdl FbF7aHfpeT3+KQaSCygjlt7+mSpfsCkD6EIAk/9Ec1dQWzN8bPxep3J86fphpqij woVAljHWbY+KsBIAtle2eCXr1j6JtFAlMZ5dwfr9JNDAKWfz0A3hSeacpKQoX4iu Ralcc+Y9SAL7p7xPuBNigxEqXPApEhoPA3PQOek4phu//hWbzLgJAWytMAcq6pfA wDjMlYyPKRpa5drxaRPulrYm9YGdigD/vEWoK28cDCSGFSg4G+hY4w+s3no6amNc qmZSc2YJ14I9hbQ60sKnuip2sCcDwHg= -----END CERTIFICATE-----Generated at Thu Jun 11 21:27:49 2026 by rpki-client