$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa File: 5a906593-7518-3717-93a1-36f415626e0f.roa (raw, json) Hash identifier: kqGQF53O4pMEhFwFHnLxOgvSHqryoZ1T4AsiRlw6wPo= Subject key identifier: 92:DD:06:2D:02:64:FB:26:55:54:D6:4E:E8:66:BD:20:97:78:B8:97 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C1E33363A67BFE59DE500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.243.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:1e:33:36:3a:67:bf:e5:9d:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=4f3afd6e-4968-4041-854b-78af51014ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6e:37:e1:c0:6a:3c:80:29:ea:a6:d7:52:df: bd:24:90:b1:db:3f:02:d7:d6:1e:5d:26:3b:eb:83: 88:05:ff:62:5a:f6:75:48:13:3e:66:bb:81:78:2d: cc:bb:be:d3:43:b6:14:14:cf:80:15:2b:da:41:b0: 7e:b6:6a:5d:6c:10:4b:99:9b:46:58:7b:f2:b3:57: 8e:a5:0c:e5:f8:ca:25:c1:9a:40:f3:5d:d6:88:df: 8f:6e:e2:68:14:72:ca:a4:e7:c9:1e:4a:b6:ba:5d: 81:93:6c:fb:d8:9d:f4:b2:a7:05:b7:01:bd:8e:20: 90:35:82:f5:83:62:79:73:09:5f:45:8d:59:f2:d4: bf:56:35:ab:dd:0f:95:a8:10:62:ab:0e:9f:c1:22: 53:1b:9d:40:c9:c2:56:88:bb:1d:9c:55:87:18:73: 69:13:4f:40:f3:d9:a8:75:76:c9:b7:6e:b4:08:a6: 1c:a0:21:52:cd:80:4d:50:53:c6:99:04:cd:d4:a0: 31:27:c9:4f:7a:28:d5:44:69:61:5d:bd:3f:77:fc: 05:1a:6b:16:09:22:dc:6b:a9:20:74:ce:da:75:45: 82:e8:9d:85:f2:e8:97:36:f5:05:e5:24:85:91:15: 18:c6:cd:1d:ed:e8:6e:8e:c1:be:aa:b7:09:02:f5: 9c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DD:06:2D:02:64:FB:26:55:54:D6:4E:E8:66:BD:20:97:78:B8:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:91:38:8f:ff:fa:5e:46:ee:1e:f4:8a:e3:c6:24:d3:5c:e1: 4e:1d:8e:12:b7:d3:b4:5c:83:74:c9:0e:32:0e:62:69:38:a0: f5:77:45:c2:87:2a:e9:23:90:34:ee:1b:46:ef:5e:ab:cb:47: 2f:a0:ad:fd:f5:b2:ba:49:e0:8f:49:e9:4b:ca:e7:70:c1:62: c4:6b:ad:c8:44:40:10:9b:81:f3:b7:01:d8:26:13:4e:84:42: 46:e5:65:62:7f:68:69:97:a5:77:b5:bb:7f:cc:66:be:34:b8: 00:d6:d4:1d:3a:38:27:37:9e:e1:e5:c2:91:4a:5b:77:b6:fa: da:97:29:a3:19:7a:1d:c0:6c:70:e7:75:ad:49:1c:21:3b:10: 95:7b:5e:b5:48:c0:44:4d:4a:e6:6c:39:42:85:44:1f:1a:e3: 98:03:ae:30:53:e5:34:05:e2:d3:f6:1f:f3:96:c9:08:32:a7: f3:bc:fa:af:ee:42:ef:02:0f:79:b9:cf:83:f0:88:29:55:34: 55:3b:6e:7c:6d:65:09:e8:c8:11:22:32:72:96:9c:7c:95:33: 6a:46:0a:34:17:aa:af:60:1b:19:9e:d5:a3:da:03:aa:5e:56: 6b:1a:53:1d:c1:1f:1e:79:29:fe:b1:ba:e1:54:88:70:4d:d7: 5c:41:85:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnB4zNjpnv+Wd5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NGYzYWZkNmUtNDk2OC00MDQxLTg1NGItNzhhZjUxMDE0YWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m434cBqPIAp6qbXUt+9JJCx2z8C19YeXSY7 64OIBf9iWvZ1SBM+ZruBeC3Mu77TQ7YUFM+AFSvaQbB+tmpdbBBLmZtGWHvys1eO pQzl+MolwZpA813WiN+PbuJoFHLKpOfJHkq2ul2Bk2z72J30sqcFtwG9jiCQNYL1 g2J5cwlfRY1Z8tS/VjWr3Q+VqBBiqw6fwSJTG51AycJWiLsdnFWHGHNpE09A89mo dXbJt260CKYcoCFSzYBNUFPGmQTN1KAxJ8lPeijVRGlhXb0/d/wFGmsWCSLca6kg dM7adUWC6J2F8uiXNvUF5SSFkRUYxs0d7ehujsG+qrcJAvWc/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLdBi0CZPsmVVTWTuhmvSCXeLiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWE5MDY1OTMtNzUxOC0z NzE3LTkzYTEtMzZmNDE1NjI2ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOROI//+l5G7h70iuPGJNNc4U4djhK307Rcg3TJDjIOYmk4oPV3RcKH KukjkDTuG0bvXqvLRy+grf31srpJ4I9J6UvK53DBYsRrrchEQBCbgfO3AdgmE06E QkblZWJ/aGmXpXe1u3/MZr40uADW1B06OCc3nuHlwpFKW3e2+tqXKaMZeh3AbHDn da1JHCE7EJV7XrVIwERNSuZsOUKFRB8a45gDrjBT5TQF4tP2H/OWyQgyp/O8+q/u Qu8CD3m5z4PwiClVNFU7bnxtZQnoyBEiMnKWnHyVM2pGCjQXqq9gGxme1aPaA6pe VmsaUx3BHx55Kf6xuuFUiHBN11xBheQ= -----END CERTIFICATE-----Generated at Thu Jun 11 21:27:19 2026 by rpki-client