$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78eeb08f-9c75-34a8-aa34-fad103c53f80.roa File: 78eeb08f-9c75-34a8-aa34-fad103c53f80.roa (raw, json) Hash identifier: 5deOo1pEKy+eLSIWpIgzKBn+jnKXDcGztrcMqdLvgnI= Subject key identifier: 18:1B:57:CC:42:D5:47:86:1E:F0:94:FE:C5:A7:37:E1:7A:AB:C3:01 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C1EC0ACA570FF2FF17FC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78eeb08f-9c75-34a8-aa34-fad103c53f80.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.243.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:1e:c0:ac:a5:70:ff:2f:f1:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=3bb5acdc-6f21-4ee3-aad4-323f78ba58a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:46:b5:b9:1a:c2:57:2a:40:f0:44:4a:c5:1b: 70:b1:21:4b:06:b0:5a:50:23:d4:31:02:b8:f4:b6: 71:24:ed:03:00:d0:b6:db:29:d0:ab:4f:c3:f6:87: ce:93:d0:e6:19:9b:15:41:f8:52:c5:12:fa:cc:24: ef:ba:25:fd:e2:74:db:dc:2f:52:0f:fb:1e:f3:63: f1:f2:7c:c8:d5:13:16:d6:36:71:9b:57:80:72:65: 55:5e:12:5a:62:71:cb:6c:54:e2:15:e1:9c:37:c1: 32:6f:7e:b0:1c:0a:59:f4:07:cb:c2:66:fa:bc:9f: ad:66:20:72:48:13:54:fe:e4:e2:4b:b9:05:89:26: 2d:11:2f:c9:d6:3c:c9:6f:4a:73:c9:f4:e1:e8:a0: af:e0:bc:dd:f0:81:77:d3:db:99:e2:25:0b:64:c2: 2a:99:4d:0f:e5:9a:6f:38:c4:5c:04:ad:7b:70:66: fc:b0:62:07:03:7c:69:88:2e:d1:d4:70:6b:8b:50: f3:bd:b0:68:75:c9:1e:90:47:6f:95:00:dd:2c:1b: bb:da:b2:7c:c6:2a:7d:ee:20:11:7d:51:50:44:30: 89:55:01:9c:26:91:fd:dd:e9:97:36:f0:36:01:c2: f1:da:80:74:88:98:36:cc:8b:d7:dc:57:17:4b:77: c1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1B:57:CC:42:D5:47:86:1E:F0:94:FE:C5:A7:37:E1:7A:AB:C3:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78eeb08f-9c75-34a8-aa34-fad103c53f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:2d:92:47:55:54:8e:09:0e:1f:96:d3:07:62:45:1b:7e:e4: b6:6a:a2:a1:c6:ec:bf:10:ab:bd:65:ae:58:ec:2a:de:8d:17: 98:61:cf:f6:b1:d5:7a:6d:09:22:55:68:82:0d:95:ad:cf:04: d8:0c:68:a8:0a:30:c8:d9:75:23:4c:51:42:9a:8e:84:a4:ed: c5:5e:a7:76:02:26:8e:38:27:1b:27:4c:15:d9:7e:ea:11:33: 61:ff:33:2f:27:a6:3e:cc:02:4f:b0:96:77:2a:67:81:88:0f: c8:49:91:b2:d5:fc:b9:c3:ff:99:d6:3e:48:9f:c8:73:df:d4: a3:00:af:5f:2e:72:a0:79:cc:ea:ac:96:68:a2:32:a9:6c:c5: ed:38:32:9d:5e:8c:c3:cc:85:41:b5:e8:da:ba:4c:29:cf:d7: d3:a8:75:da:c1:2c:3c:a3:f5:81:b5:05:b1:3c:1a:af:d2:3a: 7c:80:eb:d7:85:db:39:96:4e:5d:0a:14:22:38:2f:b2:44:da: 4d:b5:6f:3e:f1:4a:b5:06:d6:d7:8d:c4:6b:01:78:8b:0e:8f: 6b:5c:34:02:54:dd:ab:52:64:1b:00:04:be:dc:ec:dc:0d:57: c7:45:10:b3:8f:e9:20:0f:20:7a:47:f1:26:5b:91:ad:67:13: 2e:75:30:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnB7ArKVw/y/xf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk M2JiNWFjZGMtNmYyMS00ZWUzLWFhZDQtMzIzZjc4YmE1OGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0a1uRrCVypA8ERKxRtwsSFLBrBaUCPUMQK4 9LZxJO0DANC22ynQq0/D9ofOk9DmGZsVQfhSxRL6zCTvuiX94nTb3C9SD/se82Px 8nzI1RMW1jZxm1eAcmVVXhJaYnHLbFTiFeGcN8Eyb36wHApZ9AfLwmb6vJ+tZiBy SBNU/uTiS7kFiSYtES/J1jzJb0pzyfTh6KCv4Lzd8IF309uZ4iULZMIqmU0P5Zpv OMRcBK17cGb8sGIHA3xpiC7R1HBri1DzvbBodckekEdvlQDdLBu72rJ8xip97iAR fVFQRDCJVQGcJpH93emXNvA2AcLx2oB0iJg2zIvX3FcXS3fB0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgbV8xC1UeGHvCU/sWnN+F6q8MBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzhlZWIwOGYtOWM3NS0z NGE4LWFhMzQtZmFkMTAzYzUzZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIktkkdVVI4JDh+W0wdiRRt+5LZqoqHG7L8Qq71lrljsKt6NF5hhz/ax 1XptCSJVaIINla3PBNgMaKgKMMjZdSNMUUKajoSk7cVep3YCJo44JxsnTBXZfuoR M2H/My8npj7MAk+wlncqZ4GID8hJkbLV/LnD/5nWPkifyHPf1KMAr18ucqB5zOqs lmiiMqlsxe04Mp1ejMPMhUG16Nq6TCnP19OoddrBLDyj9YG1BbE8Gq/SOnyA69eF 2zmWTl0KFCI4L7JE2k21bz7xSrUG1teNxGsBeIsOj2tcNAJU3atSZBsABL7c7NwN V8dFELOP6SAPIHpH8SZbka1nEy51MME= -----END CERTIFICATE-----Generated at Thu Jun 11 21:26:11 2026 by rpki-client