$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85687f7d-22cd-349e-b2bc-78b18d4ff5ff.roa File: 85687f7d-22cd-349e-b2bc-78b18d4ff5ff.roa (raw, json) Hash identifier: ph+Km5dREzxTNU194OKP7bpMABv6U8jXf/L9BNNe0wA= Subject key identifier: 3B:BA:85:AE:3F:88:79:E4:9D:CF:31:9C:3E:23:57:CF:13:1B:D4:E6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B97A3641A0AEF89CF8E80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85687f7d-22cd-349e-b2bc-78b18d4ff5ff.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.242.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:97:a3:64:1a:0a:ef:89:cf:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=ac7a7832-e2fb-41b9-ba4f-26c7a96c5f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:89:30:cc:ca:1a:58:14:fc:5f:2a:cc:72:bf: 1e:73:ac:e8:c4:1e:c6:b0:1a:37:9e:fe:92:19:fb: 68:fb:c2:f3:6f:fb:06:c7:0c:00:2f:46:56:1c:14: f3:9c:77:7a:e3:5f:74:81:83:35:b0:51:66:14:fe: 34:58:37:fc:28:02:f4:8f:cc:47:54:78:b6:be:69: 42:89:4b:af:9f:c2:6b:1c:3a:c3:16:40:e9:1f:b1: de:6a:b6:0b:e2:92:ad:8e:0c:bd:90:3a:b7:db:ce: 24:7e:42:6c:2d:94:c4:33:07:38:52:90:97:8d:00: 02:b1:b1:08:e6:74:8b:49:45:91:b7:36:70:ba:63: 3b:57:29:5f:88:fd:87:c6:53:0b:55:3b:74:6e:0b: b2:f0:26:82:13:50:16:89:21:f3:5a:6d:9c:e8:3c: 8e:41:c0:d6:53:07:ee:90:7d:b7:dc:e4:d7:2a:f1: f9:b0:27:26:24:8f:b4:9b:4b:17:9a:f8:e4:3e:07: 01:51:17:30:dd:92:e9:ae:aa:d1:a1:77:1a:1a:a7: ab:b6:29:80:fb:78:97:89:0a:09:ba:cb:d5:1e:11: 0f:3c:d2:5e:66:dc:93:7a:9f:8d:65:f9:b3:83:49: 09:b0:06:94:f0:af:11:a5:90:20:c7:0c:ac:44:5c: b4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BA:85:AE:3F:88:79:E4:9D:CF:31:9C:3E:23:57:CF:13:1B:D4:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85687f7d-22cd-349e-b2bc-78b18d4ff5ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:12:5f:34:da:5b:d9:e6:2f:6d:4a:b4:ed:4b:9a:89:64:59: 5a:47:f6:ff:bd:5e:5a:be:72:09:37:f3:9c:ae:b4:af:9e:fa: 1c:b3:9b:dd:37:81:4b:fe:29:e4:78:ab:f5:db:f9:a9:3c:20: 53:1e:91:c8:44:8c:f6:0c:0b:bb:2b:c8:83:33:93:bd:69:04: 76:88:63:c8:67:37:7a:05:c5:04:d9:2b:4d:83:e9:51:f1:60: c2:c0:ec:b9:fb:c2:af:f1:2e:0c:37:92:21:d7:8e:6a:cb:d9: 43:b0:a0:de:66:b0:e5:8f:84:c5:ac:53:64:7b:6b:72:50:81: cd:c2:f2:50:46:01:d9:65:d7:ae:8e:3c:e6:69:9b:b5:79:43: 4a:5e:85:59:cf:ff:e4:4b:08:3c:12:99:df:dc:ad:38:2a:fc: bc:64:d6:ca:48:ad:2a:9e:65:c8:57:1a:01:4f:81:93:78:d1: 38:bc:d1:3d:6d:aa:0f:4c:cd:c7:e8:01:bc:8e:5e:94:80:bb: 11:49:78:29:11:a5:8b:db:5b:ad:d2:b6:54:0b:90:e4:e4:9a: 41:6b:6e:10:4e:bf:41:db:54:0d:8b:fc:f7:fa:c2:70:45:b0: 62:a0:e9:8c:4e:9f:29:63:d2:69:33:42:5f:34:02:b9:39:7e: d7:a5:5c:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm5ejZBoK74nPjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YWM3YTc4MzItZTJmYi00MWI5LWJhNGYtMjZjN2E5NmM1ZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4kwzMoaWBT8XyrMcr8ec6zoxB7GsBo3nv6S Gfto+8Lzb/sGxwwAL0ZWHBTznHd64190gYM1sFFmFP40WDf8KAL0j8xHVHi2vmlC iUuvn8JrHDrDFkDpH7HearYL4pKtjgy9kDq3284kfkJsLZTEMwc4UpCXjQACsbEI 5nSLSUWRtzZwumM7VylfiP2HxlMLVTt0bguy8CaCE1AWiSHzWm2c6DyOQcDWUwfu kH233OTXKvH5sCcmJI+0m0sXmvjkPgcBURcw3ZLprqrRoXcaGqertimA+3iXiQoJ usvVHhEPPNJeZtyTep+NZfmzg0kJsAaU8K8RpZAgxwysRFy00QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDu6ha4/iHnknc8xnD4jV88TG9TmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODU2ODdmN2QtMjJjZC0z NDllLWIyYmMtNzhiMThkNGZmNWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPK+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMMSXzTaW9nmL21KtO1LmolkWVpH9v+9Xlq+cgk385yutK+e+hyzm903 gUv+KeR4q/Xb+ak8IFMekchEjPYMC7sryIMzk71pBHaIY8hnN3oFxQTZK02D6VHx YMLA7Ln7wq/xLgw3kiHXjmrL2UOwoN5msOWPhMWsU2R7a3JQgc3C8lBGAdll166O POZpm7V5Q0pehVnP/+RLCDwSmd/crTgq/Lxk1spIrSqeZchXGgFPgZN40Ti80T1t qg9MzcfoAbyOXpSAuxFJeCkRpYvbW63StlQLkOTkmkFrbhBOv0HbVA2L/Pf6wnBF sGKg6YxOnylj0mkzQl80Ark5ftelXJE= -----END CERTIFICATE-----Generated at Thu Jun 11 21:22:47 2026 by rpki-client