$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa91c442-72a9-312f-ad60-6db30d5d9223.roa File: aa91c442-72a9-312f-ad60-6db30d5d9223.roa (raw, json) Hash identifier: fyFK/v6V0UbbIVM9v1e+gAb4RoA5BiiK649LJqd13Vw= Subject key identifier: 76:98:52:10:10:78:8F:0B:EA:C4:7F:46:E1:64:F5:C7:63:35:DA:25 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B96A7DAD7D78BA0474300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa91c442-72a9-312f-ad60-6db30d5d9223.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 172.242.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:96:a7:da:d7:d7:8b:a0:47:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=01fdfeb7-2e2f-45a2-90c5-f1bedd8d1e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:67:14:09:2b:d3:ad:e6:24:bc:92:7e:6f:1a: e0:3d:c7:a0:5e:97:61:1a:2f:94:5c:91:23:f5:dd: ac:0d:57:c8:be:54:d4:f2:95:45:29:56:dd:46:a0: b8:92:55:b2:62:9f:61:74:37:d0:c2:7b:c8:4f:46: 31:91:58:6b:ca:d5:b6:3c:5d:77:51:61:57:2e:ad: c7:68:e4:40:28:47:22:32:32:92:23:6b:1f:a7:bd: 81:3c:92:f5:38:3c:5c:5c:ee:b9:5f:bb:22:90:82: 13:66:1a:26:7c:69:fb:eb:7e:82:4a:8c:17:a7:76: d6:46:04:f7:25:97:a6:e2:7f:39:3e:a8:bc:dc:eb: 66:c9:e2:36:15:a0:5f:e3:b5:ca:ab:95:5c:8e:38: 41:3a:58:b0:62:b2:52:5d:18:7e:1c:24:bd:b6:1b: 2b:0e:f3:12:28:98:ee:e3:a4:7a:d3:8a:51:77:67: 64:25:60:a7:60:bc:81:8b:4d:55:aa:84:a8:7e:3e: fb:19:a2:40:23:82:40:99:9b:f5:fc:dc:61:e9:47: 1e:08:69:1d:72:66:44:50:a0:6d:22:b0:a8:c9:a8: 36:41:30:c1:b4:97:c3:42:b9:03:56:98:57:9a:35: 24:85:dc:c5:58:b5:3b:1f:27:cb:11:93:0a:29:d2: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:98:52:10:10:78:8F:0B:EA:C4:7F:46:E1:64:F5:C7:63:35:DA:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa91c442-72a9-312f-ad60-6db30d5d9223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:d7:34:f4:58:29:32:02:e9:bf:71:51:18:45:c3:9c:75:53: a1:59:a3:70:a2:2b:d5:9d:1c:09:25:b5:00:23:fe:10:41:65: 7b:11:3c:fd:38:bc:fc:9d:06:df:61:a7:75:ba:20:04:55:1c: 68:0f:c4:15:b9:ba:97:81:73:92:3e:33:6f:c3:64:38:af:1d: f9:61:81:cc:f7:e9:e3:20:96:cc:20:25:dd:58:0f:50:35:80: b9:54:78:6d:f3:e0:d2:ca:e1:8d:df:b0:e5:01:a6:e3:db:00: bf:0d:e2:39:99:2f:91:8a:71:7f:bd:c9:c6:67:1b:1d:57:c3: 43:e9:5b:5b:bd:ef:71:31:05:64:c9:0a:82:97:d0:8f:19:d7: 9f:e3:c1:09:50:b3:99:19:18:fb:a4:aa:8d:0f:3d:71:40:a2: db:64:91:ad:25:43:14:08:66:f2:30:08:43:f1:97:07:00:6c: f9:16:ff:d2:b9:52:c1:8a:4c:1a:d2:f2:27:39:b8:7e:13:13: cd:88:88:13:d7:46:94:16:4f:24:ba:39:d9:95:3e:f8:5e:7c: 8a:40:68:8c:64:e4:1b:e2:eb:1b:be:07:e2:80:8f:1c:b6:8c: b1:02:3c:ab:1c:71:11:fa:3e:36:3f:8f:80:73:c8:9d:8f:a9: 70:4f:7f:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm5an2tfXi6BHQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MDFmZGZlYjctMmUyZi00NWEyLTkwYzUtZjFiZWRkOGQxZTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomcUCSvTreYkvJJ+bxrgPcegXpdhGi+UXJEj 9d2sDVfIvlTU8pVFKVbdRqC4klWyYp9hdDfQwnvIT0YxkVhrytW2PF13UWFXLq3H aORAKEciMjKSI2sfp72BPJL1ODxcXO65X7sikIITZhomfGn7636CSowXp3bWRgT3 JZem4n85Pqi83OtmyeI2FaBf47XKq5VcjjhBOliwYrJSXRh+HCS9thsrDvMSKJju 46R604pRd2dkJWCnYLyBi01VqoSofj77GaJAI4JAmZv1/Nxh6UceCGkdcmZEUKBt IrCoyag2QTDBtJfDQrkDVphXmjUkhdzFWLU7HyfLEZMKKdKWJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaYUhAQeI8L6sR/RuFk9cdjNdolMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWE5MWM0NDItNzJhOS0z MTJmLWFkNjAtNmRiMzBkNWQ5MjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErXNPRYKTIC6b9xURhFw5x1U6FZo3CiK9WdHAkltQAj/hBBZXsRPP04 vPydBt9hp3W6IARVHGgPxBW5upeBc5I+M2/DZDivHflhgcz36eMglswgJd1YD1A1 gLlUeG3z4NLK4Y3fsOUBpuPbAL8N4jmZL5GKcX+9ycZnGx1Xw0PpW1u973ExBWTJ CoKX0I8Z15/jwQlQs5kZGPukqo0PPXFAottkka0lQxQIZvIwCEPxlwcAbPkW/9K5 UsGKTBrS8ic5uH4TE82IiBPXRpQWTyS6OdmVPvhefIpAaIxk5Bvi6xu+B+KAjxy2 jLECPKsccRH6PjY/j4BzyJ2PqXBPf1E= -----END CERTIFICATE-----Generated at Thu Jun 11 21:24:45 2026 by rpki-client