$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf7a83cc-d74a-3239-8176-c283c2babf20.roa File: bf7a83cc-d74a-3239-8176-c283c2babf20.roa (raw, json) Hash identifier: ECv0ie376U2Lb7ADqZSvZh68xNjTPvr6Cb2dw+lE8t4= Subject key identifier: 70:8C:88:1E:02:81:79:D3:5B:8D:02:2D:0F:E0:6D:44:0B:61:E6:1A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B691F9E917AB59D40FF00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf7a83cc-d74a-3239-8176-c283c2babf20.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 72.173.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:69:1f:9e:91:7a:b5:9d:40:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=52ea2471-db48-49ac-82d9-33e5e15b8ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:38:ec:30:28:c9:82:4d:17:16:5d:07:cc:06: 3e:ac:e4:e9:70:62:84:25:62:44:10:0a:68:60:7e: e4:da:e0:2b:43:d3:04:0b:75:ad:ef:67:47:5c:9b: 2f:9c:a8:ac:7d:f3:6c:0c:45:01:5e:03:ba:62:3f: 3b:04:e5:9c:65:d9:5d:99:9d:a2:80:bd:2a:bc:b0: 65:c1:d4:db:28:d3:40:6d:bf:f6:d1:ba:17:b5:96: c3:6f:b0:b7:0f:77:2f:99:f6:65:d5:f8:19:97:4e: 93:7d:c1:00:ba:05:6a:09:61:7d:32:16:5d:18:bc: c9:49:85:8d:36:49:bb:51:6d:b0:c2:cb:38:57:b8: a8:55:5a:87:32:3a:18:0c:88:13:61:a0:f7:23:5a: 07:98:53:08:0a:b0:94:68:f1:6d:b9:23:3e:06:99: a9:eb:86:9a:93:cb:fe:bb:f7:63:82:2f:f2:62:c8: a5:a8:5b:1a:24:da:07:1a:51:a4:bc:55:e9:af:8a: e7:89:c2:d6:eb:da:df:d5:f8:d5:c5:14:27:e3:80: 23:21:51:b4:72:aa:a1:79:45:eb:f4:90:22:c5:9d: 7c:92:18:29:77:7b:43:18:5b:83:5f:af:72:e9:1c: 37:07:b4:68:7c:1c:87:36:17:75:df:27:67:c1:04: 98:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8C:88:1E:02:81:79:D3:5B:8D:02:2D:0F:E0:6D:44:0B:61:E6:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf7a83cc-d74a-3239-8176-c283c2babf20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:8d:b3:85:10:2b:71:c9:c0:56:2d:b0:4f:f8:3b:1d:0f:df: b5:51:09:1e:13:e2:64:03:2f:2f:c9:aa:91:4e:46:49:4d:3e: 34:79:d7:70:25:43:51:d4:9f:0b:02:90:56:02:84:ee:74:96: 4e:bf:de:b8:77:0d:45:26:9e:91:36:84:16:40:57:3b:dd:1a: 92:f0:19:2e:59:00:16:68:65:22:66:15:82:15:c9:83:26:c2: 76:1b:5a:3b:ca:39:cb:06:1e:33:1e:b4:6b:37:1e:35:ea:6f: 3d:8d:31:66:fc:c0:6e:cc:fc:f4:c1:c0:3f:b8:75:2d:98:23: 35:ff:f4:ac:17:33:c3:e5:18:15:e1:df:82:42:62:f5:89:86: 99:8e:67:09:87:f6:b1:f5:8f:81:9a:38:bf:b0:99:d5:4d:88: 34:1c:67:7c:d7:39:90:9e:65:2c:4a:19:f7:64:50:2d:94:43: ab:be:af:79:c5:d3:48:65:bc:70:98:c8:af:7f:7a:3a:40:81: 08:b3:23:0a:19:55:73:65:55:d7:10:45:26:82:6a:01:2f:74: 6e:d0:9f:4b:6b:6d:73:a2:5a:3d:6d:28:3e:2d:4e:62:6e:b9: d3:1e:ba:ae:75:a4:7c:13:97:a8:4f:ea:fa:aa:fd:12:14:e7: 94:a9:78:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm2kfnpF6tZ1A/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NTJlYTI0NzEtZGI0OC00OWFjLTgyZDktMzNlNWUxNWI4ZWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTjsMCjJgk0XFl0HzAY+rOTpcGKEJWJEEApo YH7k2uArQ9MEC3Wt72dHXJsvnKisffNsDEUBXgO6Yj87BOWcZdldmZ2igL0qvLBl wdTbKNNAbb/20boXtZbDb7C3D3cvmfZl1fgZl06TfcEAugVqCWF9MhZdGLzJSYWN Nkm7UW2wwss4V7ioVVqHMjoYDIgTYaD3I1oHmFMICrCUaPFtuSM+Bpmp64aak8v+ u/djgi/yYsilqFsaJNoHGlGkvFXpr4rnicLW69rf1fjVxRQn44AjIVG0cqqheUXr 9JAixZ18khgpd3tDGFuDX69y6Rw3B7RofByHNhd13ydnwQSYgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCMiB4CgXnTW40CLQ/gbUQLYeYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmY3YTgzY2MtZDc0YS0z MjM5LTgxNzYtYzI4M2MyYmFiZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANeNs4UQK3HJwFYtsE/4Ox0P37VRCR4T4mQDLy/JqpFORklNPjR513Al Q1HUnwsCkFYChO50lk6/3rh3DUUmnpE2hBZAVzvdGpLwGS5ZABZoZSJmFYIVyYMm wnYbWjvKOcsGHjMetGs3HjXqbz2NMWb8wG7M/PTBwD+4dS2YIzX/9KwXM8PlGBXh 34JCYvWJhpmOZwmH9rH1j4GaOL+wmdVNiDQcZ3zXOZCeZSxKGfdkUC2UQ6u+r3nF 00hlvHCYyK9/ejpAgQizIwoZVXNlVdcQRSaCagEvdG7Qn0trbXOiWj1tKD4tTmJu udMeuq51pHwTl6hP6vqq/RIU55SpeL0= -----END CERTIFICATE-----Generated at Thu Jun 11 21:24:27 2026 by rpki-client