$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67b9af64-a780-3bdc-8348-ebda56cbd0db.roa File: 67b9af64-a780-3bdc-8348-ebda56cbd0db.roa (raw, json) Hash identifier: qNGUjAh+YLoCp8A1adciNkE58Vvtu6GodWRdovURKqU= Subject key identifier: 4D:EA:1D:C2:A5:69:5D:20:C1:62:07:F6:EE:D2:8C:6F:54:54:97:72 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49840EC4CD66D09EEFF18580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67b9af64-a780-3bdc-8348-ebda56cbd0db.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.21.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:0e:c4:cd:66:d0:9e:ef:f1:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0f12c63f-4f2b-4f65-9ca7-ed6d067387f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c3:38:91:96:2f:2f:03:d5:3b:47:38:f3:3f: cb:50:00:b2:49:ea:9a:ea:b2:40:c7:51:54:6a:f2: 2a:40:26:83:7d:78:64:20:37:7b:d4:2d:2c:79:d4: 08:d4:9a:5b:8a:29:9b:94:f1:56:1a:96:f3:55:ff: 2d:af:99:fd:4c:b3:1c:ed:59:f1:5d:be:30:f5:e0: 29:2d:ec:19:fb:e6:bb:39:aa:28:a2:74:dc:4b:de: 05:30:13:f5:d1:21:61:1a:a5:89:13:30:44:e5:2d: 7f:b5:97:5d:81:e7:c4:c2:79:89:97:15:55:57:22: 40:3c:71:a1:c8:2e:b4:52:b2:1c:79:a0:ae:18:ce: 96:7c:12:de:6a:1a:d4:8f:4a:f4:f4:6c:e3:18:14: 84:18:79:65:59:b1:3d:5d:85:ce:31:4a:9e:97:ad: f5:ac:37:14:91:1c:4a:88:ef:ba:14:13:e8:7e:82: da:6f:3f:a9:45:dd:02:04:98:e2:a4:00:57:73:5a: 9c:eb:9b:17:e4:15:e1:9f:8a:ae:ae:cb:cf:8d:32: a9:68:29:6c:50:ec:43:51:0c:50:93:58:64:dc:c8: ad:ef:f8:57:09:1d:ff:c3:2d:9a:9b:a3:72:5d:40: 41:f5:aa:a4:d8:45:dc:0a:1f:6f:4a:fd:76:03:99: 49:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EA:1D:C2:A5:69:5D:20:C1:62:07:F6:EE:D2:8C:6F:54:54:97:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67b9af64-a780-3bdc-8348-ebda56cbd0db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:25:48:77:59:f6:38:e4:fa:dd:ca:8e:8e:5b:b5:8e:c6:13: ce:c4:85:fb:49:d9:00:17:5f:7a:bd:8f:b5:a9:15:22:76:81: 97:9b:7c:91:38:a8:e6:72:c5:58:94:6f:15:79:94:4b:5a:78: b7:e8:75:ba:8f:84:2e:2b:ba:e1:7d:c6:1a:87:36:9d:54:af: 61:9d:e2:ee:30:f1:45:13:95:ba:e2:66:47:c6:97:18:4b:97: 10:f6:a4:c5:ce:b2:82:1d:4a:f3:2d:ee:5a:dd:f6:9c:07:cc: 98:17:db:54:1f:e1:bf:fe:7c:86:86:64:15:7c:72:5e:ad:c5: 28:59:45:02:00:45:5c:d0:7f:be:e8:46:8d:21:d4:18:fb:b6: 59:c6:fe:e9:5d:bb:13:86:56:a6:c7:69:d5:2f:cf:00:d3:92: de:7e:91:fe:99:99:c9:5e:98:40:6d:f6:71:50:db:16:d3:25: 0e:51:67:e9:bb:2e:30:2f:2a:97:d6:ca:f7:52:20:69:c3:c1: 0e:9a:95:0e:5e:bc:bc:cd:b9:4a:f1:a6:7d:13:39:79:32:ed: 4d:bc:86:1d:14:b6:cc:72:46:b8:47:a6:bc:eb:22:ca:c2:a4: 96:cf:34:33:8d:76:77:ac:50:b0:2b:6e:ba:6b:05:27:3e:45: 10:99:71:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhA7EzWbQnu/xhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGYxMmM2M2YtNGYyYi00ZjY1LTljYTctZWQ2ZDA2NzM4N2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsM4kZYvLwPVO0c48z/LUACySeqa6rJAx1FU avIqQCaDfXhkIDd71C0sedQI1JpbiimblPFWGpbzVf8tr5n9TLMc7VnxXb4w9eAp LewZ++a7OaooonTcS94FMBP10SFhGqWJEzBE5S1/tZddgefEwnmJlxVVVyJAPHGh yC60UrIceaCuGM6WfBLeahrUj0r09GzjGBSEGHllWbE9XYXOMUqel631rDcUkRxK iO+6FBPofoLabz+pRd0CBJjipABXc1qc65sX5BXhn4qursvPjTKpaClsUOxDUQxQ k1hk3Mit7/hXCR3/wy2am6NyXUBB9aqk2EXcCh9vSv12A5lJwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3qHcKlaV0gwWIH9u7SjG9UVJdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjdiOWFmNjQtYTc4MC0z YmRjLTgzNDgtZWJkYTU2Y2JkMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJolSHdZ9jjk+t3Kjo5btY7GE87EhftJ2QAXX3q9j7WpFSJ2gZebfJE4 qOZyxViUbxV5lEtaeLfodbqPhC4ruuF9xhqHNp1Ur2Gd4u4w8UUTlbriZkfGlxhL lxD2pMXOsoIdSvMt7lrd9pwHzJgX21Qf4b/+fIaGZBV8cl6txShZRQIARVzQf77o Ro0h1Bj7tlnG/ulduxOGVqbHadUvzwDTkt5+kf6ZmclemEBt9nFQ2xbTJQ5RZ+m7 LjAvKpfWyvdSIGnDwQ6alQ5evLzNuUrxpn0TOXky7U28hh0UtsxyRrhHprzrIsrC pJbPNDONdnesULArbrprBSc+RRCZcWs= -----END CERTIFICATE-----Generated at Mon Sep 28 23:17:02 2026 by rpki-client