$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68693e59-40a8-3d11-9aab-bb481e841542.roa File: 68693e59-40a8-3d11-9aab-bb481e841542.roa (raw, json) Hash identifier: tG2cC8yABLdKMZXoZ3ODbzt9ZUhhsXsXUFVRjJOkF7s= Subject key identifier: A7:69:CF:E8:E4:9D:8F:BA:43:F9:A7:95:92:A7:90:00:04:7D:C4:8C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49840C4F647D960A0AE58DC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68693e59-40a8-3d11-9aab-bb481e841542.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.21.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:0c:4f:64:7d:96:0a:0a:e5:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=508074ad-3aa5-46bf-a258-af74001aa00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:85:9f:18:94:1c:f2:f1:96:61:b6:1d:bd:05: 65:46:70:5f:f7:ac:6e:59:0e:ab:cc:8e:65:71:3d: 6d:45:3f:5c:57:4e:cc:66:99:c1:f9:9a:9d:1a:27: cf:a8:9a:d9:a5:e3:ff:38:b7:41:73:b0:45:16:47: 12:6d:4b:1c:49:13:01:e8:f8:8d:84:67:53:71:e0: 63:05:d1:b6:b9:dd:64:a2:6e:e5:bd:ea:89:a6:8c: 9a:54:e0:af:be:ae:fc:91:a2:01:75:41:3e:f4:b7: e3:0c:6c:1d:e6:39:83:3f:7e:7e:b9:16:8f:5e:f7: a4:f6:38:71:6f:1b:fb:5b:7b:f5:4c:5f:3b:47:f2: 12:1b:07:2c:6a:18:a2:8a:32:8d:03:71:1d:36:9d: ef:0e:40:3c:85:a5:a4:32:8a:6f:4e:60:7c:26:f8: c7:ba:4b:12:1f:bd:d1:6c:0a:6b:fc:f6:4e:54:15: ac:a3:b5:a1:ea:47:72:5e:d7:ed:98:cc:9b:ff:c2: 09:6a:02:3a:87:f5:e1:9c:ae:a2:13:9f:82:ca:94: c7:7f:ec:3f:24:3d:f6:ef:3a:6f:3e:d4:be:80:fc: 23:a0:5e:04:16:17:fa:19:ba:e0:48:18:fe:28:76: cb:b7:f5:1f:95:b9:cf:28:0f:a6:31:c7:c5:44:0c: 85:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:69:CF:E8:E4:9D:8F:BA:43:F9:A7:95:92:A7:90:00:04:7D:C4:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68693e59-40a8-3d11-9aab-bb481e841542.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:f2:67:18:c6:75:0c:60:33:35:26:84:e1:51:81:b0:2a:4f: 45:83:1b:e6:70:e4:a1:41:f4:e8:57:31:33:8a:f4:78:e5:5b: f9:c7:95:e5:b6:0b:d5:fd:c1:0a:08:11:e8:7a:b6:1e:d9:7b: 9d:95:08:25:f2:20:61:99:5d:9e:fc:a5:ac:5e:7e:e1:e3:90: 82:1a:13:05:64:7f:86:58:ee:ba:84:30:91:f1:d6:72:b7:9b: 4f:46:7d:79:e1:64:03:97:c1:d0:f6:fc:a5:05:f1:59:42:87: 8e:eb:a8:0c:04:e4:ac:fb:17:53:53:31:2f:19:97:99:50:dc: 2b:ef:94:65:e0:2a:81:fe:67:c6:9a:09:b8:81:e2:e3:f5:b6: 21:6d:32:dd:44:e7:59:15:7f:96:88:ac:1d:62:7e:14:23:9e: 17:aa:32:d2:99:a6:af:15:79:24:a5:4d:aa:3f:ed:5e:ce:23: fb:db:e8:0b:1c:64:e5:5b:79:9b:bb:82:30:33:a3:da:20:31: b0:f8:ca:67:07:24:e2:2a:85:c4:7d:90:8e:e6:15:44:78:da: d1:d5:61:6c:97:03:8c:e2:85:5c:7a:39:8a:cd:45:62:c1:6d: dd:e5:9f:2c:11:43:2d:1e:d6:30:53:dc:40:69:b0:4c:c2:02: 7f:3b:00:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhAxPZH2WCgrljcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTA4MDc0YWQtM2FhNS00NmJmLWEyNTgtYWY3NDAwMWFhMDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oWfGJQc8vGWYbYdvQVlRnBf96xuWQ6rzI5l cT1tRT9cV07MZpnB+ZqdGifPqJrZpeP/OLdBc7BFFkcSbUscSRMB6PiNhGdTceBj BdG2ud1kom7lveqJpoyaVOCvvq78kaIBdUE+9LfjDGwd5jmDP35+uRaPXvek9jhx bxv7W3v1TF87R/ISGwcsahiiijKNA3EdNp3vDkA8haWkMopvTmB8JvjHuksSH73R bApr/PZOVBWso7Wh6kdyXtftmMyb/8IJagI6h/XhnK6iE5+CypTHf+w/JD327zpv PtS+gPwjoF4EFhf6GbrgSBj+KHbLt/UflbnPKA+mMcfFRAyF1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdpz+jknY+6Q/mnlZKnkAAEfcSMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjg2OTNlNTktNDBhOC0z ZDExLTlhYWItYmI0ODFlODQxNTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBVyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMXyZxjGdQxgMzUmhOFRgbAqT0WDG+Zw5KFB9OhXMTOK9HjlW/nHleW2 C9X9wQoIEeh6th7Ze52VCCXyIGGZXZ78paxefuHjkIIaEwVkf4ZY7rqEMJHx1nK3 m09GfXnhZAOXwdD2/KUF8VlCh47rqAwE5Kz7F1NTMS8Zl5lQ3CvvlGXgKoH+Z8aa CbiB4uP1tiFtMt1E51kVf5aIrB1ifhQjnheqMtKZpq8VeSSlTao/7V7OI/vb6Asc ZOVbeZu7gjAzo9ogMbD4ymcHJOIqhcR9kI7mFUR42tHVYWyXA4zihVx6OYrNRWLB bd3lnywRQy0e1jBT3EBpsEzCAn87ALE= -----END CERTIFICATE-----Generated at Thu Oct 8 10:51:41 2026 by rpki-client