$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3de0e7a-d99e-35f3-87da-2e4be8f9780b.roa File: b3de0e7a-d99e-35f3-87da-2e4be8f9780b.roa (raw, json) Hash identifier: VVRoaM9bs8TPOI17qRgdUfvt0iGXXtJrI8Vuc+t6g6c= Subject key identifier: 87:34:AA:0E:B2:8A:3B:10:F1:6F:E1:AB:11:30:4A:FC:71:00:A3:80 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BB71F00F6328B9DCE009C Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3de0e7a-d99e-35f3-87da-2e4be8f9780b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.20.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:b7:1f:00:f6:32:8b:9d:ce:00:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6d193c9c-6d51-4123-902f-ab2a0001ee4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:de:7b:99:9c:5d:49:65:ad:20:21:60:23:0e: bb:d6:6b:74:34:71:69:90:4e:f7:b9:c9:90:f2:6c: af:31:73:68:de:9c:32:c7:af:39:92:b3:f5:bb:15: 69:c9:40:5a:ce:0b:6f:84:1d:79:bb:f0:e8:0b:11: 30:e8:ad:3c:89:e6:5b:bc:ff:ee:ba:71:7c:02:2e: bf:7a:58:0c:3a:39:7d:b2:56:2f:1a:f0:1e:15:9f: 04:1d:8a:ec:01:71:07:ee:e3:4d:6b:85:d6:ed:ee: 6a:6a:03:fd:8b:1f:f9:eb:75:73:b5:f6:30:2c:ee: ec:7f:e6:a6:61:1c:db:c7:ee:10:55:ff:76:be:1e: 49:87:49:b6:76:29:b2:d0:7c:1f:31:48:d3:53:c5: a0:c4:85:c5:81:15:63:6a:36:f0:fc:96:fb:d3:8a: 3e:87:15:33:76:d3:46:28:fb:96:4a:90:a7:73:b2: 0f:72:82:a0:56:51:2a:8e:3e:64:04:05:05:3e:9e: 98:91:20:c9:bf:a5:03:cb:41:ee:c3:ce:e9:4a:ab: b9:05:f7:2c:a6:79:c4:ab:8c:60:3c:21:9e:86:5c: d9:43:62:cf:b6:7e:71:b6:8b:7b:40:33:8e:0c:fd: 0c:19:49:52:f2:da:90:60:28:7d:f1:7c:4e:2e:04: 3b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:34:AA:0E:B2:8A:3B:10:F1:6F:E1:AB:11:30:4A:FC:71:00:A3:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3de0e7a-d99e-35f3-87da-2e4be8f9780b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:95:97:cf:0a:4a:a8:66:05:92:f3:cb:a3:4d:fa:5b:7f:50: a3:12:48:13:c2:c9:d6:83:d1:a3:b6:43:50:3b:69:04:cc:2a: 32:f9:e0:f7:57:60:c2:b5:f2:93:54:27:59:18:8d:18:15:70: dd:e8:e8:46:a3:94:8f:0c:be:73:44:47:da:ef:16:38:18:ed: 74:f3:b3:3c:50:ce:f1:07:94:65:09:89:62:d7:f4:ce:ea:aa: 57:91:af:ef:a8:b5:37:b1:18:4e:4e:7d:92:b1:6b:93:57:86: ba:42:2d:76:20:16:55:c3:9d:6b:66:30:0c:e5:fc:a2:e2:89: 71:ca:0a:9c:f0:e8:a1:3a:3e:2e:25:ee:9f:88:88:3e:cb:e0: 85:c0:e8:55:68:c2:1a:17:11:3b:68:cb:ae:6d:1d:db:23:31: 92:53:a7:74:eb:5c:fb:c7:cc:c7:62:6a:7b:38:e4:3d:4a:e2: d2:e1:82:69:7a:c0:ae:ae:ca:ad:12:76:10:a9:27:17:89:31: 1f:87:cc:93:b5:e3:ac:5d:72:39:1c:f1:41:3d:59:98:e3:f3: 7e:48:3f:5d:82:c2:e7:de:fd:67:ae:76:47:f4:ce:e9:96:09: ae:e3:6c:5f:87:0e:bf:78:2b:0c:b3:d0:ce:d6:96:90:63:cd: b2:cc:4f:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je7cfAPYyi53OAJwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmQxOTNjOWMtNmQ1MS00MTIzLTkwMmYtYWIyYTAwMDFlZTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh957mZxdSWWtICFgIw671mt0NHFpkE73ucmQ 8myvMXNo3pwyx685krP1uxVpyUBazgtvhB15u/DoCxEw6K08ieZbvP/uunF8Ai6/ elgMOjl9slYvGvAeFZ8EHYrsAXEH7uNNa4XW7e5qagP9ix/563VztfYwLO7sf+am YRzbx+4QVf92vh5Jh0m2dimy0HwfMUjTU8WgxIXFgRVjajbw/Jb704o+hxUzdtNG KPuWSpCnc7IPcoKgVlEqjj5kBAUFPp6YkSDJv6UDy0Huw87pSqu5BfcspnnEq4xg PCGehlzZQ2LPtn5xtot7QDOODP0MGUlS8tqQYCh98XxOLgQ7jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIc0qg6yijsQ8W/hqxEwSvxxAKOAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjNkZTBlN2EtZDk5ZS0z NWYzLTg3ZGEtMmU0YmU4Zjk3ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBSBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaVl88KSqhmBZLzy6NN+lt/UKMSSBPCydaD0aO2Q1A7aQTMKjL54PdX YMK18pNUJ1kYjRgVcN3o6EajlI8MvnNER9rvFjgY7XTzszxQzvEHlGUJiWLX9M7q qleRr++otTexGE5OfZKxa5NXhrpCLXYgFlXDnWtmMAzl/KLiiXHKCpzw6KE6Pi4l 7p+IiD7L4IXA6FVowhoXETtoy65tHdsjMZJTp3TrXPvHzMdians45D1K4tLhgml6 wK6uyq0SdhCpJxeJMR+HzJO146xdcjkc8UE9WZjj835IP12Cwufe/Weudkf0zumW Ca7jbF+HDr94Kwyz0M7WlpBjzbLMT6I= -----END CERTIFICATE-----Generated at Sun Sep 27 03:44:30 2026 by rpki-client