$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8303e79-3d2e-3c52-9517-df947d7a1e5d.roa File: b8303e79-3d2e-3c52-9517-df947d7a1e5d.roa (raw, json) Hash identifier: Ohx+sMlgBiNLgLH0qsrvJWg2RuyGW+c0WU+L4roxm2M= Subject key identifier: BC:5E:B3:6F:86:F0:EF:97:B4:FB:9D:94:3A:46:B9:23:34:22:15:79 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79FD89AD60B411F0A728480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8303e79-3d2e-3c52-9517-df947d7a1e5d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 184.20.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:d8:9a:d6:0b:41:1f:0a:72:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c9abc090-641d-458a-860a-4baf526ef929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:37:4d:bb:da:48:ce:cd:3c:b7:6e:a3:44:fd: 30:65:1a:bc:bd:58:22:e6:07:1b:0d:31:61:cc:8e: 2d:c5:74:58:6b:27:ae:1c:a7:4d:ec:63:f7:1d:fb: a2:24:2d:98:ac:a8:c6:07:0d:62:61:f0:43:53:53: a9:5f:1c:36:96:19:54:2e:a1:50:b9:0e:1b:92:81: 53:3a:e6:56:bf:33:5e:98:75:2c:dd:f1:9e:1b:20: dc:ec:4c:01:42:4d:1a:e9:52:a5:06:3a:f6:a0:0c: 81:ae:82:e4:b6:3f:68:29:5d:45:2b:cf:27:98:41: e0:a1:6e:66:5c:3d:cd:fa:ad:53:4d:84:cf:63:63: 67:80:9e:3b:a3:64:16:3d:6e:fd:ce:a9:2f:1b:15: e6:35:03:ca:37:59:f1:b0:57:44:44:da:8c:3e:ba: 5e:42:40:55:50:81:e7:0a:19:22:cd:b2:7d:0e:0c: 3c:e6:c1:fc:51:2a:e7:b6:9b:b2:47:01:4a:aa:5d: 23:d8:45:1b:48:19:2c:13:a6:7d:e5:23:17:c1:ec: e3:3f:ef:e9:a0:cc:5a:25:b6:4b:86:17:bd:8d:85: 32:26:93:8f:f8:8b:2a:3e:60:66:e9:18:fa:68:39: 9d:72:9b:e4:2c:f1:58:cf:db:59:c2:af:ce:fb:50: 05:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5E:B3:6F:86:F0:EF:97:B4:FB:9D:94:3A:46:B9:23:34:22:15:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8303e79-3d2e-3c52-9517-df947d7a1e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:be:57:a7:74:95:54:a3:d0:fe:8c:fc:60:7a:eb:98:c8:fc: 66:91:ff:4f:71:6c:71:5d:dc:18:5c:af:81:84:f5:ef:60:c8: 1a:3b:d6:ad:d6:51:1c:60:ba:c9:59:01:97:af:dd:01:52:86: 7c:2f:18:ae:94:2d:e3:07:e2:c0:4e:41:26:05:e6:55:0c:21: c5:c6:98:69:f2:30:4d:7c:5a:22:11:83:80:5b:1b:3d:d2:dc: 93:42:49:3c:54:31:8b:bf:5a:90:53:2e:fe:2c:32:74:1b:96: f0:84:ce:f6:c3:ee:b5:37:da:d1:fe:1e:e8:59:f5:42:75:4f: 15:68:01:7d:0b:42:4a:6c:8d:1e:1e:a1:a8:9b:37:7b:ac:06: 2c:01:04:2f:f9:0d:88:80:96:5a:5e:07:79:7f:45:00:50:30: c8:66:95:5f:45:2c:86:5c:5a:c4:4d:02:5e:d7:60:a3:93:ae: 27:30:b7:64:11:01:9d:7d:ae:de:5c:5d:0e:07:39:a5:42:d5: f3:e7:95:24:b4:e5:89:e8:6c:fd:ee:70:10:4f:c6:a6:08:f5: 3b:b4:34:b2:9a:4a:cd:a3:e4:51:53:27:91:05:64:58:91:6d: 38:0f:7c:2d:ee:d0:24:58:b8:32:1a:bf:e9:c8:18:72:54:36: 7d:fd:b9:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn9ia1gtBHwpyhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzlhYmMwOTAtNjQxZC00NThhLTg2MGEtNGJhZjUyNmVmOTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzdNu9pIzs08t26jRP0wZRq8vVgi5gcbDTFh zI4txXRYayeuHKdN7GP3HfuiJC2YrKjGBw1iYfBDU1OpXxw2lhlULqFQuQ4bkoFT OuZWvzNemHUs3fGeGyDc7EwBQk0a6VKlBjr2oAyBroLktj9oKV1FK88nmEHgoW5m XD3N+q1TTYTPY2NngJ47o2QWPW79zqkvGxXmNQPKN1nxsFdERNqMPrpeQkBVUIHn ChkizbJ9Dgw85sH8USrntpuyRwFKql0j2EUbSBksE6Z95SMXwezjP+/poMxaJbZL hhe9jYUyJpOP+IsqPmBm6Rj6aDmdcpvkLPFYz9tZwq/O+1AFqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxes2+G8O+XtPudlDpGuSM0IhV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjgzMDNlNzktM2QyZS0z YzUyLTk1MTctZGY5NDdkN2ExZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACW+V6d0lVSj0P6M/GB665jI/GaR/09xbHFd3Bhcr4GE9e9gyBo71q3W URxguslZAZev3QFShnwvGK6ULeMH4sBOQSYF5lUMIcXGmGnyME18WiIRg4BbGz3S 3JNCSTxUMYu/WpBTLv4sMnQblvCEzvbD7rU32tH+HuhZ9UJ1TxVoAX0LQkpsjR4e oaibN3usBiwBBC/5DYiAllpeB3l/RQBQMMhmlV9FLIZcWsRNAl7XYKOTricwt2QR AZ19rt5cXQ4HOaVC1fPnlSS05YnobP3ucBBPxqYI9Tu0NLKaSs2j5FFTJ5EFZFiR bTgPfC3u0CRYuDIav+nIGHJUNn39uVQ= -----END CERTIFICATE-----Generated at Wed Jul 29 07:14:05 2026 by rpki-client