$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d571037f-3aa3-32aa-89eb-4c2564243023.roa File: d571037f-3aa3-32aa-89eb-4c2564243023.roa (raw, json) Hash identifier: 9ObN9YbVRr2qT8fgJ2Mg8evZUM4XEn1QW5ywJaibrnA= Subject key identifier: E5:89:36:8D:1E:D0:6D:B5:34:15:FF:A1:43:26:37:C9:2F:DA:50:5D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059C271B4380D9C5357D7440 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d571037f-3aa3-32aa-89eb-4c2564243023.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 184.21.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:27:1b:43:80:d9:c5:35:7d:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=3bb944aa-694d-46a9-a103-e9b249096284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c2:98:29:3e:16:f3:3f:d4:4a:0c:f7:ad:d7: d9:b1:18:03:54:c7:76:c8:2e:5a:23:b8:49:aa:48: 2c:4b:6f:a9:49:9c:94:ff:64:39:e0:99:35:51:a4: 5a:04:da:88:fe:50:b5:15:55:d4:34:9e:de:c6:3d: d6:12:d9:98:ad:07:14:97:f6:62:07:bd:1a:31:4e: c9:35:08:44:67:60:39:fe:af:1b:69:ef:12:9b:a1: a3:e4:ba:c8:61:e1:6e:55:96:a5:c2:c4:8d:1d:80: 98:8c:f7:c3:72:65:90:47:c0:f2:a1:08:fd:ce:46: 57:6e:24:7a:f0:69:c0:fe:aa:40:ce:d6:bf:ab:6a: 59:fa:08:3a:60:03:d1:cb:76:71:99:bf:36:33:44: b5:75:18:f4:75:f7:a8:46:99:84:a4:57:16:71:59: 9c:ff:24:10:72:b5:c7:92:6d:f1:5c:e8:4b:0b:2b: 45:e9:0c:09:a4:49:cc:7f:e8:40:1f:53:0f:05:3a: 27:99:31:a5:c2:56:5b:28:97:19:dd:14:80:09:df: 2f:1b:73:ab:00:3b:b5:99:09:64:dc:c6:63:db:99: 74:cb:81:2c:16:66:2c:db:f6:19:ad:93:f2:f6:b7: 7b:09:7d:b5:cf:88:76:c2:20:30:6d:f0:d5:a1:94: b6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:89:36:8D:1E:D0:6D:B5:34:15:FF:A1:43:26:37:C9:2F:DA:50:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d571037f-3aa3-32aa-89eb-4c2564243023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:5b:86:d5:8b:4f:91:af:45:2a:70:94:66:6d:6e:5f:46:9f: 31:90:04:b2:30:a1:f2:41:ac:d3:51:fa:1e:5f:a8:8b:b6:ee: 24:14:14:6a:bd:a8:8f:10:ce:43:56:1a:93:b1:59:5f:0a:bd: c2:da:6b:a8:34:76:31:de:87:b0:d8:44:32:31:44:2e:f2:a2: a3:ba:38:a2:b7:6d:5d:cb:6f:4d:95:62:f0:51:10:88:27:11: 52:f1:aa:5e:39:0d:6b:c2:40:64:13:36:04:96:c9:6c:03:45: 7b:a1:e8:06:f2:91:f9:4b:06:f1:28:2e:5b:75:e4:c3:49:d0: 63:df:ee:27:86:83:39:5a:21:c4:4f:03:09:0d:4a:66:8b:41: e5:c6:8c:a5:61:88:1c:2e:cb:af:66:6f:37:2f:26:c5:51:ba: ef:42:24:e5:78:64:e3:5f:5f:08:16:5c:b0:d7:ae:13:bb:c7: 19:b5:1f:14:74:8d:c7:9f:f0:db:6f:19:d8:70:07:42:de:e4: f8:47:f7:e5:71:74:d2:8f:02:64:ff:1e:4d:07:14:21:12:51: 60:e7:be:87:a0:01:54:88:29:0c:49:2c:2e:6c:7d:5d:bf:4b: 1a:ed:1d:0e:63:87:6f:5e:b8:1e:38:71:a6:97:84:b0:6c:b2: 71:de:4c:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnCcbQ4DZxTV9dEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk M2JiOTQ0YWEtNjk0ZC00NmE5LWExMDMtZTliMjQ5MDk2Mjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcKYKT4W8z/USgz3rdfZsRgDVMd2yC5aI7hJ qkgsS2+pSZyU/2Q54Jk1UaRaBNqI/lC1FVXUNJ7exj3WEtmYrQcUl/ZiB70aMU7J NQhEZ2A5/q8bae8Sm6Gj5LrIYeFuVZalwsSNHYCYjPfDcmWQR8DyoQj9zkZXbiR6 8GnA/qpAzta/q2pZ+gg6YAPRy3Zxmb82M0S1dRj0dfeoRpmEpFcWcVmc/yQQcrXH km3xXOhLCytF6QwJpEnMf+hAH1MPBTonmTGlwlZbKJcZ3RSACd8vG3OrADu1mQlk 3MZj25l0y4EsFmYs2/YZrZPy9rd7CX21z4h2wiAwbfDVoZS2oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWJNo0e0G21NBX/oUMmN8kv2lBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDU3MTAzN2YtM2FhMy0z MmFhLTg5ZWItNGMyNTY0MjQzMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBVjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBbhtWLT5GvRSpwlGZtbl9GnzGQBLIwofJBrNNR+h5fqIu27iQUFGq9 qI8QzkNWGpOxWV8KvcLaa6g0djHeh7DYRDIxRC7yoqO6OKK3bV3Lb02VYvBREIgn EVLxql45DWvCQGQTNgSWyWwDRXuh6AbykflLBvEoLlt15MNJ0GPf7ieGgzlaIcRP AwkNSmaLQeXGjKVhiBwuy69mbzcvJsVRuu9CJOV4ZONfXwgWXLDXrhO7xxm1HxR0 jcef8NtvGdhwB0Le5PhH9+VxdNKPAmT/Hk0HFCESUWDnvoegAVSIKQxJLC5sfV2/ SxrtHQ5jh29euB44caaXhLBssnHeTBI= -----END CERTIFICATE-----Generated at Sat Jun 13 23:35:16 2026 by rpki-client