$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd150af1-0d40-3678-9f03-f28845047040.roa File: dd150af1-0d40-3678-9f03-f28845047040.roa (raw, json) Hash identifier: /6o0R4p8P4RKc9CftdmLdVhfIWeoQGyss0KqFzmmSqQ= Subject key identifier: 7F:22:FC:A0:3F:33:E3:D7:DB:86:BA:E8:F4:62:8A:80:95:F0:27:10 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BB0B61A03B32BCDC16A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd150af1-0d40-3678-9f03-f28845047040.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.20.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:b0:b6:1a:03:b3:2b:cd:c1:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=55325689-0908-4e63-b1d5-9bfad6e2ab50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3c:37:51:7d:51:1d:8c:d1:d5:d4:82:1c:83: 40:00:0d:78:70:e4:e7:e2:32:df:b8:23:99:69:54: d5:49:da:72:dd:ef:81:71:54:19:e5:d5:a1:a8:32: 70:b4:fc:83:55:77:f7:35:f7:23:89:ba:5b:09:fd: dd:96:9b:ff:3e:d7:96:ba:eb:66:f6:a2:c2:56:05: 72:12:f2:d5:ce:cb:b7:87:bf:46:4b:14:fe:76:1e: 27:95:b0:65:12:bf:b6:06:e3:ba:cf:d6:36:8d:db: 07:8b:63:74:05:60:01:e7:96:af:a2:42:79:3b:f9: 3c:1c:50:a2:62:02:25:88:1b:8e:4c:8e:fe:6d:ac: 18:93:25:df:63:0e:2e:c8:2d:98:ef:b2:55:52:52: c9:51:97:8d:5d:86:80:1b:a5:03:30:9e:00:4a:3c: a5:c0:50:27:bd:d1:a9:5c:03:18:d6:b1:d6:ca:0b: aa:44:67:8d:20:37:db:79:f9:7b:29:12:da:e0:29: 62:ee:90:64:29:c5:8a:7e:c9:05:84:db:b6:18:14: e8:68:01:74:b5:83:3f:22:9d:bb:fa:90:a1:11:8f: fe:9b:5a:f5:c6:1c:25:04:f1:15:8a:bb:58:4d:5a: 1f:76:cb:77:9a:91:61:32:c7:9b:2c:f5:ac:c2:35: a5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:22:FC:A0:3F:33:E3:D7:DB:86:BA:E8:F4:62:8A:80:95:F0:27:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd150af1-0d40-3678-9f03-f28845047040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:9a:80:29:6d:0b:7a:46:63:af:22:9a:67:f0:e6:02:f3:41: 34:11:73:df:6e:8e:18:6e:28:7a:f7:4a:ed:c7:c5:6f:56:45: 0d:b3:c1:11:fc:36:f1:13:53:f6:99:0c:d0:45:ce:9c:1d:95: 83:39:02:dd:63:f7:a7:23:b5:9e:78:0c:a2:53:7e:ed:e7:e2: de:7f:3f:6e:e6:35:9b:58:16:7b:01:92:b1:32:50:28:a6:02: 5a:6b:3c:95:b4:d7:7c:48:ed:5a:0d:2a:95:b7:68:5b:40:eb: d4:05:d7:bc:0c:80:2d:dd:09:03:70:ed:4b:7b:84:21:fd:11: 23:eb:9d:3f:a6:0c:f6:a0:59:d5:76:a6:6a:6a:c1:89:cb:2f: 5b:2d:db:00:d1:d9:55:71:28:b5:5b:87:5a:6c:9f:ba:5f:97: 2e:03:ab:46:e4:07:01:d4:cb:e9:fb:02:fe:ec:13:d8:76:21: 4c:6c:51:bd:70:33:2f:f8:68:28:78:49:0e:4d:6d:7f:ae:a7: a1:b3:78:3f:21:5c:14:4d:16:4d:9d:d0:97:ff:96:10:26:71: 61:75:f9:52:ea:4e:df:29:98:f3:1a:6b:11:cb:8b:27:81:27: 2b:96:b5:a2:ed:01:d3:b4:fc:de:37:09:d6:f8:71:26:7c:9a: fa:eb:5a:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je7C2GgOzK83BagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTUzMjU2ODktMDkwOC00ZTYzLWIxZDUtOWJmYWQ2ZTJhYjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjw3UX1RHYzR1dSCHINAAA14cOTn4jLfuCOZ aVTVSdpy3e+BcVQZ5dWhqDJwtPyDVXf3NfcjibpbCf3dlpv/PteWuutm9qLCVgVy EvLVzsu3h79GSxT+dh4nlbBlEr+2BuO6z9Y2jdsHi2N0BWAB55avokJ5O/k8HFCi YgIliBuOTI7+bawYkyXfYw4uyC2Y77JVUlLJUZeNXYaAG6UDMJ4ASjylwFAnvdGp XAMY1rHWyguqRGeNIDfbefl7KRLa4Cli7pBkKcWKfskFhNu2GBToaAF0tYM/Ip27 +pChEY/+m1r1xhwlBPEVirtYTVofdst3mpFhMsebLPWswjWlKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8i/KA/M+PX24a66PRiioCV8CcQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGQxNTBhZjEtMGQ0MC0z Njc4LTlmMDMtZjI4ODQ1MDQ3MDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKagCltC3pGY68immfw5gLzQTQRc99ujhhuKHr3Su3HxW9WRQ2zwRH8 NvETU/aZDNBFzpwdlYM5At1j96cjtZ54DKJTfu3n4t5/P27mNZtYFnsBkrEyUCim AlprPJW013xI7VoNKpW3aFtA69QF17wMgC3dCQNw7Ut7hCH9ESPrnT+mDPagWdV2 pmpqwYnLL1st2wDR2VVxKLVbh1psn7pfly4Dq0bkBwHUy+n7Av7sE9h2IUxsUb1w My/4aCh4SQ5NbX+up6GzeD8hXBRNFk2d0Jf/lhAmcWF1+VLqTt8pmPMaaxHLiyeB JyuWtaLtAdO0/N43Cdb4cSZ8mvrrWhc= -----END CERTIFICATE-----Generated at Sun Oct 11 23:23:34 2026 by rpki-client