$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd606c9a-9adf-3ec6-b3f6-f301bffb25a3.roa File: dd606c9a-9adf-3ec6-b3f6-f301bffb25a3.roa (raw, json) Hash identifier: SiMiH2+ovMTLBcBXiYPjyNy+x7gO+529x85DjRY5SNA= Subject key identifier: 61:09:DF:21:09:A7:CB:2D:15:49:70:E1:C7:A6:63:96:CA:3A:29:96 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79FE88288214580B3FAFD40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd606c9a-9adf-3ec6-b3f6-f301bffb25a3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 184.21.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:e8:82:88:21:45:80:b3:fa:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a2836d8d-ff37-4bb1-a9f0-58a0e8219c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:26:81:fe:ba:69:2b:3e:2f:b6:d1:5d:8c:75: 9a:b6:5d:49:05:56:3c:1c:6e:6d:82:11:a7:ba:e5: 66:1e:a6:72:f9:6c:27:7c:4a:2b:d9:85:19:77:5a: 02:4c:0b:36:b3:4d:f0:9a:56:a7:3e:3d:fb:d5:6d: 8d:77:de:1b:68:3e:f5:53:e4:4c:44:bf:44:85:8d: bf:f2:90:1e:9c:3c:3c:a1:36:25:37:eb:44:76:4b: 24:2a:81:c1:77:bb:be:fa:9c:00:08:d7:6c:b5:de: 66:3d:a6:f3:8c:50:58:d0:ef:45:fa:47:66:bd:8b: 3b:df:7a:67:6e:14:b4:7b:70:f6:1d:f4:a7:fc:46: 39:7f:33:18:29:dd:5d:35:ee:2e:51:50:dc:10:80: 8e:83:11:dc:7e:f3:25:12:f1:c4:d6:9e:e3:c2:5d: 53:a8:a0:da:95:2c:01:57:68:1d:1a:ee:61:b0:a4: e7:8f:01:43:e7:ff:03:a5:c1:47:1f:6c:da:2d:e0: ce:12:81:3f:c9:fb:f9:0d:81:ec:38:a2:d4:7f:b2: 02:e2:23:d5:f1:af:2d:b0:7c:7a:cf:57:6f:cc:90: 0a:27:1a:08:b0:15:fb:0c:8b:07:c9:6e:3f:37:8c: 3d:88:76:8c:a5:c6:1c:57:92:00:02:68:d5:ef:2e: 73:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:09:DF:21:09:A7:CB:2D:15:49:70:E1:C7:A6:63:96:CA:3A:29:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd606c9a-9adf-3ec6-b3f6-f301bffb25a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:9c:7b:b8:94:d1:9d:8a:f9:fc:28:0b:94:e7:76:75:eb:97: 2e:d6:bb:de:5d:5e:99:fe:c5:ab:f1:53:b3:e5:34:27:80:5a: 9a:98:db:cf:a5:ac:8a:f7:0f:60:76:a0:6f:90:2d:ed:02:55: 69:05:22:cc:f0:17:e4:4a:bc:2a:47:9c:33:af:e5:f7:67:f1: 25:71:cb:47:61:5b:e0:18:e1:03:ff:de:38:e8:8b:40:4f:53: 88:8a:f9:04:a5:dc:6c:6e:8c:cd:f3:88:f0:bf:3e:31:af:11: 41:b3:82:e9:cb:2f:75:d3:60:7e:9b:65:26:10:72:96:b8:69: 04:47:45:c3:4e:db:e6:4b:21:bd:40:89:2d:5b:ef:ef:03:8e: 3d:53:16:25:e9:31:b0:0a:a7:7e:fa:72:1f:f4:d1:bd:08:fa: 7f:10:3d:5e:9e:a2:86:0c:dc:43:1a:0c:e0:ed:b3:db:d9:56: 9e:d7:a5:ea:5a:74:d3:86:ec:92:c4:a9:7d:b6:b9:72:1f:c2: cb:d1:51:80:30:e3:1c:88:a7:46:2f:5b:ad:b4:25:70:2c:79: 85:54:a8:8b:e6:54:a8:94:40:45:b8:63:a7:7c:cb:35:b0:34: 63:de:d9:97:3c:ce:7d:40:4b:f4:06:7c:d8:70:23:55:bc:88: c6:2b:71:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn+iCiCFFgLP6/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTI4MzZkOGQtZmYzNy00YmIxLWE5ZjAtNThhMGU4MjE5Yzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSaB/rppKz4vttFdjHWatl1JBVY8HG5tghGn uuVmHqZy+WwnfEor2YUZd1oCTAs2s03wmlanPj371W2Nd94baD71U+RMRL9EhY2/ 8pAenDw8oTYlN+tEdkskKoHBd7u++pwACNdstd5mPabzjFBY0O9F+kdmvYs733pn bhS0e3D2HfSn/EY5fzMYKd1dNe4uUVDcEICOgxHcfvMlEvHE1p7jwl1TqKDalSwB V2gdGu5hsKTnjwFD5/8DpcFHH2zaLeDOEoE/yfv5DYHsOKLUf7IC4iPV8a8tsHx6 z1dvzJAKJxoIsBX7DIsHyW4/N4w9iHaMpcYcV5IAAmjV7y5zfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEJ3yEJp8stFUlw4cemY5bKOimWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGQ2MDZjOWEtOWFkZi0z ZWM2LWIzZjYtZjMwMWJmZmIyNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALece7iU0Z2K+fwoC5TndnXrly7Wu95dXpn+xavxU7PlNCeAWpqY28+l rIr3D2B2oG+QLe0CVWkFIszwF+RKvCpHnDOv5fdn8SVxy0dhW+AY4QP/3jjoi0BP U4iK+QSl3GxujM3ziPC/PjGvEUGzgunLL3XTYH6bZSYQcpa4aQRHRcNO2+ZLIb1A iS1b7+8Djj1TFiXpMbAKp376ch/00b0I+n8QPV6eooYM3EMaDODts9vZVp7Xpepa dNOG7JLEqX22uXIfwsvRUYAw4xyIp0YvW620JXAseYVUqIvmVKiUQEW4Y6d8yzWw NGPe2Zc8zn1AS/QGfNhwI1W8iMYrcT8= -----END CERTIFICATE-----Generated at Wed Jul 29 04:17:40 2026 by rpki-client