$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eb2e47e3-4fa7-32d9-a65c-1e93f105470a.roa File: eb2e47e3-4fa7-32d9-a65c-1e93f105470a.roa (raw, json) Hash identifier: iCXXb7Bg55W1QQ2fytHspHs2v+ialh5OHp07r/tT6tY= Subject key identifier: 02:07:FD:B0:EF:47:57:63:B6:F2:9C:DE:91:96:47:B2:2C:D9:96:67 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BC0B40FD191B4FF324A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eb2e47e3-4fa7-32d9-a65c-1e93f105470a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.21.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:c0:b4:0f:d1:91:b4:ff:32:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3873d7fa-96d1-4264-8634-f5549d1e7ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:31:e9:c9:26:96:48:5e:bc:d0:76:3b:74:a5: b0:ba:1c:76:28:12:ed:dd:cd:a6:d0:c5:7a:97:7f: 66:db:90:e1:35:d5:2f:1f:5c:54:46:50:70:df:23: 33:91:23:25:12:65:53:c8:12:b9:5b:0f:73:74:45: 21:83:cd:17:8e:c2:5e:b8:de:4b:b1:28:9a:71:bd: 9f:2e:dd:bd:94:b6:92:7a:3b:8a:1c:7c:4b:05:8f: 92:06:39:33:44:a9:9c:ba:0e:24:07:9e:5d:7a:94: f2:37:13:fd:05:df:1c:dc:06:3b:e4:89:b3:44:97: 6f:a5:7a:6f:4c:f7:94:4d:4b:d3:6c:3e:73:70:47: 97:ae:a7:2b:f4:dd:ec:de:9d:8f:ae:aa:02:2d:c4: 39:a4:d3:b2:87:f9:e4:fa:8d:0c:35:d8:62:58:5b: 65:5f:b3:cd:9c:f1:88:0d:76:8e:93:f0:90:f9:aa: 01:e5:56:f9:d6:51:11:88:53:5f:5e:bd:25:54:4c: 7f:63:9c:e3:0a:1f:bd:ad:58:2b:c7:f6:fa:29:f5: f9:56:4a:98:67:0b:64:61:ee:f4:44:2d:b5:4d:8a: 85:74:99:57:89:22:12:45:2b:e1:2b:1c:f9:b7:18: a2:4d:c1:c7:d9:f9:39:bf:78:02:e4:6b:66:ee:db: e8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:07:FD:B0:EF:47:57:63:B6:F2:9C:DE:91:96:47:B2:2C:D9:96:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eb2e47e3-4fa7-32d9-a65c-1e93f105470a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c7:2a:0a:2e:fb:a2:0a:e9:e5:b6:53:13:d8:f5:d8:fb:bb: e1:65:21:ae:f0:e7:a3:c2:18:20:7f:26:4e:65:fa:04:6b:9d: c6:33:32:47:2c:96:df:bf:1c:ca:3f:5d:bd:3a:da:33:d3:08: a5:62:96:ec:b1:15:ba:61:40:9e:3a:93:cd:e3:2a:c1:51:a2: fc:c7:48:55:65:94:99:e7:ce:95:54:f2:a1:15:f8:51:15:be: c9:4c:51:ff:62:7d:34:6e:34:38:ab:16:8b:02:bf:d0:29:5e: 60:47:42:b2:8a:7e:ed:1d:83:b2:99:ce:bf:fa:06:e4:1d:fc: e6:09:da:94:94:3e:7a:40:a9:fa:60:77:6d:83:f1:50:f7:cf: 59:54:ca:c7:87:49:59:08:63:50:3a:48:86:d6:fa:3d:9a:87: 22:05:7e:4c:ef:13:b4:62:5c:d1:80:29:4d:af:dd:dc:05:5b: 9b:52:45:06:5a:e0:49:35:6b:c9:06:7d:82:70:cf:5d:2a:c3: f7:f2:47:d5:55:fc:5f:56:71:59:5c:4b:c5:a5:14:5f:85:59: b7:e3:20:87:35:5e:8b:1d:7e:dc:b3:4a:4e:6c:29:eb:d0:08: d3:cb:5a:3c:d7:0a:48:4e:64:7d:5e:4c:38:6a:6c:bf:8e:5e: b0:6a:09:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je8C0D9GRtP8ySgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mzg3M2Q3ZmEtOTZkMS00MjY0LTg2MzQtZjU1NDlkMWU3YWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzHpySaWSF680HY7dKWwuhx2KBLt3c2m0MV6 l39m25DhNdUvH1xURlBw3yMzkSMlEmVTyBK5Ww9zdEUhg80XjsJeuN5LsSiacb2f Lt29lLaSejuKHHxLBY+SBjkzRKmcug4kB55depTyNxP9Bd8c3AY75ImzRJdvpXpv TPeUTUvTbD5zcEeXrqcr9N3s3p2PrqoCLcQ5pNOyh/nk+o0MNdhiWFtlX7PNnPGI DXaOk/CQ+aoB5Vb51lERiFNfXr0lVEx/Y5zjCh+9rVgrx/b6KfX5VkqYZwtkYe70 RC21TYqFdJlXiSISRSvhKxz5txiiTcHH2fk5v3gC5Gtm7tvovwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIH/bDvR1djtvKc3pGWR7Is2ZZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWIyZTQ3ZTMtNGZhNy0z MmQ5LWE2NWMtMWU5M2YxMDU0NzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvHKgou+6IK6eW2UxPY9dj7u+FlIa7w56PCGCB/Jk5l+gRrncYzMkcs lt+/HMo/Xb062jPTCKViluyxFbphQJ46k83jKsFRovzHSFVllJnnzpVU8qEV+FEV vslMUf9ifTRuNDirFosCv9ApXmBHQrKKfu0dg7KZzr/6BuQd/OYJ2pSUPnpAqfpg d22D8VD3z1lUyseHSVkIY1A6SIbW+j2ahyIFfkzvE7RiXNGAKU2v3dwFW5tSRQZa 4Ek1a8kGfYJwz10qw/fyR9VV/F9WcVlcS8WlFF+FWbfjIIc1XosdftyzSk5sKevQ CNPLWjzXCkhOZH1eTDhqbL+OXrBqCZQ= -----END CERTIFICATE-----Generated at Sun Sep 27 22:16:53 2026 by rpki-client