$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f9f25293-8d7d-3742-b4d8-13bb9640d0aa.roa File: f9f25293-8d7d-3742-b4d8-13bb9640d0aa.roa (raw, json) Hash identifier: 5hqe/J2xBMoJOr2lIuwi5sK/RLpJmYLHk7nFs1SXurM= Subject key identifier: 70:B0:5A:D7:AC:C3:66:07:BD:2E:AB:3B:33:63:91:37:8F:05:69:4A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983F9C4372157A666798D80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f9f25293-8d7d-3742-b4d8-13bb9640d0aa.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.20.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:f9:c4:37:21:57:a6:66:79:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3956ac48-2c1f-4569-aae8-41032818c75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:89:1b:c9:4e:dc:c7:df:1a:74:b3:ad:51:7c: 38:f5:89:77:e5:8d:30:df:cf:b5:3a:52:b2:5e:64: 7e:d2:14:c9:f3:b4:94:59:e2:04:e4:93:5c:8c:42: a5:05:91:8a:ad:2f:f3:80:66:bd:2b:c7:17:ac:b1: cf:fa:8e:37:bb:45:e6:b6:71:55:6a:77:97:2e:72: b7:6a:3e:f6:75:9b:67:44:3b:62:22:d5:0a:38:40: 32:f0:0e:0d:3b:c3:8d:81:30:ec:72:4f:ec:41:cc: fe:ed:a8:6c:33:05:04:79:c9:0c:63:b5:f9:37:fe: ce:c0:12:1b:94:f5:54:41:4a:45:cc:ba:b3:c2:be: 48:54:2d:90:38:8a:e1:ec:bd:cd:e7:3f:bc:8b:9e: e8:b3:49:25:c6:fa:52:cf:a3:43:85:bb:9e:75:40: ef:3f:b8:f7:02:2b:3b:c3:fc:0c:e9:37:97:94:be: 7a:05:23:d6:c0:63:35:55:20:0f:ea:e8:8e:8f:b6: 6a:fc:48:c7:36:39:c1:40:b4:f0:49:b4:27:d4:29: 0d:c5:11:78:31:ff:d1:30:b0:08:5d:1b:e2:87:1a: eb:33:8b:c7:70:f6:6b:2f:32:c1:aa:08:14:7b:e6: de:2c:3e:c3:a2:b2:4a:47:5b:99:6c:72:50:a4:71: e4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B0:5A:D7:AC:C3:66:07:BD:2E:AB:3B:33:63:91:37:8F:05:69:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f9f25293-8d7d-3742-b4d8-13bb9640d0aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:de:2c:55:c3:d0:f2:3c:56:b4:1d:27:ee:2d:4a:f0:35:a8: b5:38:7a:43:44:32:7c:72:f0:bf:6d:50:23:95:55:a3:1f:e1: f8:be:1b:a2:1d:26:ca:70:2d:48:11:4e:13:be:8c:86:12:5f: a5:f2:61:60:42:80:e1:e7:30:8d:93:bc:c2:f9:e9:43:4e:29: 5a:db:80:45:d9:3b:41:a7:4e:bb:9d:bd:50:fb:82:85:1b:2f: d2:39:0d:af:0f:a9:8b:cb:03:e4:d7:8c:c6:dc:f3:a8:62:c9: 71:65:81:7c:2d:20:97:32:ca:fc:13:51:c8:48:16:4d:9c:9f: b6:9b:9c:e1:2b:3f:96:38:e9:85:fc:7b:27:53:06:cd:0d:5b: 22:bc:9c:77:ee:be:bd:d8:b8:d8:3c:ed:5f:91:79:cf:34:d7: 53:07:fd:0f:ad:1e:c0:70:30:16:65:66:1a:35:ef:93:7f:bf: 4b:cc:f6:12:60:df:76:be:3c:b3:05:3a:47:27:5a:cb:b3:c9: 00:73:ef:79:01:83:a2:cc:78:35:11:b6:f3:1b:02:1e:22:0d: 52:10:96:8c:33:21:a3:67:b7:b2:18:8d:4d:89:de:b1:4c:86: 5d:1d:26:da:db:cc:5e:1c:d7:77:93:f1:e2:a6:74:f0:20:63: e3:92:fe:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg/nENyFXpmZ5jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mzk1NmFjNDgtMmMxZi00NTY5LWFhZTgtNDEwMzI4MThjNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgokbyU7cx98adLOtUXw49Yl35Y0w38+1OlKy XmR+0hTJ87SUWeIE5JNcjEKlBZGKrS/zgGa9K8cXrLHP+o43u0XmtnFVaneXLnK3 aj72dZtnRDtiItUKOEAy8A4NO8ONgTDsck/sQcz+7ahsMwUEeckMY7X5N/7OwBIb lPVUQUpFzLqzwr5IVC2QOIrh7L3N5z+8i57os0klxvpSz6NDhbuedUDvP7j3Ais7 w/wM6TeXlL56BSPWwGM1VSAP6uiOj7Zq/EjHNjnBQLTwSbQn1CkNxRF4Mf/RMLAI XRvihxrrM4vHcPZrLzLBqggUe+beLD7DorJKR1uZbHJQpHHkMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCwWtesw2YHvS6rOzNjkTePBWlKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjlmMjUyOTMtOGQ3ZC0z NzQyLWI0ZDgtMTNiYjk2NDBkMGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBR/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7eLFXD0PI8VrQdJ+4tSvA1qLU4ekNEMnxy8L9tUCOVVaMf4fi+G6Id JspwLUgRThO+jIYSX6XyYWBCgOHnMI2TvML56UNOKVrbgEXZO0GnTrudvVD7goUb L9I5Da8PqYvLA+TXjMbc86hiyXFlgXwtIJcyyvwTUchIFk2cn7abnOErP5Y46YX8 eydTBs0NWyK8nHfuvr3YuNg87V+Rec8011MH/Q+tHsBwMBZlZho175N/v0vM9hJg 33a+PLMFOkcnWsuzyQBz73kBg6LMeDURtvMbAh4iDVIQlowzIaNnt7IYjU2J3rFM hl0dJtrbzF4c13eT8eKmdPAgY+OS/qs= -----END CERTIFICATE-----Generated at Sat Sep 26 08:54:04 2026 by rpki-client