$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fb5dedd-9078-34f2-a9b5-818a7d487429.roa File: 1fb5dedd-9078-34f2-a9b5-818a7d487429.roa (raw, json) Hash identifier: dPbm2SpYmS7bG60OX0Ya9Xgn3uWPbDNE9NWMsYErDs4= Subject key identifier: E1:B1:DE:36:12:DA:68:F4:D6:67:3D:AD:16:86:13:E0:19:51:BC:43 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E402E25C3FC24E0605A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fb5dedd-9078-34f2-a9b5-818a7d487429.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 184.21.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:40:2e:25:c3:fc:24:e0:60:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b5f8ce09-6780-49a4-9693-653141869a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bf:65:b3:8b:a4:f1:8f:48:a4:93:15:cb:54: e4:cf:a5:06:04:86:5d:82:33:08:7b:82:0f:0c:4a: 33:7e:0e:37:7c:37:92:50:a8:0e:a4:33:6d:e0:04: ff:52:22:c4:02:2d:8b:a5:d7:88:fd:5a:9f:a0:ba: af:76:33:63:6d:35:fe:d8:ca:a5:94:13:68:15:1a: 33:06:7b:e8:a1:8b:ff:5b:71:17:bd:7f:80:55:2c: 6b:be:74:c8:2f:74:81:b3:16:54:a0:4f:eb:6e:fd: 1e:f4:7f:33:2f:13:11:d7:4e:03:4c:9d:ca:6e:7b: 05:63:46:01:01:41:02:00:ba:39:21:37:42:48:3a: 77:fb:ca:d0:c6:0a:3a:89:5b:c2:59:70:67:68:29: b1:80:81:45:71:05:12:4d:2b:e4:b4:b4:13:16:7a: 4f:e7:46:4b:98:c6:e5:20:ae:dc:a9:06:0c:58:93: 44:27:56:82:7c:66:36:e8:50:c5:4d:d2:c3:d8:45: 81:8f:fd:cf:70:b9:18:6a:60:a9:a4:1c:ae:bf:64: 0e:76:59:cc:68:af:e6:b0:e3:8c:3c:ff:2a:f2:dc: 27:e9:2b:97:45:c0:1f:92:fd:3a:d2:d2:87:87:b7: 98:02:a0:bf:0f:58:ca:f7:1d:b6:bd:4a:43:43:e0: 60:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B1:DE:36:12:DA:68:F4:D6:67:3D:AD:16:86:13:E0:19:51:BC:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fb5dedd-9078-34f2-a9b5-818a7d487429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:cc:83:2d:c1:3b:a6:24:bc:d1:51:32:f0:65:15:c7:26:b9: 81:d1:3f:8c:52:32:64:cb:55:7b:c1:69:a2:0b:4d:98:81:e0: 69:8d:f3:01:29:cb:18:dc:e0:f2:d6:8e:a8:a0:28:4a:08:dd: 76:5d:b3:fe:02:5b:fc:fb:68:83:7f:61:59:3a:f1:5b:40:eb: 41:e0:99:0d:86:75:01:85:9e:77:a1:06:3d:68:e5:4c:d6:64: 9e:ea:86:87:05:f0:e0:19:60:87:7b:e5:95:23:19:ec:7b:85: 5e:30:2a:25:78:0d:3d:14:dc:50:b3:94:a7:53:b8:48:9f:ea: 95:2a:a2:96:97:6c:43:07:da:03:a2:fa:6c:72:60:0e:49:6a: db:98:1b:43:c9:92:9d:ce:ee:5f:ed:01:8b:63:0e:8d:46:e5: 54:ab:fa:3a:45:40:7c:f1:ab:7e:5e:aa:d8:2a:b3:bf:da:0a: 9b:61:20:81:44:86:54:50:70:6d:78:f6:54:4b:c4:29:c2:a2: ac:63:43:3b:5e:74:25:26:be:c5:df:ef:9b:75:e5:99:79:5c: 49:34:5f:14:2d:4c:6f:54:5e:34:a0:8b:1b:c5:03:80:3d:1e: 9d:2c:be:80:36:a0:8b:16:9d:ec:12:59:ee:c8:a5:43:24:de: df:2c:43:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnkAuJcP8JOBgWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjVmOGNlMDktNjc4MC00OWE0LTk2OTMtNjUzMTQxODY5YTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L9ls4uk8Y9IpJMVy1Tkz6UGBIZdgjMIe4IP DEozfg43fDeSUKgOpDNt4AT/UiLEAi2LpdeI/VqfoLqvdjNjbTX+2MqllBNoFRoz BnvooYv/W3EXvX+AVSxrvnTIL3SBsxZUoE/rbv0e9H8zLxMR104DTJ3KbnsFY0YB AUECALo5ITdCSDp3+8rQxgo6iVvCWXBnaCmxgIFFcQUSTSvktLQTFnpP50ZLmMbl IK7cqQYMWJNEJ1aCfGY26FDFTdLD2EWBj/3PcLkYamCppByuv2QOdlnMaK/msOOM PP8q8twn6SuXRcAfkv060tKHh7eYAqC/D1jK9x22vUpDQ+BgOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGx3jYS2mj01mc9rRaGE+AZUbxDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWZiNWRlZGQtOTA3OC0z NGYyLWE5YjUtODE4YTdkNDg3NDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBUCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjMgy3BO6YkvNFRMvBlFccmuYHRP4xSMmTLVXvBaaILTZiB4GmN8wEp yxjc4PLWjqigKEoI3XZds/4CW/z7aIN/YVk68VtA60HgmQ2GdQGFnnehBj1o5UzW ZJ7qhocF8OAZYId75ZUjGex7hV4wKiV4DT0U3FCzlKdTuEif6pUqopaXbEMH2gOi +mxyYA5JatuYG0PJkp3O7l/tAYtjDo1G5VSr+jpFQHzxq35eqtgqs7/aCpthIIFE hlRQcG149lRLxCnCoqxjQztedCUmvsXf75t15Zl5XEk0XxQtTG9UXjSgixvFA4A9 Hp0svoA2oIsWnewSWe7IpUMk3t8sQ80= -----END CERTIFICATE-----Generated at Thu Sep 10 11:01:08 2026 by rpki-client