$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28a1c7b3-8faf-39df-a7f2-526634a27e9f.roa File: 28a1c7b3-8faf-39df-a7f2-526634a27e9f.roa (raw, json) Hash identifier: GnF/OdBlpIQhrUvgfARlp3lYK7v8kUaK5/ncJ6S0mzU= Subject key identifier: 13:70:7B:AF:3C:AE:BC:02:48:8C:93:C2:80:97:0E:9C:67:E2:C4:3A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0C3F2C09DEE1DC6568E00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28a1c7b3-8faf-39df-a7f2-526634a27e9f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 184.21.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:c3:f2:c0:9d:ee:1d:c6:56:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0df79c40-14d6-4226-99fc-11629f3d514f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:03:42:88:c3:bb:83:e6:5e:c9:e7:ab:1b:2f: 61:8b:f3:87:9d:bb:a1:00:a3:83:ac:cc:05:1b:30: 5f:fd:1e:15:05:ac:eb:e7:66:0e:67:f9:b0:ca:e5: 92:2b:62:16:e1:5c:b7:d5:55:27:ff:30:1b:4b:87: 60:62:4b:5f:79:6f:fc:23:57:81:ed:d0:81:6d:0a: 3c:96:57:d5:df:58:bc:1d:63:2a:ea:c5:59:84:fe: 8e:86:3c:14:16:29:5d:75:be:29:03:4a:c6:fa:6a: 8b:36:8f:d4:49:18:0f:73:c5:f7:19:8f:ba:a1:75: 2b:32:f2:39:ee:84:f5:bb:04:f1:4a:6b:3d:79:41: a1:b7:2e:ef:34:3f:70:79:9f:60:39:54:6f:66:f7: 61:0a:84:b2:c2:19:8f:6a:55:7b:d5:6e:25:a5:47: a7:87:4d:2d:ee:08:ae:21:97:aa:5a:2d:1d:15:89: cd:64:04:5a:6a:45:b9:4f:e1:b7:69:8c:0e:a1:4c: 92:82:42:0d:37:69:72:59:ab:c0:0e:5f:8f:27:14: b2:24:03:ae:73:ae:bd:ef:e1:09:b1:05:c0:d6:14: 07:13:83:bf:3d:41:60:67:b8:0b:2b:f0:ba:e8:10: 5d:0b:fa:d3:bd:72:94:76:4f:16:27:b1:ed:df:6f: bc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:70:7B:AF:3C:AE:BC:02:48:8C:93:C2:80:97:0E:9C:67:E2:C4:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28a1c7b3-8faf-39df-a7f2-526634a27e9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:37:6e:92:ca:9a:a8:46:38:a7:23:9d:97:04:1f:31:17:ac: 94:45:d8:66:60:c4:11:b4:3c:ea:ab:7d:eb:f2:71:fd:e5:c6: 67:33:67:b7:af:b2:1f:21:58:5f:d4:11:6b:08:5f:7f:ee:6e: 1c:9e:db:ed:9e:e5:bb:b9:92:86:36:62:bd:1a:74:cb:83:b8: 8a:cf:af:11:6c:02:93:12:bc:44:a8:e9:55:eb:27:49:aa:c9: 0f:55:de:46:79:67:d2:94:da:a9:1a:c0:50:c6:2f:58:58:98: a2:78:6d:74:4e:fa:54:f0:50:a6:e8:96:98:7e:ce:d0:79:6e: 2e:10:30:89:26:94:1e:73:24:54:cf:df:5f:0d:97:c2:56:3c: aa:a7:d2:37:93:2d:55:95:64:c4:86:fa:10:7e:c4:d1:70:8f: e4:cb:5e:d0:58:d7:32:7a:de:3d:0e:5c:11:7e:3e:11:04:3c: 15:a3:e4:a1:98:e0:c1:c3:10:9d:de:f9:f3:fb:4f:93:33:cb: 63:0a:4c:47:e1:b8:c2:04:7b:4f:c8:b2:24:12:ca:82:27:51: 81:ff:83:26:66:b7:23:b9:34:01:95:80:c0:62:8b:72:a1:4f: 5a:ea:c9:02:b5:9b:cb:77:a5:08:3e:b4:26:83:b4:5e:22:f8: 0b:a7:2b:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4MPywJ3uHcZWjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MGRmNzljNDAtMTRkNi00MjI2LTk5ZmMtMTE2MjlmM2Q1MTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigNCiMO7g+ZeyeerGy9hi/OHnbuhAKODrMwF GzBf/R4VBazr52YOZ/mwyuWSK2IW4Vy31VUn/zAbS4dgYktfeW/8I1eB7dCBbQo8 llfV31i8HWMq6sVZhP6OhjwUFilddb4pA0rG+mqLNo/USRgPc8X3GY+6oXUrMvI5 7oT1uwTxSms9eUGhty7vND9weZ9gOVRvZvdhCoSywhmPalV71W4lpUenh00t7giu IZeqWi0dFYnNZARaakW5T+G3aYwOoUySgkINN2lyWavADl+PJxSyJAOuc6697+EJ sQXA1hQHE4O/PUFgZ7gLK/C66BBdC/rTvXKUdk8WJ7Ht32+8xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNwe688rrwCSIyTwoCXDpxn4sQ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjhhMWM3YjMtOGZhZi0z OWRmLWE3ZjItNTI2NjM0YTI3ZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBUPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC03bpLKmqhGOKcjnZcEHzEXrJRF2GZgxBG0POqrfevycf3lxmczZ7ev sh8hWF/UEWsIX3/ubhye2+2e5bu5koY2Yr0adMuDuIrPrxFsApMSvESo6VXrJ0mq yQ9V3kZ5Z9KU2qkawFDGL1hYmKJ4bXRO+lTwUKbolph+ztB5bi4QMIkmlB5zJFTP 318Nl8JWPKqn0jeTLVWVZMSG+hB+xNFwj+TLXtBY1zJ63j0OXBF+PhEEPBWj5KGY 4MHDEJ3e+fP7T5Mzy2MKTEfhuMIEe0/IsiQSyoInUYH/gyZmtyO5NAGVgMBii3Kh T1rqyQK1m8t3pQg+tCaDtF4i+AunK/I= -----END CERTIFICATE-----Generated at Fri Mar 13 05:52:39 2026 by rpki-client