$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2def98c3-f620-3771-8da0-1121464da590.roa File: 2def98c3-f620-3771-8da0-1121464da590.roa (raw, json) Hash identifier: w6kUzeZUqbdxMCF1A38rD+7pwAGY8zkoG+msv/B82b8= Subject key identifier: 98:C9:69:54:25:2E:B2:24:16:76:A1:56:E4:C8:34:B7:77:EA:2B:8F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0BB7F3FBB3367850CF080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2def98c3-f620-3771-8da0-1121464da590.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 184.20.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:bb:7f:3f:bb:33:67:85:0c:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=e9dc0a8c-3e0a-4ca4-9f4b-cc857a7d3ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6f:b3:23:f9:00:d6:d8:07:d8:c3:e3:01:69: 9f:7c:e8:eb:5c:35:8d:82:4d:8f:c3:8c:7f:b4:af: 69:a1:bc:f9:9c:5a:4f:2d:07:61:15:12:b2:69:a3: 52:0f:24:23:f2:b7:4f:fc:19:e9:d6:bf:5e:25:8a: 2f:1b:d5:91:0b:11:03:b8:dc:53:66:0f:01:5b:fd: 12:f0:a4:aa:12:11:a0:a1:d8:d3:f6:23:cb:01:b6: 58:c1:cc:c0:93:65:8f:dc:f7:54:18:96:0b:94:ef: 7b:66:87:84:c0:44:3c:d8:09:04:9c:fc:ea:f6:a5: 35:a9:da:94:f7:55:09:3c:73:2e:12:14:51:32:8f: f7:8b:72:ce:75:ec:8a:a2:60:7c:38:01:38:ba:87: cf:74:7e:ae:35:b5:42:af:89:94:51:60:cd:10:c7: fa:c7:d4:3a:b3:23:9f:75:b8:1e:38:09:70:43:28: 9d:ff:d0:2e:46:ae:44:33:c6:f8:3b:3e:ca:03:4b: 0f:17:84:9a:2c:e5:cc:32:f5:4e:99:98:74:ed:77: 21:c6:57:c0:e3:17:56:93:ee:77:81:9e:ec:66:0c: 4c:af:2d:41:97:c7:3d:a4:b7:14:a7:23:40:09:a9: af:80:b0:9c:e0:22:79:08:a2:3a:94:38:f6:25:1a: 61:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C9:69:54:25:2E:B2:24:16:76:A1:56:E4:C8:34:B7:77:EA:2B:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2def98c3-f620-3771-8da0-1121464da590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:a6:fc:bd:45:22:ec:66:20:74:7c:36:e4:36:1e:5b:e6:a8: 14:ee:d6:88:d8:9d:e2:23:9e:40:b6:f7:08:ec:79:53:56:67: b9:72:26:17:05:4d:e0:a1:91:82:d5:74:5d:f1:03:27:cb:8c: f9:44:e4:ff:96:02:d7:43:1d:0f:d5:61:5f:3f:2e:1c:4f:dc: 03:78:60:81:b0:eb:cd:17:e9:68:d2:bb:13:53:9a:03:17:bf: fc:67:d0:60:00:9b:6f:ae:e7:30:23:de:26:b6:63:5f:1e:a1: 1b:ad:e9:db:3c:f0:96:a3:db:01:4d:08:79:56:5a:65:14:60: 28:ef:93:73:b3:b6:5a:c4:cb:f0:35:37:58:f6:cc:63:68:82: 6a:15:2d:3f:99:06:f4:8e:86:f0:7c:15:89:c6:c5:eb:8c:e6: 97:3e:2d:5d:cd:90:5e:ff:4b:95:7e:6a:05:24:53:b9:e6:de: ad:da:4a:59:b1:61:af:4e:68:9f:da:93:bf:82:6e:55:97:72: 8f:d1:62:5d:ab:d7:16:c3:f6:2d:30:05:20:cd:f4:d7:94:c9: a3:87:94:8b:cf:b0:e3:17:51:1c:70:47:c0:a9:1e:c6:4f:5c: b6:01:89:d4:bf:3a:3a:37:01:29:3a:ad:be:a9:e0:d4:d9:fc: 13:a3:c5:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Lt/P7szZ4UM8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZTlkYzBhOGMtM2UwYS00Y2E0LTlmNGItY2M4NTdhN2QzYmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm+zI/kA1tgH2MPjAWmffOjrXDWNgk2Pw4x/ tK9pobz5nFpPLQdhFRKyaaNSDyQj8rdP/Bnp1r9eJYovG9WRCxEDuNxTZg8BW/0S 8KSqEhGgodjT9iPLAbZYwczAk2WP3PdUGJYLlO97ZoeEwEQ82AkEnPzq9qU1qdqU 91UJPHMuEhRRMo/3i3LOdeyKomB8OAE4uofPdH6uNbVCr4mUUWDNEMf6x9Q6syOf dbgeOAlwQyid/9AuRq5EM8b4Oz7KA0sPF4SaLOXMMvVOmZh07XchxlfA4xdWk+53 gZ7sZgxMry1Bl8c9pLcUpyNACamvgLCc4CJ5CKI6lDj2JRphjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjJaVQlLrIkFnahVuTINLd36iuPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmRlZjk4YzMtZjYyMC0z NzcxLThkYTAtMTEyMTQ2NGRhNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKm/L1FIuxmIHR8NuQ2HlvmqBTu1ojYneIjnkC29wjseVNWZ7lyJhcF TeChkYLVdF3xAyfLjPlE5P+WAtdDHQ/VYV8/LhxP3AN4YIGw680X6WjSuxNTmgMX v/xn0GAAm2+u5zAj3ia2Y18eoRut6ds88Jaj2wFNCHlWWmUUYCjvk3OztlrEy/A1 N1j2zGNogmoVLT+ZBvSOhvB8FYnGxeuM5pc+LV3NkF7/S5V+agUkU7nm3q3aSlmx Ya9OaJ/ak7+CblWXco/RYl2r1xbD9i0wBSDN9NeUyaOHlIvPsOMXURxwR8CpHsZP XLYBidS/Ojo3ASk6rb6p4NTZ/BOjxR8= -----END CERTIFICATE-----Generated at Fri Mar 13 05:53:36 2026 by rpki-client