$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9a2d5fb-2233-3d54-86cc-69227af77444.roa File: a9a2d5fb-2233-3d54-86cc-69227af77444.roa (raw, json) Hash identifier: S+/9Hw33JM9PKm5mZMWBatM2KwBn0CtuWRKTHgIGZRc= Subject key identifier: 95:95:EC:D8:1A:73:58:2C:EA:24:45:42:98:34:18:C8:31:F3:0D:06 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E477ACC77650E1ECDBD00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9a2d5fb-2233-3d54-86cc-69227af77444.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 184.21.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:47:7a:cc:77:65:0e:1e:cd:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=84b99f58-f6c1-42c7-be7e-472e8d1e83d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b5:cc:d7:90:2d:9e:52:d8:64:d2:c0:33:af: cc:00:4c:49:30:b5:7c:fd:42:10:27:8e:81:25:6c: 26:8f:66:55:e2:80:58:da:b8:f1:ab:ca:ce:31:23: 24:55:aa:52:56:f0:c9:b1:b7:64:14:27:f9:1e:15: e2:5b:95:53:11:95:4d:b1:7a:7a:53:f8:f4:87:55: a8:3a:a2:d9:de:ce:73:5f:60:7c:1d:a6:19:85:7d: ed:4a:cb:fc:2c:74:c1:55:af:78:95:85:ee:05:db: 16:00:b7:9c:61:7c:fc:9b:f2:a8:95:e1:3f:d6:be: ac:9f:4f:62:c5:73:e7:7a:47:46:22:f6:2c:82:7b: 36:9b:ea:e8:15:57:60:a2:49:39:5b:29:71:26:9c: d3:13:b4:a3:86:10:9d:59:d8:7b:24:9f:94:5c:21: 4d:7e:25:f3:c4:c5:77:6d:20:5a:71:eb:8c:5b:82: 57:8d:fc:01:af:b9:3d:7b:02:c6:8b:49:63:53:56: 08:f5:02:8a:7f:cd:ec:30:3f:47:d9:69:41:5d:95: bb:38:36:ab:a7:4e:b5:48:45:de:f0:6e:ec:93:d9: 64:5c:b5:d2:be:ed:82:67:d8:32:f4:f4:ee:69:16: 1d:0f:86:ce:9e:92:74:45:de:e7:6a:26:f2:9d:95: 9f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:95:EC:D8:1A:73:58:2C:EA:24:45:42:98:34:18:C8:31:F3:0D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9a2d5fb-2233-3d54-86cc-69227af77444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:02:23:11:d1:c9:2f:97:bb:50:0e:2b:11:e2:94:9c:26:f4: 43:2c:96:c8:a1:2c:97:ab:4d:29:0c:af:1a:f7:a6:61:b5:27: e4:7c:ab:7a:57:b3:0b:fe:24:96:85:64:5c:76:44:cb:9b:64: 7c:97:02:12:2a:a9:f2:26:6d:28:d8:c2:06:a4:55:63:58:17: 4b:35:5b:2b:d8:74:9f:9c:a4:ac:16:33:98:da:4f:74:0c:d7: ec:12:e0:48:ae:c2:f6:a1:5e:8e:4f:ed:2f:58:5e:1c:ab:03: 83:70:3b:33:c3:22:33:36:88:38:f1:63:f4:4b:f5:fc:46:3c: 62:c0:7f:76:7d:fa:8b:71:ed:86:81:b6:5d:72:e7:78:de:0a: d8:8d:7c:cb:07:cc:93:07:1f:4d:28:7a:70:29:da:fb:e2:55: fd:13:64:49:08:65:b5:94:49:8d:27:88:02:13:26:43:0d:90: ca:1d:f9:96:72:83:d7:4c:7c:86:89:ca:0e:0e:6d:7f:dc:90: ca:d8:73:66:b5:e9:81:20:12:96:cb:39:6d:e5:fb:26:e9:a8: 6f:74:f0:48:34:59:e3:30:09:0f:3b:60:97:d6:68:41:14:cc: a7:79:9f:73:53:15:b1:90:d5:c2:08:19:d6:e9:20:36:38:79: 86:bd:51:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnkd6zHdlDh7NvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODRiOTlmNTgtZjZjMS00MmM3LWJlN2UtNDcyZThkMWU4M2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLXM15AtnlLYZNLAM6/MAExJMLV8/UIQJ46B JWwmj2ZV4oBY2rjxq8rOMSMkVapSVvDJsbdkFCf5HhXiW5VTEZVNsXp6U/j0h1Wo OqLZ3s5zX2B8HaYZhX3tSsv8LHTBVa94lYXuBdsWALecYXz8m/KoleE/1r6sn09i xXPnekdGIvYsgns2m+roFVdgokk5WylxJpzTE7SjhhCdWdh7JJ+UXCFNfiXzxMV3 bSBaceuMW4JXjfwBr7k9ewLGi0ljU1YI9QKKf83sMD9H2WlBXZW7ODarp061SEXe 8G7sk9lkXLXSvu2CZ9gy9PTuaRYdD4bOnpJ0Rd7naibynZWf5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWV7Ngac1gs6iRFQpg0GMgx8w0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTlhMmQ1ZmItMjIzMy0z ZDU0LTg2Y2MtNjkyMjdhZjc3NDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQCIxHRyS+Xu1AOKxHilJwm9EMslsihLJerTSkMrxr3pmG1J+R8q3pX swv+JJaFZFx2RMubZHyXAhIqqfImbSjYwgakVWNYF0s1WyvYdJ+cpKwWM5jaT3QM 1+wS4EiuwvahXo5P7S9YXhyrA4NwOzPDIjM2iDjxY/RL9fxGPGLAf3Z9+otx7YaB tl1y53jeCtiNfMsHzJMHH00oenAp2vviVf0TZEkIZbWUSY0niAITJkMNkMod+ZZy g9dMfIaJyg4ObX/ckMrYc2a16YEgEpbLOW3l+ybpqG908Eg0WeMwCQ87YJfWaEEU zKd5n3NTFbGQ1cIIGdbpIDY4eYa9UY0= -----END CERTIFICATE-----Generated at Thu Sep 10 09:39:38 2026 by rpki-client