$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be681068-e4e1-3d7b-a576-f250d1138324.roa File: be681068-e4e1-3d7b-a576-f250d1138324.roa (raw, json) Hash identifier: TBo+w5ZJG83DqVGzPkmKVbGTF6VeA0Mx1xNUlqSg+Jk= Subject key identifier: B9:53:83:63:E4:90:F9:C2:D0:E6:37:F8:14:FE:A0:B0:1A:06:5D:EC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0D3F0BB55D44616A06700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be681068-e4e1-3d7b-a576-f250d1138324.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 184.63.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:d3:f0:bb:55:d4:46:16:a0:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=789dcaac-0741-40ad-bf61-255974b8f54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:92:c4:78:2a:2c:20:56:54:73:07:b5:90:3d: fa:ce:c6:1f:db:08:cb:2e:9b:d0:10:c0:76:ae:ad: 83:1b:f1:72:f9:fd:40:08:30:0c:04:74:45:c8:09: b7:a5:d3:ec:61:c4:4f:38:06:36:35:84:1a:98:3e: 82:c8:8f:07:a0:0f:e4:8e:9a:74:fa:04:ff:fb:07: d5:9b:c6:ca:c6:54:f7:b7:9d:55:8f:63:bf:57:a9: da:5d:e9:4e:25:cb:28:91:fd:cc:62:2e:47:e9:df: 38:d8:f0:48:4c:f5:74:de:f3:f1:82:5d:a0:21:c8: a0:9e:09:eb:99:b4:3e:e9:53:92:69:b9:4f:02:aa: c8:25:cf:e9:48:6c:d8:9b:ee:5c:01:49:cb:ca:c4: bd:62:82:be:8e:58:64:98:dd:93:07:65:f9:34:15: a1:55:50:62:f2:37:10:30:af:40:da:2d:1f:3b:5c: 50:65:42:3e:0d:a2:28:ca:b0:5e:46:f5:35:3d:44: 62:3b:b1:c0:1c:41:13:9f:06:f1:bf:09:f5:64:8f: ac:78:cf:64:bc:54:30:e4:d4:6d:e2:bb:28:a3:9c: b8:36:f2:e6:9b:7e:be:0d:4d:21:1f:82:bd:2b:a8: c6:0d:52:89:12:57:d6:99:68:9e:26:7e:96:05:d9: b7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:53:83:63:E4:90:F9:C2:D0:E6:37:F8:14:FE:A0:B0:1A:06:5D:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be681068-e4e1-3d7b-a576-f250d1138324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.63.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:17:05:2e:90:e4:83:af:1d:cc:36:bc:7c:65:c5:1a:11:2a: 46:62:c0:44:c1:4b:54:22:27:e7:c6:bb:0e:50:6f:9e:4e:6e: 6b:1c:c3:66:01:f5:68:c3:95:0b:fe:90:c0:ab:bd:6e:29:ae: 74:13:e7:a7:21:ff:41:0d:f7:b9:00:b1:6d:1b:47:cd:c7:8e: cd:93:73:2a:c9:fd:0d:cc:dd:2e:06:ed:9f:df:dc:41:52:aa: 2d:7e:6b:9f:36:8b:9a:91:a7:6c:2a:95:ec:02:32:5a:f8:b6: 82:88:32:aa:b2:1b:95:9b:6d:51:b9:68:c0:d0:b4:22:c9:ab: 6d:3d:c8:a9:20:c9:6c:ef:ff:88:b3:39:b6:89:64:5f:5b:49: f2:7d:4f:2d:d0:77:2e:dc:12:68:36:8c:18:89:e3:fd:2d:38: 70:d1:da:54:06:54:6a:7b:7c:05:ec:2e:44:7d:cb:ca:66:29: 8d:6c:e9:68:5c:f3:9e:38:8e:84:45:09:be:5e:00:64:6a:19: 58:da:d6:b9:7d:8f:62:54:6a:b8:3b:6b:c2:25:d0:12:74:b1: 34:2d:cb:3b:e7:cc:57:dc:b9:e2:57:b1:5e:5a:b7:37:77:a1: 4e:93:09:c9:71:07:aa:14:17:59:33:3f:f9:32:cd:60:de:cb: 3c:9b:19:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4NPwu1XURhagZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Nzg5ZGNhYWMtMDc0MS00MGFkLWJmNjEtMjU1OTc0YjhmNTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5LEeCosIFZUcwe1kD36zsYf2wjLLpvQEMB2 rq2DG/Fy+f1ACDAMBHRFyAm3pdPsYcRPOAY2NYQamD6CyI8HoA/kjpp0+gT/+wfV m8bKxlT3t51Vj2O/V6naXelOJcsokf3MYi5H6d842PBITPV03vPxgl2gIcigngnr mbQ+6VOSablPAqrIJc/pSGzYm+5cAUnLysS9YoK+jlhkmN2TB2X5NBWhVVBi8jcQ MK9A2i0fO1xQZUI+DaIoyrBeRvU1PURiO7HAHEETnwbxvwn1ZI+seM9kvFQw5NRt 4rsoo5y4NvLmm36+DU0hH4K9K6jGDVKJElfWmWieJn6WBdm3vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlTg2PkkPnC0OY3+BT+oLAaBl3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmU2ODEwNjgtZTRlMS0z ZDdiLWE1NzYtZjI1MGQxMTM4MzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD8VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYXBS6Q5IOvHcw2vHxlxRoRKkZiwETBS1QiJ+fGuw5Qb55Obmscw2YB 9WjDlQv+kMCrvW4prnQT56ch/0EN97kAsW0bR83Hjs2TcyrJ/Q3M3S4G7Z/f3EFS qi1+a582i5qRp2wqlewCMlr4toKIMqqyG5WbbVG5aMDQtCLJq209yKkgyWzv/4iz ObaJZF9bSfJ9Ty3Qdy7cEmg2jBiJ4/0tOHDR2lQGVGp7fAXsLkR9y8pmKY1s6Whc 8544joRFCb5eAGRqGVja1rl9j2JUarg7a8Il0BJ0sTQtyzvnzFfcueJXsV5atzd3 oU6TCclxB6oUF1kzP/kyzWDeyzybGYY= -----END CERTIFICATE-----Generated at Fri Mar 13 05:52:33 2026 by rpki-client