$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb9f349e-81a2-3b62-a174-0e2494547880.roa File: cb9f349e-81a2-3b62-a174-0e2494547880.roa (raw, json) Hash identifier: QEZ7vEzucjx+sKf4ln0wmN9h3OZhVz9jt3JCn+5sWK4= Subject key identifier: 6E:10:7B:02:03:FD:53:98:92:D3:B7:11:FD:5D:48:44:09:83:65:6D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E38F1C8223872E2345FE0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb9f349e-81a2-3b62-a174-0e2494547880.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 184.20.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:38:f1:c8:22:38:72:e2:34:5f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8852559f-65c4-4e38-962a-49004e895093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9a:6b:6a:7f:c8:15:c0:ef:24:7f:bb:91:df: 83:a0:0c:e6:ea:43:19:6e:6d:3b:96:24:45:2e:29: af:25:8a:02:50:ff:0c:5d:bb:f3:13:af:73:46:96: fc:7a:4f:11:a1:e7:82:d0:92:de:3d:81:9d:50:0c: c1:3e:f8:bb:cf:a5:fe:91:0c:dc:12:da:c1:ba:04: 5e:25:ba:9f:40:aa:dd:9b:87:0b:41:82:c2:ae:20: ca:d5:29:51:dc:3d:6a:07:fe:b2:f7:e1:df:03:bd: 35:5e:79:e5:59:a1:9f:eb:ea:4b:7a:39:b1:19:3c: 12:2e:16:17:94:e6:46:2f:d0:5e:77:c6:a1:51:5a: 63:d1:50:13:63:a5:75:a5:76:a1:8d:cd:40:71:83: 9a:72:de:30:ad:6a:b3:fc:1f:73:45:81:9a:d0:64: 87:04:24:1b:5a:06:74:bc:89:10:9e:40:42:bd:a1: 61:e5:c6:5f:83:69:00:9f:2e:4a:52:09:0b:01:63: 99:93:a8:6c:ba:08:39:5b:48:67:ea:9f:eb:bd:18: 88:24:a8:a5:ac:78:42:20:70:dd:fb:5b:b5:23:5b: f0:d2:fd:8a:8e:86:5c:08:8e:da:8e:f2:cf:51:54: ba:64:81:29:1c:94:ca:8a:3c:5e:77:c3:4c:11:c3: 92:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:10:7B:02:03:FD:53:98:92:D3:B7:11:FD:5D:48:44:09:83:65:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb9f349e-81a2-3b62-a174-0e2494547880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:25:40:c0:d0:b6:2c:2e:aa:98:20:dc:7b:25:d9:4c:0e:41: 39:6f:6b:c2:93:74:f7:80:d5:23:35:39:e4:53:d2:37:27:0a: 41:1a:65:69:7b:26:0d:ab:49:c2:11:b6:be:36:3f:b6:d9:32: 9e:b9:bb:3a:84:26:e7:48:01:67:2c:ba:95:12:5f:c7:bb:c3: 7d:23:ba:3c:0f:db:84:1f:be:dd:a9:88:00:1b:a5:c5:8d:a7: 65:e8:81:eb:2a:bf:fb:8f:5f:da:6e:19:7a:4f:93:fa:cf:80: 8d:b2:92:47:b9:a4:36:1c:a9:3d:a2:ff:9d:ad:f0:b7:6b:27: f8:5f:c5:52:0f:8d:8b:88:56:56:13:ce:9d:f6:c5:2a:b9:96: d7:06:6b:3f:63:aa:f2:61:3d:dd:8b:c0:08:54:33:bc:69:bd: fb:11:e4:ae:a6:9e:9f:a7:10:80:e2:fe:44:95:a8:6a:77:df: b8:6b:32:70:1e:4f:0a:1c:93:e6:a8:9a:44:ae:3d:63:10:69: 30:76:0d:94:3c:8a:c0:e5:52:b5:76:83:00:ca:d4:5e:e7:12: a3:29:62:70:60:68:6d:53:ae:62:97:f7:ce:b0:54:02:c1:60: 29:72:34:e6:52:8b:e3:0e:8e:ff:92:38:b3:fb:70:19:19:82: 6d:e9:9f:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnjjxyCI4cuI0X+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODg1MjU1OWYtNjVjNC00ZTM4LTk2MmEtNDkwMDRlODk1MDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5pran/IFcDvJH+7kd+DoAzm6kMZbm07liRF LimvJYoCUP8MXbvzE69zRpb8ek8RoeeC0JLePYGdUAzBPvi7z6X+kQzcEtrBugRe JbqfQKrdm4cLQYLCriDK1SlR3D1qB/6y9+HfA701XnnlWaGf6+pLejmxGTwSLhYX lOZGL9Bed8ahUVpj0VATY6V1pXahjc1AcYOact4wrWqz/B9zRYGa0GSHBCQbWgZ0 vIkQnkBCvaFh5cZfg2kAny5KUgkLAWOZk6hsugg5W0hn6p/rvRiIJKilrHhCIHDd +1u1I1vw0v2KjoZcCI7ajvLPUVS6ZIEpHJTKijxed8NMEcOSEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4QewID/VOYktO3Ef1dSEQJg2VtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2I5ZjM0OWUtODFhMi0z YjYyLWExNzQtMGUyNDk0NTQ3ODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBRqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwlQMDQtiwuqpgg3Hsl2UwOQTlva8KTdPeA1SM1OeRT0jcnCkEaZWl7 Jg2rScIRtr42P7bZMp65uzqEJudIAWcsupUSX8e7w30jujwP24Qfvt2piAAbpcWN p2Xogesqv/uPX9puGXpPk/rPgI2ykke5pDYcqT2i/52t8LdrJ/hfxVIPjYuIVlYT zp32xSq5ltcGaz9jqvJhPd2LwAhUM7xpvfsR5K6mnp+nEIDi/kSVqGp337hrMnAe Twock+aomkSuPWMQaTB2DZQ8isDlUrV2gwDK1F7nEqMpYnBgaG1TrmKX986wVALB YClyNOZSi+MOjv+SOLP7cBkZgm3pn20= -----END CERTIFICATE-----Generated at Thu Sep 10 17:45:02 2026 by rpki-client