$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/079e0a8c-1aa0-35b1-93d2-22a8da6a0502.roa File: 079e0a8c-1aa0-35b1-93d2-22a8da6a0502.roa (raw, json) Hash identifier: JU/rCTAblfx+HiJlNMyXHjhQ/LcKoB8kxVeQbYiReV8= Subject key identifier: 8B:13:09:0A:94:7C:5B:E7:52:62:59:3B:76:0F:62:9F:21:C1:20:CA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E005CB269C3106B6D81B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/079e0a8c-1aa0-35b1-93d2-22a8da6a0502.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 184.20.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:05:cb:26:9c:31:06:b6:d8:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=620b1eeb-5cce-40a1-b547-17cab2f6c9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8a:23:e0:7d:5c:7e:2f:f9:60:34:2c:96:2d: 1c:f3:24:f7:65:8e:8b:26:3f:d3:9b:29:9a:41:7d: 9c:4f:1c:c9:e4:6d:dd:30:14:61:83:0d:6e:7b:7c: f4:4a:ed:4e:c2:c6:53:37:af:68:d1:c7:b0:a9:9d: 99:86:ba:e3:b1:08:6b:83:27:0a:3d:c6:2e:91:98: f4:f9:13:2d:0f:c1:46:04:4f:77:af:27:8d:15:8e: 71:c4:28:c1:dd:c1:78:fa:44:83:79:ea:61:79:30: 13:68:22:32:ef:7b:e9:b0:be:cd:20:b0:11:e6:52: 2d:69:db:c2:4a:44:a6:44:8a:e4:a1:97:ac:43:ea: 62:b5:5f:96:8a:85:94:1b:a3:56:cb:85:35:43:ed: 4a:50:3a:9d:44:9e:e8:e6:b3:63:82:e3:bc:87:50: 00:62:8f:51:7e:33:52:b7:f9:25:8d:9b:a4:71:5f: ba:1a:23:7e:98:23:60:b4:92:2f:af:c8:c4:7f:b9: a9:60:5e:36:e8:90:c3:30:c0:26:4f:50:db:95:8b: 65:a1:0d:51:1c:86:23:dd:6c:64:dc:70:35:4b:66: 9d:b5:50:5d:db:e6:ea:44:74:b8:09:76:c5:76:b6: 48:c5:03:29:95:29:b2:54:3b:82:2c:01:4c:12:fa: 31:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:13:09:0A:94:7C:5B:E7:52:62:59:3B:76:0F:62:9F:21:C1:20:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/079e0a8c-1aa0-35b1-93d2-22a8da6a0502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:20:8f:79:c0:9c:93:42:64:4b:fd:a4:e1:5a:4d:8d:04:bb: ad:7b:4f:8b:f6:ce:64:13:b3:19:6e:16:3b:9a:a9:84:7d:33: 52:92:8d:8d:bc:84:47:84:9a:e5:9a:83:e5:20:54:48:e2:c6: 9b:c0:f2:4a:4b:f0:2a:8b:3b:14:0b:5d:ed:a9:97:13:91:be: 49:d3:ba:72:ed:c8:d8:e9:a9:32:d8:77:41:72:4b:42:01:ea: 84:4b:3b:4a:2b:1a:19:af:15:7c:0e:ee:22:cf:04:52:de:1a: 39:79:93:73:5f:ba:73:a9:ae:81:5e:7d:b6:91:98:6a:26:f3: c9:d6:98:15:17:0c:0e:2c:32:56:83:24:cc:67:8b:41:5e:72: 8a:f6:c6:6c:ce:2c:64:dd:a6:bf:79:0d:51:92:c8:7d:77:3a: 41:97:41:21:ef:8f:a1:4a:cb:7a:d0:a2:f3:4b:2d:80:92:d7: d5:80:58:88:a1:f0:cd:ba:07:d5:97:c3:2d:4a:e3:9e:7a:09: 53:30:de:a5:32:63:db:c6:d7:ea:11:a0:2a:43:49:b6:28:5d: c8:7b:08:cb:42:a3:12:a0:e8:7a:40:ae:d4:70:01:74:ed:bb: 36:80:cb:4b:2f:ed:07:37:73:1a:39:42:ef:cd:2e:d2:00:3e: b4:8f:71:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4AXLJpwxBrbYGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjIwYjFlZWItNWNjZS00MGExLWI1NDctMTdjYWIyZjZjOWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIoj4H1cfi/5YDQsli0c8yT3ZY6LJj/Tmyma QX2cTxzJ5G3dMBRhgw1ue3z0Su1OwsZTN69o0cewqZ2ZhrrjsQhrgycKPcYukZj0 +RMtD8FGBE93ryeNFY5xxCjB3cF4+kSDeepheTATaCIy73vpsL7NILAR5lItadvC SkSmRIrkoZesQ+pitV+WioWUG6NWy4U1Q+1KUDqdRJ7o5rNjguO8h1AAYo9RfjNS t/kljZukcV+6GiN+mCNgtJIvr8jEf7mpYF426JDDMMAmT1DblYtloQ1RHIYj3Wxk 3HA1S2adtVBd2+bqRHS4CXbFdrZIxQMplSmyVDuCLAFMEvoxgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsTCQqUfFvnUmJZO3YPYp8hwSDKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDc5ZTBhOGMtMWFhMC0z NWIxLTkzZDItMjJhOGRhNmEwNTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYgj3nAnJNCZEv9pOFaTY0Eu617T4v2zmQTsxluFjuaqYR9M1KSjY28 hEeEmuWag+UgVEjixpvA8kpL8CqLOxQLXe2plxORvknTunLtyNjpqTLYd0FyS0IB 6oRLO0orGhmvFXwO7iLPBFLeGjl5k3NfunOproFefbaRmGom88nWmBUXDA4sMlaD JMxni0Fecor2xmzOLGTdpr95DVGSyH13OkGXQSHvj6FKy3rQovNLLYCS19WAWIih 8M26B9WXwy1K4556CVMw3qUyY9vG1+oRoCpDSbYoXch7CMtCoxKg6HpArtRwAXTt uzaAy0sv7Qc3cxo5Qu/NLtIAPrSPcaU= -----END CERTIFICATE-----Generated at Thu Mar 26 16:26:36 2026 by rpki-client