$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12553e12-1a29-327b-a635-7e065d10c35b.roa File: 12553e12-1a29-327b-a635-7e065d10c35b.roa (raw, json) Hash identifier: iYfb5iYzIMXS5nXQESf3O4s4cWTTNx0L1tToNNMpxWo= Subject key identifier: F3:5C:C5:0B:18:01:F5:F8:09:BC:FC:55:BC:66:EC:65:5A:36:7F:0B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BE22005A861E8E4FE35C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12553e12-1a29-327b-a635-7e065d10c35b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.62.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:e2:20:05:a8:61:e8:e4:fe:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7b304085-8f9b-4283-94be-716bc6ba695a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:21:61:95:b4:a5:c0:e3:ce:17:c0:26:70:4a: f2:89:1b:a7:68:b8:67:ee:d7:20:30:65:d8:61:95: d2:94:9a:a1:bb:04:f6:f6:cc:6d:44:dc:6d:ee:1d: ea:e6:5f:8e:92:1b:21:03:fe:74:e6:1e:51:02:c1: 99:f5:1e:b1:32:a9:91:fa:e2:10:e6:bb:15:eb:8c: bb:42:f7:ce:60:87:3e:36:9b:37:c1:5d:f4:93:45: 43:62:01:d6:2f:62:7c:5e:66:3c:6c:92:42:0c:9f: 40:eb:c1:f1:d9:c3:10:dc:7c:a2:3a:11:f2:61:2d: 6f:a4:9c:f9:ad:4d:7a:d1:52:19:6c:92:e5:14:e7: c3:9e:bb:c4:da:69:b4:d9:cd:65:37:4b:d8:14:77: 6d:f1:d5:c5:ac:ca:8a:a0:29:8f:c4:d6:63:b1:98: 46:39:5e:6a:26:9c:58:bb:67:f6:9f:0b:de:35:a2: 2d:4c:7a:7b:30:fc:c2:bf:e6:85:4e:02:55:d1:79: 83:32:af:16:51:5c:c3:1e:4b:80:eb:03:82:fc:e8: 6e:18:7e:23:fb:e1:25:84:1a:63:61:d4:9c:d1:66: 83:54:c2:62:ae:78:3a:74:ea:29:4d:15:37:77:26: 2d:60:cd:7a:48:ad:13:14:d5:06:bf:2f:01:8a:f9: d3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5C:C5:0B:18:01:F5:F8:09:BC:FC:55:BC:66:EC:65:5A:36:7F:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12553e12-1a29-327b-a635-7e065d10c35b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.62.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f1:0e:53:0b:ff:85:64:35:fb:32:a6:98:f4:a4:7a:1a:57: 4e:35:c3:07:58:16:d3:1e:a3:14:60:51:d4:7d:34:be:a0:a8: 4c:49:19:cd:0c:6d:3f:9e:fd:a7:08:51:79:ef:0e:a8:d7:6d: 1d:db:cf:8b:75:3e:32:bf:fb:6a:6e:bf:8f:fe:e2:ed:17:62: 0a:86:f3:8c:53:18:27:d9:97:d1:65:68:30:88:b1:70:03:e9: 3f:3f:50:2b:d6:35:f7:c9:4c:9d:64:dc:e4:a0:6d:17:d5:ce: 24:d4:ca:45:bb:1f:cf:27:16:06:9c:8d:7b:23:31:0e:7c:de: a6:0f:cf:5c:97:18:ed:04:96:7c:76:c4:0f:e5:5c:58:96:2d: 72:0a:a6:db:35:55:44:3d:88:df:bc:fc:c3:79:85:60:ca:0b: 2d:f5:aa:70:78:1e:08:3b:6e:64:18:c7:20:c9:8a:32:48:34: ad:55:7c:68:bf:97:50:76:0a:cc:4d:b0:a5:8d:87:9d:5e:26: 4f:83:7b:05:f6:f5:d4:c5:41:26:db:ed:c4:18:2b:49:a7:3a: ca:b6:cc:52:1e:56:06:56:8f:bd:c5:10:04:8e:b0:db:be:6c: c8:0f:fe:fc:67:e1:dc:10:8c:6b:92:10:c8:09:33:89:84:d4: a9:5d:e7:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je+IgBahh6OT+NcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2IzMDQwODUtOGY5Yi00MjgzLTk0YmUtNzE2YmM2YmE2OTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCFhlbSlwOPOF8AmcEryiRunaLhn7tcgMGXY YZXSlJqhuwT29sxtRNxt7h3q5l+OkhshA/505h5RAsGZ9R6xMqmR+uIQ5rsV64y7 QvfOYIc+Nps3wV30k0VDYgHWL2J8XmY8bJJCDJ9A68Hx2cMQ3HyiOhHyYS1vpJz5 rU160VIZbJLlFOfDnrvE2mm02c1lN0vYFHdt8dXFrMqKoCmPxNZjsZhGOV5qJpxY u2f2nwveNaItTHp7MPzCv+aFTgJV0XmDMq8WUVzDHkuA6wOC/OhuGH4j++ElhBpj YdSc0WaDVMJirng6dOopTRU3dyYtYM16SK0TFNUGvy8BivnTLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNcxQsYAfX4Cbz8Vbxm7GVaNn8LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTI1NTNlMTItMWEyOS0z MjdiLWE2MzUtN2UwNjVkMTBjMzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD7NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbxDlML/4VkNfsyppj0pHoaV041wwdYFtMeoxRgUdR9NL6gqExJGc0M bT+e/acIUXnvDqjXbR3bz4t1PjK/+2puv4/+4u0XYgqG84xTGCfZl9FlaDCIsXAD 6T8/UCvWNffJTJ1k3OSgbRfVziTUykW7H88nFgacjXsjMQ583qYPz1yXGO0Elnx2 xA/lXFiWLXIKpts1VUQ9iN+8/MN5hWDKCy31qnB4Hgg7bmQYxyDJijJINK1VfGi/ l1B2CsxNsKWNh51eJk+DewX29dTFQSbb7cQYK0mnOsq2zFIeVgZWj73FEASOsNu+ bMgP/vxn4dwQjGuSEMgJM4mE1Kld51M= -----END CERTIFICATE-----Generated at Tue Oct 13 10:05:10 2026 by rpki-client