$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28a1c7b3-8faf-39df-a7f2-526634a27e9f.roa File: 28a1c7b3-8faf-39df-a7f2-526634a27e9f.roa (raw, json) Hash identifier: ChWx6muUhhDlTQKhGoIQumx7WCdq1FTiixyFEVeKTSo= Subject key identifier: 46:40:FB:E5:36:8C:A4:0C:DF:5B:20:07:B9:02:95:44:BD:D6:C4:7A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4984045D6CE287A9C77BE3A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28a1c7b3-8faf-39df-a7f2-526634a27e9f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.21.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:04:5d:6c:e2:87:a9:c7:7b:e3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=528cbc62-7a89-4698-8632-3a9199656ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:42:0e:ca:59:8c:f0:e2:c2:0a:81:0c:8f:74: 48:fb:71:e2:0c:73:39:ec:45:7e:6e:9b:73:cb:e8: 2c:fa:e0:08:a5:2e:fc:75:e5:fe:8a:f7:eb:13:5a: d1:30:59:41:47:30:1b:26:50:3e:ef:aa:fe:f9:cf: 03:82:f3:01:b1:fb:f5:e4:58:bb:7d:5f:5d:22:26: 7a:af:c0:28:a6:f0:71:97:81:08:f9:2a:56:76:fa: bb:71:94:43:38:05:8e:d9:00:c5:fb:00:31:d8:49: 0e:6c:d3:5c:1e:36:f0:10:07:23:0b:ee:a0:3f:69: 00:3d:71:fb:5d:be:5c:3e:6b:f5:5e:05:e8:46:02: d4:5d:10:d9:7f:0f:9d:53:f8:f5:44:bb:96:54:7d: cd:5d:00:15:d9:ce:39:2b:34:2c:5b:dc:4d:f3:94: e5:66:a1:31:48:8e:5a:a5:66:09:8d:76:fa:cb:4b: 42:52:a8:d6:55:4f:e5:34:1b:bb:19:69:3e:cd:b9: 5a:b9:5e:89:24:57:42:0c:eb:8a:27:e3:50:70:0a: a7:62:30:09:92:f8:09:de:d3:e1:cd:89:5b:cf:fb: 36:09:bb:27:8d:df:45:e3:70:93:0c:32:6c:48:32: 7e:f9:a6:60:07:75:f0:21:f0:1d:25:a2:67:ed:ce: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:40:FB:E5:36:8C:A4:0C:DF:5B:20:07:B9:02:95:44:BD:D6:C4:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28a1c7b3-8faf-39df-a7f2-526634a27e9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:4d:63:9b:25:8b:f6:a5:b2:4b:8e:ab:83:ab:f2:0f:5d:13: 68:53:90:61:f9:f3:9f:17:50:d6:2c:c5:f0:50:d3:98:37:31: 29:61:7a:29:2f:aa:fb:fc:d1:95:ad:55:d7:28:cf:c4:44:db: a5:84:fd:ff:3b:f2:be:13:ab:da:1f:ba:54:14:57:87:e7:ad: 1c:fb:27:e0:e6:86:fb:d7:a5:ed:0d:4b:4b:6d:2f:83:eb:bf: b5:d2:18:bf:25:1a:3e:76:8f:01:cc:6c:3c:e6:6d:f8:e7:e0: 6b:03:0a:ae:6e:d5:17:d7:49:af:ef:f9:56:0e:da:bd:97:a8: 73:16:6f:8e:74:34:e6:d0:49:52:26:3c:54:bc:bf:67:82:9d: 6b:1c:98:2f:c6:82:e8:72:29:08:47:c6:f7:c0:89:73:dc:fa: 0b:ce:73:a8:4c:a2:26:74:4a:a1:fb:a9:c6:54:72:89:b8:c3: e4:1e:90:cb:7d:8b:b5:06:e6:e6:0f:9a:a9:df:23:54:b9:4c: 63:1b:9e:5c:bc:e4:c1:cf:c2:db:d1:f4:c7:48:cf:0b:bf:51: e9:e4:b1:65:ea:28:29:d1:07:6e:03:72:e6:20:c6:20:26:38: 0e:f1:cd:f3:3d:6a:03:16:d1:3f:e7:2c:a4:53:25:d6:f6:83: e4:17:b7:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhARdbOKHqcd746AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTI4Y2JjNjItN2E4OS00Njk4LTg2MzItM2E5MTk5NjU2YWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kIOylmM8OLCCoEMj3RI+3HiDHM57EV+bptz y+gs+uAIpS78deX+ivfrE1rRMFlBRzAbJlA+76r++c8DgvMBsfv15Fi7fV9dIiZ6 r8AopvBxl4EI+SpWdvq7cZRDOAWO2QDF+wAx2EkObNNcHjbwEAcjC+6gP2kAPXH7 Xb5cPmv1XgXoRgLUXRDZfw+dU/j1RLuWVH3NXQAV2c45KzQsW9xN85TlZqExSI5a pWYJjXb6y0tCUqjWVU/lNBu7GWk+zblauV6JJFdCDOuKJ+NQcAqnYjAJkvgJ3tPh zYlbz/s2Cbsnjd9F43CTDDJsSDJ++aZgB3XwIfAdJaJn7c7KVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZA++U2jKQM31sgB7kClUS91sR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjhhMWM3YjMtOGZhZi0z OWRmLWE3ZjItNTI2NjM0YTI3ZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBUPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANFNY5sli/alskuOq4Or8g9dE2hTkGH5858XUNYsxfBQ05g3MSlheikv qvv80ZWtVdcoz8RE26WE/f878r4Tq9ofulQUV4fnrRz7J+DmhvvXpe0NS0ttL4Pr v7XSGL8lGj52jwHMbDzmbfjn4GsDCq5u1RfXSa/v+VYO2r2XqHMWb450NObQSVIm PFS8v2eCnWscmC/GguhyKQhHxvfAiXPc+gvOc6hMoiZ0SqH7qcZUcom4w+QekMt9 i7UG5uYPmqnfI1S5TGMbnly85MHPwtvR9MdIzwu/UenksWXqKCnRB24DcuYgxiAm OA7xzfM9agMW0T/nLKRTJdb2g+QXt/w= -----END CERTIFICATE-----Generated at Sun Oct 4 06:56:40 2026 by rpki-client