$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29f39da4-c719-31df-bc0a-6a3be6c0a0a0.roa File: 29f39da4-c719-31df-bc0a-6a3be6c0a0a0.roa (raw, json) Hash identifier: HLPkW/o0i3qmhUO2PGVnDiZdoSH2h0HEPSGA5Im+m4E= Subject key identifier: C8:E0:C7:13:2E:23:3E:BB:ED:82:0B:4B:3B:D1:05:BB:74:38:8C:F5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BF4D23F08598241682D00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29f39da4-c719-31df-bc0a-6a3be6c0a0a0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.63.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:f4:d2:3f:08:59:82:41:68:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=436eceef-fb0e-4c3a-bd5c-327b9a9b92c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ca:2c:b4:75:aa:5a:5e:71:75:10:12:2d:bb: df:2c:5e:a8:2f:d9:06:56:4d:93:2f:e8:b1:d6:d9: ce:9e:0d:4a:6a:71:5d:21:29:0b:10:94:ee:35:b6: 13:a1:40:11:38:84:ca:02:49:47:6f:cc:d1:57:60: 23:ea:45:70:95:6e:d9:72:4b:07:5e:dd:23:ae:87: c6:c2:d3:8c:92:82:2e:c1:0a:69:0a:0d:5c:e5:5a: cc:81:00:04:d3:16:53:60:53:97:65:f4:26:bd:66: e2:86:51:fe:e0:e0:00:36:49:ba:14:5c:af:6e:e7: bc:a6:13:83:dd:d4:1a:04:a6:dc:1c:67:3d:47:db: be:c1:39:14:df:69:33:42:71:b4:0f:ed:9c:60:bf: fc:94:ca:7a:9b:49:26:d2:84:8d:0b:29:52:a2:e8: d2:83:e7:d1:a6:f7:39:56:b9:a3:bd:65:3a:08:ba: 26:f0:a8:20:2c:61:fb:22:eb:51:99:b6:20:17:69: 24:a7:d1:c2:da:21:7d:b1:3b:da:f1:b7:1f:bd:fe: 5a:1c:d9:8d:2c:fa:6f:ea:fb:0c:33:ca:1d:c5:e6: 71:98:f6:7a:7c:4b:14:29:fc:cb:9b:ea:22:37:0b: 84:ef:5d:46:d7:54:e8:03:2c:f8:dd:59:81:59:d1: 0c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E0:C7:13:2E:23:3E:BB:ED:82:0B:4B:3B:D1:05:BB:74:38:8C:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29f39da4-c719-31df-bc0a-6a3be6c0a0a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.63.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:cf:05:0b:36:e0:08:ec:e6:c0:1d:25:3b:af:04:9d:ac:38: da:0d:f7:b3:07:cb:6c:24:c8:24:a7:c4:33:1c:bc:28:64:d3: 72:54:3b:8b:6c:47:29:16:80:53:b0:e3:90:ae:4a:0e:a2:5f: f3:d2:99:8b:8a:5d:cb:82:6a:49:5e:59:76:fc:cd:b1:40:57: 6f:9e:7e:45:98:8b:59:12:1b:03:6e:32:64:b5:b7:38:fb:e1: e2:7a:40:bc:6f:00:84:8b:f8:55:f5:cb:7d:da:68:46:b1:88: a6:b0:52:5b:63:3b:02:16:01:84:71:b4:71:d4:c7:bc:49:b5: 4f:23:19:e6:f5:89:1b:25:cb:2e:23:c2:4c:d6:10:fd:93:16: 94:bb:5d:23:f5:00:98:2f:df:4e:77:00:94:ca:04:4a:6c:fd: 62:03:6d:00:e5:75:81:bf:7b:dc:39:b6:8c:d4:32:bf:ee:5a: 53:b2:7e:2a:15:df:4c:16:53:31:63:b7:f1:88:9d:38:d6:1a: 5d:11:c8:e6:ec:fd:08:3c:4e:f9:ea:c1:4e:7f:ad:bb:12:ef: 32:9b:58:13:ad:40:6d:e5:46:82:ca:47:9b:8b:3c:56:a6:77: 68:c4:36:12:4e:96:5c:66:58:e9:8a:48:b9:8e:c7:d0:ea:4f: cb:fb:8c:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je/TSPwhZgkFoLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDM2ZWNlZWYtZmIwZS00YzNhLWJkNWMtMzI3YjlhOWI5MmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8ostHWqWl5xdRASLbvfLF6oL9kGVk2TL+ix 1tnOng1KanFdISkLEJTuNbYToUAROITKAklHb8zRV2Aj6kVwlW7ZcksHXt0jrofG wtOMkoIuwQppCg1c5VrMgQAE0xZTYFOXZfQmvWbihlH+4OAANkm6FFyvbue8phOD 3dQaBKbcHGc9R9u+wTkU32kzQnG0D+2cYL/8lMp6m0km0oSNCylSoujSg+fRpvc5 VrmjvWU6CLom8KggLGH7IutRmbYgF2kkp9HC2iF9sTva8bcfvf5aHNmNLPpv6vsM M8odxeZxmPZ6fEsUKfzLm+oiNwuE711G11ToAyz43VmBWdEMWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjgxxMuIz677YILSzvRBbt0OIz1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjlmMzlkYTQtYzcxOS0z MWRmLWJjMGEtNmEzYmU2YzBhMGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD/WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANbPBQs24Ajs5sAdJTuvBJ2sONoN97MHy2wkyCSnxDMcvChk03JUO4ts RykWgFOw45CuSg6iX/PSmYuKXcuCakleWXb8zbFAV2+efkWYi1kSGwNuMmS1tzj7 4eJ6QLxvAISL+FX1y33aaEaxiKawUltjOwIWAYRxtHHUx7xJtU8jGeb1iRslyy4j wkzWEP2TFpS7XSP1AJgv3053AJTKBEps/WIDbQDldYG/e9w5tozUMr/uWlOyfioV 30wWUzFjt/GInTjWGl0RyObs/Qg8TvnqwU5/rbsS7zKbWBOtQG3lRoLKR5uLPFam d2jENhJOllxmWOmKSLmOx9DqT8v7jLk= -----END CERTIFICATE-----Generated at Sat Sep 26 06:47:51 2026 by rpki-client