$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3299d66d-6655-3d74-9423-fddfe81f6fc5.roa File: 3299d66d-6655-3d74-9423-fddfe81f6fc5.roa (raw, json) Hash identifier: QRt29qQWNPsRE3gqR26/XAeZvdO3yIICShGIqe1lA1s= Subject key identifier: ED:86:FB:10:05:B8:85:26:E1:4D:F6:86:07:8C:B4:4C:A4:73:81:D8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983F3D65392CD768BD15FC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3299d66d-6655-3d74-9423-fddfe81f6fc5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.20.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:f3:d6:53:92:cd:76:8b:d1:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=74c70390-2039-4d04-b61e-e904c16647a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2c:57:53:63:75:db:8c:cd:c5:c9:45:19:66: 0d:ad:89:cd:ec:be:7e:46:38:98:f1:33:d3:f7:34: ac:51:3c:6c:7a:73:b3:17:35:43:04:e1:fe:05:99: d4:b1:b9:52:ba:a0:b3:6e:95:cb:c3:b1:58:36:a6: fc:75:81:79:4a:0d:74:14:88:91:15:2f:3b:37:9f: ca:bc:ae:2f:aa:d6:28:81:31:a2:bc:aa:1a:d7:b4: b3:f3:4e:0f:d2:33:6a:03:b0:70:1c:b5:ae:e2:32: 73:e2:46:c3:c5:a2:e9:7c:02:47:28:b9:ea:cf:44: c8:d4:62:b6:58:d2:04:5e:f5:08:27:90:dd:5c:c4: 11:23:a0:60:e8:13:27:de:84:95:c2:99:02:ff:f9: 51:aa:cc:d3:72:30:58:b6:78:2a:8a:f6:76:ae:7b: c0:6e:56:13:5f:28:77:99:cc:d3:e4:ea:6f:2b:9e: 7f:4c:1f:ff:bf:24:66:64:06:02:70:eb:6c:52:c9: e4:fe:1a:a8:56:ba:86:98:24:9b:ce:8d:17:cd:e9: c6:41:9c:64:b2:c5:a3:7a:91:0d:4d:ef:4f:1c:f2: b5:8b:10:32:16:6b:3b:f1:19:81:3c:80:b5:7a:41: 70:59:eb:12:f1:37:2a:9d:e4:0a:61:81:80:26:28: 7b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:86:FB:10:05:B8:85:26:E1:4D:F6:86:07:8C:B4:4C:A4:73:81:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3299d66d-6655-3d74-9423-fddfe81f6fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:be:21:45:c7:df:63:0b:54:26:ca:2d:f8:ef:14:11:59:8c: 18:54:26:67:92:c9:73:6c:60:ed:8f:c6:1e:c0:0c:ae:5a:2f: 23:5d:70:50:c5:f3:50:fb:17:9b:ea:47:bd:7f:e1:17:0c:11: c0:de:79:fe:25:54:57:78:db:c6:3a:0f:23:40:a5:01:e6:fd: bb:1d:f7:1b:03:7f:c0:b1:e2:14:8c:5f:19:e0:a4:f5:26:74: 58:8c:f5:2c:31:d2:8e:b4:b7:8a:7a:7c:55:9a:45:e4:83:41: c0:32:e7:93:4c:d0:28:45:07:8d:41:6a:26:b3:4c:8e:fc:9c: ec:a2:3b:b0:11:5a:0c:af:6a:d1:98:c9:57:3a:83:25:cf:a9: 1f:ab:a2:83:21:b4:3f:f2:f8:44:d7:5e:ff:11:52:bc:06:4c: cc:cd:84:ea:f0:ba:8e:66:51:8e:42:08:44:7f:dd:6e:59:ee: 35:ae:ad:59:38:37:da:f6:ca:95:f9:28:f9:df:63:68:ad:37: 81:83:04:3d:db:39:e6:43:8d:3a:4a:ee:3c:c8:a6:bc:af:e7: dc:99:80:e8:36:f1:97:cc:92:af:ee:b0:4c:27:57:ed:aa:8e: d8:44:72:18:b6:55:cd:e7:c2:05:9d:a3:2d:e5:9f:ea:84:c2: 3d:f0:97:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg/PWU5LNdovRX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzRjNzAzOTAtMjAzOS00ZDA0LWI2MWUtZTkwNGMxNjY0N2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCxXU2N124zNxclFGWYNrYnN7L5+RjiY8TPT 9zSsUTxsenOzFzVDBOH+BZnUsblSuqCzbpXLw7FYNqb8dYF5Sg10FIiRFS87N5/K vK4vqtYogTGivKoa17Sz804P0jNqA7BwHLWu4jJz4kbDxaLpfAJHKLnqz0TI1GK2 WNIEXvUIJ5DdXMQRI6Bg6BMn3oSVwpkC//lRqszTcjBYtngqivZ2rnvAblYTXyh3 mczT5OpvK55/TB//vyRmZAYCcOtsUsnk/hqoVrqGmCSbzo0XzenGQZxkssWjepEN Te9PHPK1ixAyFms78RmBPIC1ekFwWesS8TcqneQKYYGAJih7GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2G+xAFuIUm4U32hgeMtEykc4HYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzI5OWQ2NmQtNjY1NS0z ZDc0LTk0MjMtZmRkZmU4MWY2ZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6+IUXH32MLVCbKLfjvFBFZjBhUJmeSyXNsYO2Pxh7ADK5aLyNdcFDF 81D7F5vqR71/4RcMEcDeef4lVFd428Y6DyNApQHm/bsd9xsDf8Cx4hSMXxngpPUm dFiM9Swx0o60t4p6fFWaReSDQcAy55NM0ChFB41BaiazTI78nOyiO7ARWgyvatGY yVc6gyXPqR+rooMhtD/y+ETXXv8RUrwGTMzNhOrwuo5mUY5CCER/3W5Z7jWurVk4 N9r2ypX5KPnfY2itN4GDBD3bOeZDjTpK7jzIpryv59yZgOg28ZfMkq/usEwnV+2q jthEchi2Vc3nwgWdoy3ln+qEwj3wl4k= -----END CERTIFICATE-----Generated at Sun Oct 11 07:42:00 2026 by rpki-client