$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33de9bf9-81a1-3356-b476-7ddf45e46bf3.roa File: 33de9bf9-81a1-3356-b476-7ddf45e46bf3.roa (raw, json) Hash identifier: Zyo4Tl+IoUzgK1GMARtk+/7A+/4MaIaU5/HOpOQapxw= Subject key identifier: 70:79:DE:64:F6:B8:8A:FA:A3:00:A5:C0:EC:AA:9F:83:C0:7E:75:2C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983FF02FEA68957ACE3B540 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33de9bf9-81a1-3356-b476-7ddf45e46bf3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.20.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:ff:02:fe:a6:89:57:ac:e3:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8c3cbddd-b5bb-4093-a4f5-6b5d227bb326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ff:19:b2:ef:2c:1d:6e:44:10:2f:a0:af:5d: 8c:b4:a6:ef:01:39:8a:45:c9:d6:9a:29:b7:64:15: 20:e1:f1:48:68:5a:2b:2e:12:58:e3:54:15:d5:25: 5a:27:70:6a:48:f7:3f:13:04:3f:0d:46:ee:84:51: dc:5a:51:ae:e5:c2:62:7f:fe:d6:eb:3e:64:53:a1: a2:65:ba:43:1d:53:5d:d1:d2:9c:0e:96:77:8e:00: c8:9c:bb:6a:1f:06:81:bc:58:f1:41:9c:73:f1:b9: e4:f1:92:ec:63:79:f4:d1:19:d8:44:a2:a3:3b:de: f9:3f:f7:6f:79:d2:8b:1a:d2:40:ba:1b:9b:35:1c: 05:47:a6:4f:9d:8f:f7:c6:b3:f8:2b:8b:56:38:3f: 62:ee:0a:35:9f:2f:c6:3b:a1:27:98:ea:0a:45:e1: e2:ab:43:d2:40:0b:1b:e1:bd:68:cf:26:5b:4c:50: cc:56:3d:fb:0c:9a:d2:3f:dd:5e:49:a7:df:fe:b6: 34:ba:92:6f:2e:7e:87:58:5a:04:a5:53:81:cd:28: 1b:e3:75:71:c5:8a:4a:57:fd:87:b1:b8:ae:fb:eb: c9:f1:1f:86:4e:b5:28:b1:de:c9:e9:31:d5:f1:07: c9:12:50:e4:27:2c:5b:d4:b9:c3:9e:b8:42:3c:b1: 09:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:79:DE:64:F6:B8:8A:FA:A3:00:A5:C0:EC:AA:9F:83:C0:7E:75:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33de9bf9-81a1-3356-b476-7ddf45e46bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ad:de:7a:7c:6a:b4:cf:9b:60:00:1e:18:36:7a:59:9c:1b: a4:e0:78:80:3e:37:a7:4a:e1:0e:07:01:62:90:46:dd:3b:11: da:c8:c6:44:be:7d:ff:8c:da:ab:f8:f2:39:bc:dd:b5:7b:90: 0b:f6:4c:cc:8c:3a:26:a6:38:3b:41:59:99:45:f9:42:c0:3d: 50:7c:0e:c0:af:18:d4:d8:3a:4e:af:80:93:13:2b:b2:f4:0d: 1d:bb:6e:20:df:3e:13:a8:b1:4a:4a:7f:de:50:f2:d5:83:6a: d4:af:b7:4d:98:dd:71:d9:bf:ae:a9:4d:07:4d:11:b0:85:09: c7:3b:50:54:9d:b1:48:a1:bc:cc:90:84:43:1a:a8:d6:80:31: e2:8b:00:27:f8:46:57:28:5e:fa:4b:27:c8:62:df:26:ab:20: 24:29:13:ad:3e:cb:29:89:1d:5e:99:30:56:c6:95:6d:e6:dd: e7:b6:80:1f:0c:b4:f5:b2:4d:2e:a6:09:8e:37:f0:94:aa:00: cb:f1:f1:1c:e1:2d:48:4a:9b:12:bf:28:5b:02:21:97:e3:90: c7:a6:b0:7d:70:e1:c0:42:b1:af:3b:88:d2:5a:3c:01:06:c2: 4c:57:39:c5:d3:7b:fd:42:9e:c3:19:f2:04:a5:9f:2e:8c:00: c6:98:85:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg/8C/qaJV6zjtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGMzY2JkZGQtYjViYi00MDkzLWE0ZjUtNmI1ZDIyN2JiMzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP8Zsu8sHW5EEC+gr12MtKbvATmKRcnWmim3 ZBUg4fFIaForLhJY41QV1SVaJ3BqSPc/EwQ/DUbuhFHcWlGu5cJif/7W6z5kU6Gi ZbpDHVNd0dKcDpZ3jgDInLtqHwaBvFjxQZxz8bnk8ZLsY3n00RnYRKKjO975P/dv edKLGtJAuhubNRwFR6ZPnY/3xrP4K4tWOD9i7go1ny/GO6EnmOoKReHiq0PSQAsb 4b1ozyZbTFDMVj37DJrSP91eSaff/rY0upJvLn6HWFoEpVOBzSgb43VxxYpKV/2H sbiu++vJ8R+GTrUosd7J6THV8QfJElDkJyxb1LnDnrhCPLEJRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHB53mT2uIr6owClwOyqn4PAfnUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzNkZTliZjktODFhMS0z MzU2LWI0NzYtN2RkZjQ1ZTQ2YmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBS+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCt3np8arTPm2AAHhg2elmcG6TgeIA+N6dK4Q4HAWKQRt07EdrIxkS+ ff+M2qv48jm83bV7kAv2TMyMOiamODtBWZlF+ULAPVB8DsCvGNTYOk6vgJMTK7L0 DR27biDfPhOosUpKf95Q8tWDatSvt02Y3XHZv66pTQdNEbCFCcc7UFSdsUihvMyQ hEMaqNaAMeKLACf4RlcoXvpLJ8hi3yarICQpE60+yymJHV6ZMFbGlW3m3ee2gB8M tPWyTS6mCY438JSqAMvx8RzhLUhKmxK/KFsCIZfjkMemsH1w4cBCsa87iNJaPAEG wkxXOcXTe/1CnsMZ8gSlny6MAMaYhTc= -----END CERTIFICATE-----Generated at Sat Sep 26 22:33:10 2026 by rpki-client