$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c517db0-d348-3245-9e98-70be00d950c7.roa File: 3c517db0-d348-3245-9e98-70be00d950c7.roa (raw, json) Hash identifier: iyNUECGXdjz8iGKA9fdF1c2VgY8kfuhXAgU/nQ7U+WM= Subject key identifier: 74:33:55:CD:B3:54:EB:CC:93:AC:92:EA:99:61:DB:50:05:E2:D1:32 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0BF101D7E764A55EE0980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c517db0-d348-3245-9e98-70be00d950c7.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 184.20.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:bf:10:1d:7e:76:4a:55:ee:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6a9e0f43-750e-4722-85c2-44f4d0695daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b7:e2:96:cf:a1:fe:07:0e:18:91:4a:36:f1: cc:9a:b7:0c:06:06:78:f3:d4:f4:86:88:e7:2b:5b: 4b:bc:4a:88:e8:74:d5:f9:2c:c8:10:12:b0:73:df: ca:4b:02:3d:c8:51:b3:a9:12:85:aa:b3:b9:a3:1c: 8c:7b:d4:7e:71:27:7f:60:aa:3a:97:1d:6c:3b:ab: eb:f2:12:37:48:44:2f:e9:ee:c1:ac:a4:4b:53:e9: 85:96:87:23:ed:39:44:3c:9b:12:d8:52:34:ff:7d: bc:7f:3c:61:f3:da:5f:18:4f:ed:b3:71:a3:c3:73: 33:e7:1e:ab:b8:93:a0:43:e9:5f:a9:1b:b2:c7:40: b9:e4:7c:33:74:bc:d6:4b:6b:f4:9c:21:e6:35:4b: 1e:30:e2:8e:16:9c:61:fe:da:d6:5f:8c:9b:70:90: 52:7c:73:7d:9f:d8:d9:fe:7d:ba:f0:44:22:a4:cd: 4b:f5:91:25:f0:6a:66:06:bf:04:0e:0b:c1:6d:2a: 7b:ae:28:c0:df:37:a9:63:60:05:4e:b5:0a:9f:a4: c0:a0:f6:3e:81:64:18:8a:32:f1:ed:d3:7a:58:86: d4:83:47:8c:83:20:bb:b9:45:8e:aa:e6:5b:80:db: 42:48:df:10:3f:24:ac:e9:c3:d0:87:0e:4c:da:09: 8f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:33:55:CD:B3:54:EB:CC:93:AC:92:EA:99:61:DB:50:05:E2:D1:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c517db0-d348-3245-9e98-70be00d950c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:98:51:9f:78:8a:0c:00:5b:49:d3:85:63:4e:ea:df:4a:30: f4:07:c3:5f:4e:00:b7:4f:db:38:6b:5c:4b:28:54:f7:e4:3b: f0:6d:6c:c9:27:5a:21:a2:1a:ab:4b:ee:1d:fe:f5:b8:cf:20: dc:24:13:6c:08:78:26:8c:ad:93:1d:f2:72:3c:88:1e:ff:a8: b3:ec:59:82:44:d1:2c:3c:fc:2e:4d:8c:01:47:b1:c2:76:db: 81:20:b8:21:81:a4:00:6a:80:20:c2:6a:b6:a4:b9:04:5e:b0: 26:7a:39:0a:a1:f8:95:21:3e:c8:55:9e:9f:b9:da:cb:5a:97: 95:39:96:09:03:de:84:ca:dd:2a:c3:a1:a8:92:5f:11:7a:39: 78:79:79:4c:da:53:b4:cf:a6:38:46:7f:7e:50:6d:59:5d:88: cc:c3:e3:4c:45:57:7c:69:cd:84:62:c0:43:a0:2e:d9:89:da: b3:0e:86:26:c9:e1:8d:47:38:83:02:d8:6a:fa:9c:9e:ce:2d: 03:fe:21:79:a6:9e:e2:ca:69:23:82:bf:9d:15:be:dc:eb:97: 5c:07:8a:c2:70:21:45:ca:37:de:b5:78:cf:89:7c:4b:b1:5b: 03:b8:e2:44:5f:ab:de:42:a1:73:5f:ca:9e:87:ba:15:15:95: 45:d3:bd:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4L8QHX52SlXuCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NmE5ZTBmNDMtNzUwZS00NzIyLTg1YzItNDRmNGQwNjk1ZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLfils+h/gcOGJFKNvHMmrcMBgZ489T0hojn K1tLvEqI6HTV+SzIEBKwc9/KSwI9yFGzqRKFqrO5oxyMe9R+cSd/YKo6lx1sO6vr 8hI3SEQv6e7BrKRLU+mFlocj7TlEPJsS2FI0/328fzxh89pfGE/ts3Gjw3Mz5x6r uJOgQ+lfqRuyx0C55HwzdLzWS2v0nCHmNUseMOKOFpxh/trWX4ybcJBSfHN9n9jZ /n268EQipM1L9ZEl8GpmBr8EDgvBbSp7rijA3zepY2AFTrUKn6TAoPY+gWQYijLx 7dN6WIbUg0eMgyC7uUWOquZbgNtCSN8QPySs6cPQhw5M2gmPtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQzVc2zVOvMk6yS6plh21AF4tEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2M1MTdkYjAtZDM0OC0z MjQ1LTllOTgtNzBiZTAwZDk1MGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBR+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGYUZ94igwAW0nThWNO6t9KMPQHw19OALdP2zhrXEsoVPfkO/BtbMkn WiGiGqtL7h3+9bjPINwkE2wIeCaMrZMd8nI8iB7/qLPsWYJE0Sw8/C5NjAFHscJ2 24EguCGBpABqgCDCarakuQResCZ6OQqh+JUhPshVnp+52stal5U5lgkD3oTK3SrD oaiSXxF6OXh5eUzaU7TPpjhGf35QbVldiMzD40xFV3xpzYRiwEOgLtmJ2rMOhibJ 4Y1HOIMC2Gr6nJ7OLQP+IXmmnuLKaSOCv50Vvtzrl1wHisJwIUXKN961eM+JfEux WwO44kRfq95CoXNfyp6HuhUVlUXTvdY= -----END CERTIFICATE-----Generated at Thu Mar 26 20:09:38 2026 by rpki-client