$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3eb4639e-680e-3fbb-b287-6f893225dd39.roa File: 3eb4639e-680e-3fbb-b287-6f893225dd39.roa (raw, json) Hash identifier: H37cOiUJ0DW7dqRhEnnWDonmUpqXD4VzIvuFNV4stDk= Subject key identifier: A1:3D:D2:30:9C:4A:F5:91:7F:4D:6A:DA:6B:2B:C6:94:3A:F1:1B:50 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BBED18CC8ED5A981FA020 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3eb4639e-680e-3fbb-b287-6f893225dd39.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.21.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:be:d1:8c:c8:ed:5a:98:1f:a0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2f6fd3e0-a91c-47d5-b673-bee0fd54ee65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1c:9b:70:38:61:32:5f:cf:51:5c:18:35:30: 1e:c2:ff:46:db:4e:bf:63:b8:4a:5f:29:4a:af:1e: 6f:f1:47:b4:e9:c9:1f:08:2a:cd:67:cc:0c:67:f7: 43:eb:1a:57:19:53:1f:8e:75:f1:54:fe:0d:26:46: 7b:64:61:aa:a9:22:a7:93:b6:ca:14:be:3d:28:d4: 44:1b:aa:e9:dc:9a:fd:d7:9e:70:98:c9:f2:a3:2f: a0:86:88:dd:f0:6e:e0:f7:fd:1b:8c:65:73:c5:2e: b1:5f:b6:76:00:bf:78:a9:48:d2:af:24:ef:d9:e8: ba:72:8f:a2:db:f6:3d:74:e4:0d:f0:24:71:91:4d: f9:2e:5c:92:05:99:57:73:ac:40:c8:82:2e:50:25: 47:f3:76:73:1d:ae:07:61:66:1a:23:8b:57:a5:39: 38:fe:94:30:b7:b2:20:ad:4d:fe:f8:ad:9b:38:a7: 4f:f6:20:73:81:f9:96:44:b6:1a:0f:87:d8:e2:37: 68:91:d8:16:32:ec:87:a7:5f:3a:fc:01:ee:37:4a: d7:64:47:cc:39:6a:11:b2:ce:6b:30:5e:c2:d5:bf: fb:42:eb:e7:64:fc:85:bc:07:7e:96:d8:ef:a3:a7: 16:3e:78:70:12:be:fe:2c:fa:1f:92:11:6e:61:8b: 55:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3D:D2:30:9C:4A:F5:91:7F:4D:6A:DA:6B:2B:C6:94:3A:F1:1B:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3eb4639e-680e-3fbb-b287-6f893225dd39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:98:50:72:4c:f2:85:08:a0:32:a4:44:80:d1:c0:6a:42:38: 20:76:b4:1e:ff:10:2f:db:bb:a5:51:a1:29:3f:2c:3c:67:0e: 47:a5:c8:83:7a:e6:da:21:3e:7b:50:2d:26:85:ec:e2:91:08: 1c:16:d6:00:4b:8c:b1:46:fd:27:87:f7:e7:e3:fe:8e:c4:53: d5:47:bc:ad:be:bb:d3:75:c2:dc:d9:8a:49:be:af:09:9b:96: 11:8b:fb:04:0f:48:21:2b:d1:b1:03:16:89:3b:6b:19:7d:1b: c5:97:33:5b:61:29:21:ff:8e:09:5f:55:d4:48:9e:a1:7c:1c: 67:3b:de:df:28:71:d4:4e:26:94:e5:cd:0b:78:99:cc:fb:fa: 33:3f:6a:05:cd:07:93:01:b5:74:54:a0:1b:9f:4a:5a:58:08: 6a:cd:aa:90:19:4a:c4:70:06:e9:72:14:02:24:06:40:5f:93: 58:42:c6:aa:ca:14:02:86:03:fa:41:86:f1:b6:26:9c:af:55: ba:78:d7:60:d6:89:92:62:3f:b9:4b:b0:d0:a0:a5:f7:ff:82: 0e:80:06:bd:57:16:ae:9f:d8:f7:28:39:9e:c7:aa:72:04:0d: 41:d4:df:1b:14:ee:c2:24:f1:3a:83:c8:59:f8:a1:e4:5c:ee: 8f:ff:e6:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je77RjMjtWpgfoCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmY2ZmQzZTAtYTkxYy00N2Q1LWI2NzMtYmVlMGZkNTRlZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BybcDhhMl/PUVwYNTAewv9G206/Y7hKXylK rx5v8Ue06ckfCCrNZ8wMZ/dD6xpXGVMfjnXxVP4NJkZ7ZGGqqSKnk7bKFL49KNRE G6rp3Jr9155wmMnyoy+ghojd8G7g9/0bjGVzxS6xX7Z2AL94qUjSryTv2ei6co+i 2/Y9dOQN8CRxkU35LlySBZlXc6xAyIIuUCVH83ZzHa4HYWYaI4tXpTk4/pQwt7Ig rU3++K2bOKdP9iBzgfmWRLYaD4fY4jdokdgWMuyHp186/AHuN0rXZEfMOWoRss5r MF7C1b/7QuvnZPyFvAd+ltjvo6cWPnhwEr7+LPofkhFuYYtVtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKE90jCcSvWRf01q2msrxpQ68RtQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2ViNDYzOWUtNjgwZS0z ZmJiLWIyODctNmY4OTMyMjVkZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyYUHJM8oUIoDKkRIDRwGpCOCB2tB7/EC/bu6VRoSk/LDxnDkelyIN6 5tohPntQLSaF7OKRCBwW1gBLjLFG/SeH9+fj/o7EU9VHvK2+u9N1wtzZikm+rwmb lhGL+wQPSCEr0bEDFok7axl9G8WXM1thKSH/jglfVdRInqF8HGc73t8ocdROJpTl zQt4mcz7+jM/agXNB5MBtXRUoBufSlpYCGrNqpAZSsRwBulyFAIkBkBfk1hCxqrK FAKGA/pBhvG2JpyvVbp412DWiZJiP7lLsNCgpff/gg6ABr1XFq6f2PcoOZ7HqnIE DUHU3xsU7sIk8TqDyFn4oeRc7o//5go= -----END CERTIFICATE-----Generated at Wed Sep 30 11:27:41 2026 by rpki-client