$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa File: 475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa (raw, json) Hash identifier: odmk6KKHESxvUcToXhGtU+8yx+3c5GeWYzBF5moszf8= Subject key identifier: B9:12:F5:D1:7E:EE:97:0D:4B:2A:24:7A:40:9E:2D:BB:4C:A5:1E:1A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BB0AB3FC4EFB12AD97E80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.20.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:b0:ab:3f:c4:ef:b1:2a:d9:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0ab6bc8d-2041-4ef8-842b-282d877441c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ac:07:6e:c3:62:ff:aa:49:0a:b3:64:1c:35: ec:9c:28:ad:1d:ad:fe:45:08:41:25:86:b6:c7:40: 5f:95:f2:63:7a:2e:af:5e:00:61:05:ea:a3:45:d3: 17:f9:90:56:0d:2c:06:c1:84:ff:d6:e1:e8:08:67: 1f:45:ab:50:7c:3d:d8:e0:a3:7e:71:61:77:9f:e9: 6a:ff:20:65:d5:b0:58:e4:4e:2a:f7:7e:b7:08:39: 43:63:f1:87:51:e2:6e:0d:89:3b:11:49:99:e1:bf: 57:9d:20:e2:ee:42:71:67:6b:42:cc:b1:f3:df:ba: 60:d7:94:ac:62:c6:22:58:5a:ed:b9:5f:12:bd:49: 6c:fe:fa:ab:2a:ce:ee:7c:5c:d7:64:e4:85:53:c9: 75:55:e9:0c:4d:43:5a:37:6f:12:5b:de:ca:eb:f3: 14:9c:ca:ee:d3:cb:db:c2:65:46:4e:05:e8:cf:e9: c4:d1:7c:1c:14:bf:a6:7f:b2:4a:62:0f:ec:37:3a: 60:33:8c:fc:bb:a9:bc:cd:f3:84:6b:4d:23:58:cb: 9c:ec:d3:33:ce:ff:7c:1a:a7:21:37:08:6a:43:ef: fc:ec:90:bd:4d:05:7d:b4:11:af:36:98:99:5f:4a: 8b:c7:95:9e:5c:ab:e6:31:66:48:70:8a:43:44:11: 23:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:12:F5:D1:7E:EE:97:0D:4B:2A:24:7A:40:9E:2D:BB:4C:A5:1E:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:ac:56:ee:e4:e3:4a:cf:c7:a6:31:a9:86:99:e3:5f:be:f8: 68:e8:01:bd:b1:2d:a6:53:a5:b4:59:ad:e4:2a:2b:87:2d:31: 85:de:07:f0:64:05:42:af:49:55:3b:f2:dc:5c:36:68:f9:2c: 50:8e:25:46:dc:57:2c:ef:dd:c9:a2:18:80:d1:52:26:6e:ea: 2a:94:31:36:67:78:3d:cc:08:b0:c1:9b:ec:b6:0e:90:7a:2c: 3c:57:e1:db:94:4f:d3:50:ca:39:a1:eb:0d:2a:da:94:58:95: c7:a5:be:51:22:a6:af:70:b6:83:99:9e:1d:4c:c1:2b:98:3f: 7d:0a:c1:27:de:55:5e:9f:84:5e:95:b1:c4:b2:21:e5:4e:ad: 0d:29:da:65:e4:bc:c1:fb:db:01:27:e1:ec:c9:42:4e:e1:d1: b3:18:9b:d4:11:bf:1c:8e:e8:7c:35:60:c0:9b:15:9d:62:b1: 2a:e1:05:d6:d8:32:c7:c8:2b:f3:ba:c3:6f:39:08:2e:a7:72: 73:81:9a:12:1e:5d:f7:f1:46:d4:3d:09:5a:f4:8e:f9:9e:6a: 6a:8c:49:ed:41:89:1b:03:36:e8:96:2a:4b:3e:ff:fd:f1:9c: 13:f2:ae:95:85:d7:83:2a:1a:87:b0:37:a1:d2:76:30:72:71: 24:6c:51:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je7CrP8TvsSrZfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGFiNmJjOGQtMjA0MS00ZWY4LTg0MmItMjgyZDg3NzQ0MWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqwHbsNi/6pJCrNkHDXsnCitHa3+RQhBJYa2 x0BflfJjei6vXgBhBeqjRdMX+ZBWDSwGwYT/1uHoCGcfRatQfD3Y4KN+cWF3n+lq /yBl1bBY5E4q9363CDlDY/GHUeJuDYk7EUmZ4b9XnSDi7kJxZ2tCzLHz37pg15Ss YsYiWFrtuV8SvUls/vqrKs7ufFzXZOSFU8l1VekMTUNaN28SW97K6/MUnMru08vb wmVGTgXoz+nE0XwcFL+mf7JKYg/sNzpgM4z8u6m8zfOEa00jWMuc7NMzzv98Gqch NwhqQ+/87JC9TQV9tBGvNpiZX0qLx5WeXKvmMWZIcIpDRBEjrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkS9dF+7pcNSyokekCeLbtMpR4aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDc1YzE3M2MtNmEzMC0z NGQ1LWJiYjQtOTUwZjdmZmU4ZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqsVu7k40rPx6YxqYaZ41+++GjoAb2xLaZTpbRZreQqK4ctMYXeB/Bk BUKvSVU78txcNmj5LFCOJUbcVyzv3cmiGIDRUiZu6iqUMTZneD3MCLDBm+y2DpB6 LDxX4duUT9NQyjmh6w0q2pRYlcelvlEipq9wtoOZnh1MwSuYP30KwSfeVV6fhF6V scSyIeVOrQ0p2mXkvMH72wEn4ezJQk7h0bMYm9QRvxyO6Hw1YMCbFZ1isSrhBdbY MsfIK/O6w285CC6ncnOBmhIeXffxRtQ9CVr0jvmeamqMSe1BiRsDNuiWKks+//3x nBPyrpWF14MqGoewN6HSdjBycSRsUew= -----END CERTIFICATE-----Generated at Sun Sep 27 04:19:24 2026 by rpki-client