$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/509c0548-8e0b-303f-aea1-604cfd387243.roa File: 509c0548-8e0b-303f-aea1-604cfd387243.roa (raw, json) Hash identifier: RSFyb+355EDl16pPXyfBdupe3Jr0akA29bMIc0h3rM0= Subject key identifier: C2:53:87:38:92:0B:B1:D2:22:33:7B:A4:5E:5A:41:0D:C5:04:35:6F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983F9E3A33321F0EA9118B0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/509c0548-8e0b-303f-aea1-604cfd387243.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.20.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:f9:e3:a3:33:21:f0:ea:91:18:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7c1496a5-3b11-48b7-9b14-f754909f52c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fe:13:1f:30:5d:ed:5c:b9:1f:c3:c9:11:25: af:b8:5f:ad:53:f7:8b:7e:95:38:7d:75:a9:ae:86: f8:6a:44:47:d8:fa:b3:bb:bc:b5:20:a3:3e:93:5f: a5:de:a1:88:19:80:6d:2b:45:dc:8e:9d:ea:4e:28: 49:29:98:f3:47:69:a1:25:24:a0:a5:a3:6a:15:25: 20:73:23:cc:32:27:b7:04:8a:af:c4:9b:07:5c:49: 21:3e:6a:72:be:63:e8:21:34:c7:ce:a3:c4:46:5e: 2e:58:cf:03:bf:81:3b:fb:81:99:5b:f4:ce:27:34: 73:dd:dc:41:be:63:f6:48:56:1e:de:3d:66:43:a7: a5:51:26:b5:48:5e:26:4d:84:33:5b:5d:ef:2b:e7: 2a:26:f3:bf:fd:a1:6b:66:48:87:5d:64:ab:7e:bd: 3f:8c:fd:65:35:e2:60:88:17:d2:30:5b:01:92:16: ab:34:be:48:ab:af:1d:17:cd:4f:e9:9d:e0:89:ab: 0f:4a:7c:2d:39:b2:22:19:c7:4d:04:eb:75:af:ce: 6a:ec:d8:a1:48:27:64:f6:31:3d:cd:ce:d3:d8:73: 29:5a:38:f0:4c:8c:e4:6a:4d:55:d0:dd:26:38:a1: 04:cf:03:2b:d8:70:40:09:fb:3c:9e:a5:2f:76:61: 22:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:53:87:38:92:0B:B1:D2:22:33:7B:A4:5E:5A:41:0D:C5:04:35:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/509c0548-8e0b-303f-aea1-604cfd387243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:b0:aa:08:69:66:37:dc:78:17:78:f8:8f:b3:91:41:43:8f: 1d:ca:b7:89:a5:85:29:57:9f:8f:ae:21:8c:fb:01:a1:d0:39: c5:6d:f4:a6:bb:83:6b:99:2a:f1:23:c9:94:47:33:d7:d6:34: 45:2a:69:39:42:81:c3:12:90:74:60:5a:ce:3f:f1:d2:c2:1b: 92:ba:77:46:41:70:94:ba:40:ee:b9:9e:79:0f:4c:0b:48:95: 4a:e2:73:05:0a:4b:27:cf:9d:58:3b:f9:49:61:06:b4:e4:04: 4f:c8:e4:ae:8f:25:d8:7d:d0:15:21:38:ca:88:50:fe:d4:a1: 9a:32:bf:44:72:53:94:e8:ca:14:d1:9b:49:5f:c5:40:8e:81: 76:62:fb:34:62:ae:0e:05:6e:75:f7:00:6e:e7:0c:1c:8c:0a: 87:93:7c:dc:52:e5:ca:df:e4:57:42:db:58:df:b6:6c:6d:39: 97:33:f0:e7:76:ed:21:c5:5b:09:69:e9:0c:67:e8:88:b5:cb: 1f:64:53:e6:03:aa:bc:82:63:58:86:8a:ee:27:86:d5:39:b2: 9f:0f:da:f8:a6:58:0c:c9:20:93:a7:29:ed:f9:d7:70:76:98: 66:39:ea:5e:fa:49:f0:25:57:08:b8:2b:1d:3d:f5:aa:fa:09: f9:75:50:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg/njozMh8OqRGLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2MxNDk2YTUtM2IxMS00OGI3LTliMTQtZjc1NDkwOWY1MmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv4THzBd7Vy5H8PJESWvuF+tU/eLfpU4fXWp rob4akRH2Pqzu7y1IKM+k1+l3qGIGYBtK0Xcjp3qTihJKZjzR2mhJSSgpaNqFSUg cyPMMie3BIqvxJsHXEkhPmpyvmPoITTHzqPERl4uWM8Dv4E7+4GZW/TOJzRz3dxB vmP2SFYe3j1mQ6elUSa1SF4mTYQzW13vK+cqJvO//aFrZkiHXWSrfr0/jP1lNeJg iBfSMFsBkharNL5Iq68dF81P6Z3giasPSnwtObIiGcdNBOt1r85q7NihSCdk9jE9 zc7T2HMpWjjwTIzkak1V0N0mOKEEzwMr2HBACfs8nqUvdmEi7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJThziSC7HSIjN7pF5aQQ3FBDVvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTA5YzA1NDgtOGUwYi0z MDNmLWFlYTEtNjA0Y2ZkMzg3MjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBSDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACewqghpZjfceBd4+I+zkUFDjx3Kt4mlhSlXn4+uIYz7AaHQOcVt9Ka7 g2uZKvEjyZRHM9fWNEUqaTlCgcMSkHRgWs4/8dLCG5K6d0ZBcJS6QO65nnkPTAtI lUricwUKSyfPnVg7+UlhBrTkBE/I5K6PJdh90BUhOMqIUP7UoZoyv0RyU5ToyhTR m0lfxUCOgXZi+zRirg4FbnX3AG7nDByMCoeTfNxS5crf5FdC21jftmxtOZcz8Od2 7SHFWwlp6Qxn6Ii1yx9kU+YDqryCY1iGiu4nhtU5sp8P2vimWAzJIJOnKe3513B2 mGY56l76SfAlVwi4Kx099ar6Cfl1UC4= -----END CERTIFICATE-----Generated at Mon Sep 28 06:49:38 2026 by rpki-client