$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50a6d7b7-fffa-3ef4-bbe3-dd99cb15c999.roa File: 50a6d7b7-fffa-3ef4-bbe3-dd99cb15c999.roa (raw, json) Hash identifier: 4WMMsAePV1CyFD6SqFz0JanSPkpKLtn5SNadoFcahos= Subject key identifier: 4C:8E:4F:F7:C7:40:C9:0A:09:4C:A6:24:32:77:82:18:D0:73:8D:03 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F498400E2BFDE2EF19845DD80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50a6d7b7-fffa-3ef4-bbe3-dd99cb15c999.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.20.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:00:e2:bf:de:2e:f1:98:45:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d4cefb22-898f-4238-8ebb-72983f655897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:84:fc:97:b7:40:6e:29:d3:08:c9:f2:0e: 63:c1:6a:ea:50:24:bd:a4:e6:82:c5:32:81:71:34: 59:f3:60:71:44:3e:76:e8:cd:ea:76:e1:6c:a7:7a: fe:e5:c3:0e:35:30:71:d5:41:44:48:0f:63:ac:5b: 29:e8:e4:67:f2:f8:f9:67:79:a5:b0:a1:d8:c6:90: b9:22:a6:d7:4b:0c:05:75:24:16:b7:ad:87:a3:b1: c2:19:cb:2b:89:68:4f:04:66:26:d2:60:b5:aa:30: 86:d9:d4:ee:3e:de:c9:f3:ad:91:eb:65:c5:fc:f1: ff:e0:6e:23:ad:29:15:28:2a:4e:25:f9:80:38:10: d3:08:c0:03:3b:8c:5d:62:2c:2b:69:7f:46:9b:98: de:1a:a5:c5:00:c2:b2:00:87:e5:ec:b5:9f:a6:5c: fe:2c:7d:e3:f3:6f:32:52:8f:a3:eb:bd:db:8d:a5: 2c:26:77:06:8f:cd:a0:8f:70:50:72:33:3b:01:4e: 1f:72:06:26:c6:df:27:a2:9a:de:82:11:a7:c0:c2: fd:60:bc:bc:66:31:45:3c:11:af:99:e6:2c:1e:44: 88:dc:89:21:ad:06:94:9f:ae:99:04:3c:7c:e5:76: bf:59:84:46:1c:e6:9b:6e:cc:d8:b6:b0:89:a2:f5: 2a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8E:4F:F7:C7:40:C9:0A:09:4C:A6:24:32:77:82:18:D0:73:8D:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50a6d7b7-fffa-3ef4-bbe3-dd99cb15c999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f1:27:02:1c:15:5b:bb:4e:26:fb:ac:f2:c8:97:a1:7d:11: 34:de:d8:fa:b4:94:50:78:d9:de:90:20:7b:86:de:76:28:e6: 0b:a5:7d:9e:1d:53:ac:22:6c:f8:dd:d0:3b:77:54:59:37:49: 15:68:64:2e:3a:f3:ad:35:84:77:22:66:96:43:5e:be:0e:9d: fc:e6:05:43:a0:0e:6d:8c:aa:b0:00:9d:35:da:8b:4f:3a:fb: e5:c1:94:ae:91:5e:be:9e:b5:95:cc:07:f1:c5:35:63:7e:1c: 82:0f:7d:ef:f1:8a:9f:73:e8:17:68:db:62:f2:0b:5c:84:77: e2:8b:05:d1:eb:cd:d8:69:e1:7b:1b:94:23:3c:a7:25:3b:ab: c2:a2:fd:9b:31:e1:cd:83:fc:f1:e9:12:14:3e:f5:96:7c:6a: 2b:8e:f5:aa:dc:1b:35:65:47:eb:7b:89:7e:ab:68:1c:ef:13: 20:1d:8b:76:25:62:b0:2a:a8:01:9c:4f:69:17:38:73:fc:d3: 96:fb:f7:f1:5a:7d:df:90:3f:73:f3:2d:64:b5:19:e8:2c:ec: e9:e6:2e:cd:49:86:ef:f4:95:39:d1:cd:84:ad:9d:9a:bf:f6: e9:00:50:6f:c9:77:8c:b6:93:93:0e:03:94:aa:f5:dd:47:96: dd:ae:98:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhADiv94u8ZhF3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDRjZWZiMjItODk4Zi00MjM4LThlYmItNzI5ODNmNjU1ODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4KE/Je3QG4p0wjJ8g5jwWrqUCS9pOaCxTKB cTRZ82BxRD526M3qduFsp3r+5cMONTBx1UFESA9jrFsp6ORn8vj5Z3mlsKHYxpC5 IqbXSwwFdSQWt62Ho7HCGcsriWhPBGYm0mC1qjCG2dTuPt7J862R62XF/PH/4G4j rSkVKCpOJfmAOBDTCMADO4xdYiwraX9Gm5jeGqXFAMKyAIfl7LWfplz+LH3j828y Uo+j673bjaUsJncGj82gj3BQcjM7AU4fcgYmxt8nopreghGnwML9YLy8ZjFFPBGv meYsHkSI3IkhrQaUn66ZBDx85Xa/WYRGHOabbszYtrCJovUqYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyOT/fHQMkKCUymJDJ3ghjQc40DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTBhNmQ3YjctZmZmYS0z ZWY0LWJiZTMtZGQ5OWNiMTVjOTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDxJwIcFVu7Tib7rPLIl6F9ETTe2Pq0lFB42d6QIHuG3nYo5gulfZ4d U6wibPjd0Dt3VFk3SRVoZC468601hHciZpZDXr4OnfzmBUOgDm2MqrAAnTXai086 ++XBlK6RXr6etZXMB/HFNWN+HIIPfe/xip9z6Bdo22LyC1yEd+KLBdHrzdhp4Xsb lCM8pyU7q8Ki/Zsx4c2D/PHpEhQ+9ZZ8aiuO9arcGzVlR+t7iX6raBzvEyAdi3Yl YrAqqAGcT2kXOHP805b79/Fafd+QP3PzLWS1Gegs7OnmLs1Jhu/0lTnRzYStnZq/ 9ukAUG/Jd4y2k5MOA5Sq9d1Hlt2umPk= -----END CERTIFICATE-----Generated at Sun Sep 27 07:59:43 2026 by rpki-client