$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/66d3def4-5713-37be-89f9-a65c16baaf19.roa File: 66d3def4-5713-37be-89f9-a65c16baaf19.roa (raw, json) Hash identifier: 5rYZ2FbPXoMYi4OPFRiwR3fzV/S51BAyrmQe5VqdHqg= Subject key identifier: 8E:1A:74:07:A2:34:75:10:76:DE:E3:FF:02:E8:CF:F8:F1:F8:D6:6C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BB90F11F099002102BD00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/66d3def4-5713-37be-89f9-a65c16baaf19.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.20.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:b9:0f:11:f0:99:00:21:02:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=35d9abd8-181b-4ded-8319-c627c51ecffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:46:56:cc:ae:92:5e:43:7e:33:88:db:61:04: de:e1:db:74:99:c7:f7:d8:8f:3b:c5:09:4f:ec:11: 1a:d9:6a:af:59:7c:91:9d:bb:25:1b:fb:59:0d:b9: 26:ea:2a:7c:08:4b:da:e6:55:82:5f:af:f6:96:05: 74:19:77:ff:06:e2:30:37:39:46:d1:12:8f:b5:e5: 1d:ca:e2:1f:12:6b:7d:ac:1c:40:b8:01:a9:1b:06: 07:1e:8f:d6:07:c6:3e:f9:a9:8b:35:90:ef:65:2d: e3:bf:27:e9:45:04:5f:8b:52:4e:d6:1d:85:15:59: f1:90:39:68:b7:65:d0:89:46:f9:18:80:96:0a:43: be:3c:2d:df:5c:d7:b0:02:11:9e:44:8a:e1:c0:42: d1:00:e2:bf:a9:a8:6a:d1:4b:29:70:c6:48:78:80: e8:af:f9:85:e9:8f:bc:b9:1b:b2:af:6f:4d:3d:9a: 1c:2f:27:ac:4d:a5:6d:c6:1e:86:ef:50:d7:3a:4c: 9f:16:b6:d3:73:6d:b4:fe:91:1d:c6:9f:f7:6a:f9: 03:30:71:47:ea:9e:3f:9e:16:75:dd:1d:7b:4f:0c: b0:96:49:81:05:8b:74:3e:b0:d8:73:c1:e6:f4:03: 49:a6:fb:0b:b8:ea:87:6c:2d:39:1b:db:f2:49:66: 7c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1A:74:07:A2:34:75:10:76:DE:E3:FF:02:E8:CF:F8:F1:F8:D6:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/66d3def4-5713-37be-89f9-a65c16baaf19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:70:23:cd:38:0b:b8:e9:18:0e:f0:e8:f1:91:be:92:49:43: 05:a0:d6:5c:95:1b:b1:6e:08:d1:42:4f:a4:30:53:5d:22:b5: a6:9d:92:c2:c0:e2:38:1f:ae:46:96:13:b5:91:ed:d3:16:5f: 3f:1d:7e:bd:80:08:1a:7b:08:96:91:58:9f:1f:75:bb:04:25: c0:ee:3f:23:ce:bd:fe:a8:f6:a3:8d:5a:11:05:51:09:e5:d3: 63:36:6c:d4:96:33:06:2f:04:d0:73:73:36:21:54:7a:b6:0c: e0:ff:7b:b6:14:ca:b3:79:8c:6b:6e:f8:85:3b:35:86:d5:1e: b1:75:58:1d:8e:aa:a4:2e:54:b5:53:ad:87:69:9a:77:09:9d: c2:e2:cc:be:31:12:20:5f:33:de:fe:e8:25:fb:ce:43:ca:13: 59:aa:58:ea:7f:f6:ec:c6:db:07:40:35:8f:f2:12:a3:60:0a: b7:00:6e:0c:e4:ee:e8:68:d9:cd:12:7d:b9:6b:55:c3:5d:88: ec:9e:00:78:96:34:b6:1f:1a:b5:28:68:70:5f:ea:f2:2a:69: cc:1c:be:68:bb:90:d6:aa:69:cb:42:c7:ab:ff:cf:b9:8f:01: 8c:35:41:cc:69:da:e5:33:3a:3f:8b:51:22:04:bf:0d:05:3f: 5e:cd:9e:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je7kPEfCZACECvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzVkOWFiZDgtMTgxYi00ZGVkLTgzMTktYzYyN2M1MWVjZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkZWzK6SXkN+M4jbYQTe4dt0mcf32I87xQlP 7BEa2WqvWXyRnbslG/tZDbkm6ip8CEva5lWCX6/2lgV0GXf/BuIwNzlG0RKPteUd yuIfEmt9rBxAuAGpGwYHHo/WB8Y++amLNZDvZS3jvyfpRQRfi1JO1h2FFVnxkDlo t2XQiUb5GICWCkO+PC3fXNewAhGeRIrhwELRAOK/qahq0UspcMZIeIDor/mF6Y+8 uRuyr29NPZocLyesTaVtxh6G71DXOkyfFrbTc220/pEdxp/3avkDMHFH6p4/nhZ1 3R17TwywlkmBBYt0PrDYc8Hm9ANJpvsLuOqHbC05G9vySWZ8FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4adAeiNHUQdt7j/wLoz/jx+NZsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjZkM2RlZjQtNTcxMy0z N2JlLTg5ZjktYTY1YzE2YmFhZjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANdwI804C7jpGA7w6PGRvpJJQwWg1lyVG7FuCNFCT6QwU10itaadksLA 4jgfrkaWE7WR7dMWXz8dfr2ACBp7CJaRWJ8fdbsEJcDuPyPOvf6o9qONWhEFUQnl 02M2bNSWMwYvBNBzczYhVHq2DOD/e7YUyrN5jGtu+IU7NYbVHrF1WB2OqqQuVLVT rYdpmncJncLizL4xEiBfM97+6CX7zkPKE1mqWOp/9uzG2wdANY/yEqNgCrcAbgzk 7uho2c0SfblrVcNdiOyeAHiWNLYfGrUoaHBf6vIqacwcvmi7kNaqactCx6v/z7mP AYw1Qcxp2uUzOj+LUSIEvw0FP17Nnok= -----END CERTIFICATE-----Generated at Sun Sep 27 04:03:08 2026 by rpki-client