$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6cd29e42-2f4d-38a3-abd7-1c493e0fac10.roa File: 6cd29e42-2f4d-38a3-abd7-1c493e0fac10.roa (raw, json) Hash identifier: QN3BBQ8WJkb7IGkduUbV9Dhio1Swe2RnbtREwEXN8Ig= Subject key identifier: 88:51:0B:44:4F:7C:DC:42:CB:E4:A0:17:D8:4F:3C:75:5F:C6:86:B1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BC6B934A6F0223BC11D50 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6cd29e42-2f4d-38a3-abd7-1c493e0fac10.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.21.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:c6:b9:34:a6:f0:22:3b:c1:1d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ab731510-61ae-47b7-8d00-25e5571cb038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:be:05:74:e9:af:89:04:f4:b5:3c:cc:4a:3c: 9e:3c:2d:15:57:41:7c:64:44:50:b9:5e:39:6d:ad: 16:1d:10:9d:58:68:dd:27:18:61:96:9d:32:13:f7: b9:e8:17:2e:e1:e1:6f:d1:85:ab:2a:63:76:8f:ed: b8:35:39:d4:ba:fa:bf:cb:39:a2:d1:8d:23:58:02: 6d:bd:8f:57:51:e9:1e:20:e3:47:c7:58:9d:03:97: 0d:b9:ab:27:4f:3d:f8:c1:21:a3:93:a3:e4:2d:f0: 96:39:ab:1c:3d:c4:a3:77:0f:b8:74:e9:47:70:f7: 23:5e:0a:fe:e9:33:46:d0:05:53:e6:5f:14:ac:9c: 45:97:94:76:67:91:10:63:5d:3c:cc:6a:fb:50:fd: 7f:74:69:2e:08:85:a0:a2:39:11:fe:2a:ae:ce:21: 03:98:d8:79:a7:68:7b:08:4b:e6:b4:5e:4f:21:16: 06:03:5f:2a:12:7c:e2:fc:8f:53:83:c8:7a:40:e7: aa:8d:f5:da:e3:41:db:cb:ad:f7:17:ff:b8:b1:ca: e3:55:dd:05:2b:e1:9a:de:3f:98:36:2f:43:1d:e8: 41:6e:fc:46:66:02:6e:94:d1:de:07:87:fe:68:64: a2:54:9c:4a:18:a6:27:33:4b:93:8b:4b:26:79:f5: 68:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:51:0B:44:4F:7C:DC:42:CB:E4:A0:17:D8:4F:3C:75:5F:C6:86:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6cd29e42-2f4d-38a3-abd7-1c493e0fac10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:18:cd:6a:e7:ee:16:f6:e7:1a:01:a4:13:bd:49:c1:07:30: e2:50:a8:6a:b0:55:9a:46:da:72:a5:7c:b5:4e:61:62:0b:52: 80:71:0f:28:dd:ab:f3:dd:30:48:60:0f:6a:61:27:de:aa:29: 27:a8:20:b9:55:c3:78:c5:69:ad:d3:ad:86:16:66:86:b0:36: 8e:37:c9:b7:d1:d8:7e:ba:70:aa:14:8f:df:b1:70:d5:8d:33: 8c:4b:b9:40:f8:56:a1:99:9d:04:78:66:b5:39:93:fc:ad:b1: 40:9b:6d:52:73:29:75:eb:e5:ea:fd:6a:4c:9e:76:7d:4d:6e: 34:9d:31:48:bd:5c:7f:d6:78:1a:82:7c:a0:c9:4f:c6:36:ec: 80:ab:24:e8:48:8e:07:dc:85:8e:47:21:91:16:d4:53:c4:12: 0f:05:ae:de:f7:c3:a1:ec:9b:4b:51:0f:9b:c9:dd:25:46:c5: bd:57:78:cf:2a:bb:fe:32:9f:0f:70:04:e9:eb:6b:59:bd:ce: 8a:fc:88:0e:ab:ec:a5:c7:2d:6d:3c:33:9c:86:9b:74:2b:f2: 7b:60:71:25:ea:0b:6c:72:27:d3:54:5d:3a:92:f6:f1:6e:b8: 1c:02:75:c6:23:ec:b3:cd:44:a5:7d:21:bb:8e:49:00:9a:da: 33:48:7b:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je8a5NKbwIjvBHVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWI3MzE1MTAtNjFhZS00N2I3LThkMDAtMjVlNTU3MWNiMDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL4FdOmviQT0tTzMSjyePC0VV0F8ZERQuV45 ba0WHRCdWGjdJxhhlp0yE/e56Bcu4eFv0YWrKmN2j+24NTnUuvq/yzmi0Y0jWAJt vY9XUekeIONHx1idA5cNuasnTz34wSGjk6PkLfCWOascPcSjdw+4dOlHcPcjXgr+ 6TNG0AVT5l8UrJxFl5R2Z5EQY108zGr7UP1/dGkuCIWgojkR/iquziEDmNh5p2h7 CEvmtF5PIRYGA18qEnzi/I9Tg8h6QOeqjfXa40Hby633F/+4scrjVd0FK+Ga3j+Y Ni9DHehBbvxGZgJulNHeB4f+aGSiVJxKGKYnM0uTi0smefVoYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhRC0RPfNxCy+SgF9hPPHVfxoaxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmNkMjllNDItMmY0ZC0z OGEzLWFiZDctMWM0OTNlMGZhYzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8YzWrn7hb25xoBpBO9ScEHMOJQqGqwVZpG2nKlfLVOYWILUoBxDyjd q/PdMEhgD2phJ96qKSeoILlVw3jFaa3TrYYWZoawNo43ybfR2H66cKoUj9+xcNWN M4xLuUD4VqGZnQR4ZrU5k/ytsUCbbVJzKXXr5er9akyedn1NbjSdMUi9XH/WeBqC fKDJT8Y27ICrJOhIjgfchY5HIZEW1FPEEg8Frt73w6Hsm0tRD5vJ3SVGxb1XeM8q u/4ynw9wBOnra1m9zor8iA6r7KXHLW08M5yGm3Qr8ntgcSXqC2xyJ9NUXTqS9vFu uBwCdcYj7LPNRKV9IbuOSQCa2jNIe4E= -----END CERTIFICATE-----Generated at Sat Sep 26 15:09:53 2026 by rpki-client