$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/711c64c7-4a14-3bc0-895c-fc4d4aee5ee1.roa File: 711c64c7-4a14-3bc0-895c-fc4d4aee5ee1.roa (raw, json) Hash identifier: MTfOMm7wAQI+PIg2EqE3GtRL6tnoXHEUz9VWlyxCTrE= Subject key identifier: 74:48:86:90:00:89:CA:61:7D:CC:63:AF:AC:9C:C6:7F:72:F5:2D:7A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BC7FCE10608776D3BFD00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/711c64c7-4a14-3bc0-895c-fc4d4aee5ee1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.21.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:c7:fc:e1:06:08:77:6d:3b:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bcaef499-5fba-407a-8933-86556d2a23d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:80:47:a4:d0:6c:f6:eb:a1:85:00:be:ad:13: 50:7d:39:67:7b:03:1b:65:e6:72:70:f9:41:56:a2: e2:c5:51:25:a4:b4:67:ee:bd:e1:3e:e4:73:2c:52: ec:60:b4:f4:78:1d:e7:4b:8e:45:5f:be:ea:62:72: 80:a7:8a:5a:0b:87:4f:e6:96:ce:39:86:f5:8b:57: 3d:b3:6c:a9:33:0e:bb:a5:e6:94:36:85:2b:77:d7: 1a:47:de:8a:3d:04:5a:15:89:77:65:61:cf:29:f3: 81:48:f0:37:cd:2c:bc:fd:e8:55:81:11:c9:7c:b0: dd:f5:99:8e:79:ce:cd:78:e2:e4:c5:da:a8:24:e7: 87:27:6e:00:cb:4e:43:15:1b:36:1a:9a:c8:6e:f3: c4:29:b2:65:57:0b:c7:5d:e1:4e:8b:15:cd:35:dd: 5a:60:66:82:73:a7:37:cf:54:21:1b:60:e3:80:9f: 77:54:d5:b0:a1:c6:3d:bb:00:a1:de:ca:4b:f2:f8: 43:3c:55:16:60:ce:e5:c8:94:c6:95:1d:48:ac:b7: 29:c7:d8:d0:c3:70:b5:78:a6:ed:da:d4:2e:c8:69: 30:3a:ec:30:d9:ef:98:6c:05:c8:49:5b:41:2c:3c: 0e:c8:9d:43:4c:8a:58:96:02:52:40:9a:5b:85:3d: bb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:48:86:90:00:89:CA:61:7D:CC:63:AF:AC:9C:C6:7F:72:F5:2D:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/711c64c7-4a14-3bc0-895c-fc4d4aee5ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:64:06:d2:3b:fd:52:bb:54:77:87:46:af:17:a6:6e:86:b0: fb:b6:e8:ba:f9:03:a1:2c:cf:ee:36:46:05:11:d6:02:b2:fb: 75:e8:32:f0:e6:8f:8d:7c:66:30:c5:13:09:55:8c:a7:b8:31: 0e:03:67:47:c0:a0:dd:99:4b:27:dd:2f:b4:32:88:08:0b:ae: 82:75:ea:ff:32:a9:10:c8:ec:58:5a:6c:0b:81:b7:2d:a7:3b: c4:0f:cc:71:f7:99:4e:20:91:4c:a5:59:21:6a:ec:c5:b2:82: 8c:96:4d:65:c7:bc:4d:af:f7:4b:ff:8b:0b:8e:b3:b9:3b:07: dd:91:61:12:5e:78:0f:ba:50:e0:df:d8:12:d8:b9:62:7b:1f: 47:e1:73:d2:43:95:85:51:53:fb:fd:c6:5c:c1:df:b0:8b:34: 40:ab:02:25:a5:32:0c:e8:35:94:85:dc:2a:7e:7b:54:25:44: 35:f4:74:d0:10:20:14:b7:7f:e6:6c:33:5a:f6:1d:b8:bc:e7: 62:29:d5:97:64:70:7a:9b:6a:8d:69:c2:8c:3e:8f:a0:a3:8a: 67:3c:aa:10:8c:ec:d3:00:b2:67:d5:11:c7:94:1d:b7:d3:4a: b1:95:44:4b:49:a1:b0:4a:d9:2f:8a:ff:48:28:bf:0c:b4:1d: 05:2b:a1:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je8f84QYId207/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmNhZWY0OTktNWZiYS00MDdhLTg5MzMtODY1NTZkMmEyM2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4BHpNBs9uuhhQC+rRNQfTlnewMbZeZycPlB VqLixVElpLRn7r3hPuRzLFLsYLT0eB3nS45FX77qYnKAp4paC4dP5pbOOYb1i1c9 s2ypMw67peaUNoUrd9caR96KPQRaFYl3ZWHPKfOBSPA3zSy8/ehVgRHJfLDd9ZmO ec7NeOLkxdqoJOeHJ24Ay05DFRs2GprIbvPEKbJlVwvHXeFOixXNNd1aYGaCc6c3 z1QhG2DjgJ93VNWwocY9uwCh3spL8vhDPFUWYM7lyJTGlR1IrLcpx9jQw3C1eKbt 2tQuyGkwOuww2e+YbAXISVtBLDwOyJ1DTIpYlgJSQJpbhT275wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRIhpAAicphfcxjr6ycxn9y9S16MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzExYzY0YzctNGExNC0z YmMwLTg5NWMtZmM0ZDRhZWU1ZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMRkBtI7/VK7VHeHRq8Xpm6GsPu26Lr5A6Esz+42RgUR1gKy+3XoMvDm j418ZjDFEwlVjKe4MQ4DZ0fAoN2ZSyfdL7QyiAgLroJ16v8yqRDI7FhabAuBty2n O8QPzHH3mU4gkUylWSFq7MWygoyWTWXHvE2v90v/iwuOs7k7B92RYRJeeA+6UODf 2BLYuWJ7H0fhc9JDlYVRU/v9xlzB37CLNECrAiWlMgzoNZSF3Cp+e1QlRDX0dNAQ IBS3f+ZsM1r2Hbi852Ip1ZdkcHqbao1pwow+j6Cjimc8qhCM7NMAsmfVEceUHbfT SrGVREtJobBK2S+K/0govwy0HQUroYY= -----END CERTIFICATE-----Generated at Sun Oct 11 17:36:17 2026 by rpki-client