$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86f688b9-1b92-3650-8689-e026ed5732ea.roa File: 86f688b9-1b92-3650-8689-e026ed5732ea.roa (raw, json) Hash identifier: z+UVGZ1958jlFrSOc7rRXepYZO4UXwGjS5d6xgbHKFE= Subject key identifier: 66:28:6C:27:FA:C8:7F:39:32:D5:F3:17:1F:03:04:40:0E:0C:C0:57 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E00BDE7A0AED1AED304680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86f688b9-1b92-3650-8689-e026ed5732ea.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 184.20.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:0b:de:7a:0a:ed:1a:ed:30:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0db8cbc9-36b9-4037-b05e-eba6c69a21f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:38:41:f0:43:1d:9b:14:23:00:67:fe:21:08: 2d:02:90:10:3a:25:ec:10:5d:24:28:d3:65:d1:fb: 3c:1f:3e:f8:4f:eb:9e:93:c1:30:a3:5d:7b:11:ff: 03:1a:84:2e:b3:b8:37:f3:8a:e5:6d:c0:bb:45:44: 45:35:a2:ab:22:e5:d9:d9:82:0c:10:95:7d:c4:22: d2:c1:00:37:2c:54:c8:7b:e7:2c:fd:cf:6b:a7:c6: 10:56:7b:bc:73:a9:38:3c:b0:05:95:d6:78:b5:e8: 42:f0:17:0e:cb:b0:86:a3:1e:5f:60:f1:9c:d4:02: 56:63:01:5c:8a:0f:16:79:24:39:00:52:0c:72:97: 48:90:34:39:3a:f3:84:64:7f:7d:08:d9:ff:10:d7: 1d:c3:47:24:4b:f9:41:24:50:01:4b:35:5d:88:8f: 24:5c:a4:e8:c2:e9:71:d0:33:d8:45:6f:11:87:4b: 89:7c:56:3a:07:b1:8d:8e:24:cb:fe:e0:d8:73:d7: 1d:eb:3a:46:e0:58:9f:7a:4b:76:80:aa:9b:c6:65: b1:93:f4:94:e6:c8:99:6d:15:fe:3b:b2:84:0b:47: 8f:1d:73:b1:d8:88:2c:59:d4:8d:c4:21:48:56:0d: 02:54:5e:d5:e7:e3:fa:9b:19:6f:f9:79:bb:64:20: a4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:28:6C:27:FA:C8:7F:39:32:D5:F3:17:1F:03:04:40:0E:0C:C0:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86f688b9-1b92-3650-8689-e026ed5732ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b0:24:df:d9:c4:c2:8d:c9:ee:21:46:d0:bb:eb:6d:eb:5b: e3:54:77:f5:53:59:1a:25:ad:b3:a2:cb:f2:fa:f4:69:c3:13: b9:e8:08:00:35:6c:79:7d:06:b4:76:fe:50:e6:1f:19:e7:4d: 40:5a:55:f0:92:0f:f1:68:58:31:8e:94:c5:f2:ae:42:83:79: 9d:8e:47:16:34:01:0b:0f:3f:22:7f:af:97:2c:63:bd:d3:6b: 32:29:90:3e:ce:74:a3:ed:0d:8e:81:4b:cc:aa:00:0e:d5:b4: 93:3d:a6:a2:6a:9f:c8:e9:d4:7e:f5:3f:98:21:37:7f:65:69: f4:a6:70:f2:b2:00:2a:2f:a8:2f:12:5c:c7:b9:25:a1:5d:89: 0e:c4:20:4a:c5:e7:0f:c6:a1:77:0a:8e:91:45:67:d5:c7:ae: e5:6f:e2:47:c7:ad:67:c1:9c:8a:fe:b4:f6:26:b3:d9:36:4e: 85:f2:18:30:ac:25:08:8b:31:a1:93:4e:8a:1a:8b:d1:a9:0b: 8f:00:e4:66:75:40:2f:36:78:e9:53:9d:2c:da:5e:d8:ba:fc: ae:f2:fc:cf:64:aa:ba:59:05:a5:1a:8f:3b:dc:84:4e:d7:13: c8:a6:bb:a8:07:dd:6e:c4:29:da:1a:61:71:65:29:12:97:8c: bb:b5:8d:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4AveegrtGu0wRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MGRiOGNiYzktMzZiOS00MDM3LWIwNWUtZWJhNmM2OWEyMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjhB8EMdmxQjAGf+IQgtApAQOiXsEF0kKNNl 0fs8Hz74T+uek8Ewo117Ef8DGoQus7g384rlbcC7RURFNaKrIuXZ2YIMEJV9xCLS wQA3LFTIe+cs/c9rp8YQVnu8c6k4PLAFldZ4tehC8BcOy7CGox5fYPGc1AJWYwFc ig8WeSQ5AFIMcpdIkDQ5OvOEZH99CNn/ENcdw0ckS/lBJFABSzVdiI8kXKTowulx 0DPYRW8Rh0uJfFY6B7GNjiTL/uDYc9cd6zpG4Fifekt2gKqbxmWxk/SU5siZbRX+ O7KEC0ePHXOx2IgsWdSNxCFIVg0CVF7V5+P6mxlv+Xm7ZCCkjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYobCf6yH85MtXzFx8DBEAODMBXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODZmNjg4YjktMWI5Mi0z NjUwLTg2ODktZTAyNmVkNTczMmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCwJN/ZxMKNye4hRtC7623rW+NUd/VTWRolrbOiy/L69GnDE7noCAA1 bHl9BrR2/lDmHxnnTUBaVfCSD/FoWDGOlMXyrkKDeZ2ORxY0AQsPPyJ/r5csY73T azIpkD7OdKPtDY6BS8yqAA7VtJM9pqJqn8jp1H71P5ghN39lafSmcPKyACovqC8S XMe5JaFdiQ7EIErF5w/GoXcKjpFFZ9XHruVv4kfHrWfBnIr+tPYms9k2ToXyGDCs JQiLMaGTTooai9GpC48A5GZ1QC82eOlTnSzaXti6/K7y/M9kqrpZBaUajzvchE7X E8imu6gH3W7EKdoaYXFlKRKXjLu1jVs= -----END CERTIFICATE-----Generated at Thu Mar 26 04:45:44 2026 by rpki-client