$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89bbda9a-1288-3200-b0b1-76b33bff3478.roa File: 89bbda9a-1288-3200-b0b1-76b33bff3478.roa (raw, json) Hash identifier: qfxSSa6aZqbJjtIjwsrG/AhVv5zegiC1mKQRbydcFTU= Subject key identifier: 78:20:DD:CA:EC:97:CE:94:CF:F1:CB:73:4F:C2:F8:1F:99:24:72:E5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E014BD541695A6C4749B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89bbda9a-1288-3200-b0b1-76b33bff3478.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 184.21.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:14:bd:54:16:95:a6:c4:74:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=589b8088-2f97-4f12-acd9-93bf546850b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:8d:84:a8:3f:51:8f:60:77:e8:4f:3e:52: 9c:48:cd:27:88:f7:05:d1:05:97:c4:60:8e:72:fb: 4f:7c:da:a8:3e:74:b6:4f:a9:1b:44:e5:3c:1b:a9: 14:c4:fe:71:7d:db:94:42:5e:1f:db:d7:16:44:d6: 9e:95:1e:87:14:f0:63:2c:d7:f4:9b:01:4e:27:f0: b8:1e:04:7b:3c:2f:b3:6c:ff:1b:14:6f:e6:ec:e7: 1f:15:b4:27:50:1e:94:e5:a7:6e:7a:1a:2b:95:d9: a6:da:5a:b1:cb:66:f6:f7:a5:22:7b:e5:87:96:c1: 04:d9:41:14:4c:64:47:75:6a:ac:27:c2:06:60:49: 16:65:1a:cc:63:4e:4a:fd:03:9c:dc:09:a4:6c:9b: a3:23:95:bd:0c:cb:35:ee:ee:ba:d7:d2:97:54:c7: 1c:15:4b:16:c9:f7:8b:99:aa:f6:a3:45:1d:89:19: 17:70:6b:c0:c9:93:ba:47:6f:c3:5d:e4:4e:aa:43: 00:03:0d:9c:64:32:32:b8:39:21:38:f7:c0:cf:59: cb:03:14:a8:61:40:aa:0f:64:55:18:ed:16:4e:f6: 8e:15:73:03:96:d2:ba:86:c1:de:c1:d6:9e:9f:c3: c8:c8:37:80:e9:6e:37:b7:81:17:44:be:e6:a8:f6: 14:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:20:DD:CA:EC:97:CE:94:CF:F1:CB:73:4F:C2:F8:1F:99:24:72:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89bbda9a-1288-3200-b0b1-76b33bff3478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a2:f3:7f:cd:74:e4:ef:a3:67:ed:48:42:24:34:99:29:38: d2:16:ba:f3:86:1c:0a:0b:e5:ba:61:3a:df:9f:48:dc:2b:ed: f5:2c:a5:4e:ee:bb:0b:ca:33:ea:83:dd:1a:43:46:a5:4c:71: 78:08:49:32:5a:8b:22:89:db:70:55:b8:67:94:9b:52:36:7c: 3d:b3:eb:e7:90:3d:62:9b:ab:21:1f:fa:5d:03:a6:9e:bf:74: a4:83:d1:d3:8e:11:e3:9d:21:51:bc:d0:e0:54:26:cd:0a:4b: e0:85:44:a6:39:18:09:e2:34:aa:3b:f1:78:0a:56:51:84:86: 74:fe:5d:33:89:3d:a1:10:7f:34:49:f9:69:dc:07:9e:84:f9: 2c:c2:d1:0a:bb:db:c9:84:e7:f6:b8:0b:0c:c7:2f:e2:8e:c8: ee:f7:f4:73:84:2e:0d:c8:99:1d:50:d7:58:79:3c:b0:f4:82: 10:ab:c5:15:97:41:d7:31:e1:81:0d:3d:cc:0e:c2:58:cd:dc: be:ca:97:25:b8:64:fb:c8:64:b6:67:c6:5d:62:51:48:c7:fd: 14:18:93:b3:54:cc:3f:f2:c9:ba:14:42:15:65:f0:43:a7:5b: 43:93:31:69:5e:e7:47:ed:cc:f6:c7:4e:91:4f:17:f7:24:10: 9f:ee:9c:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4BS9VBaVpsR0m4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTg5YjgwODgtMmY5Ny00ZjEyLWFjZDktOTNiZjU0Njg1MGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscKNhKg/UY9gd+hPPlKcSM0niPcF0QWXxGCO cvtPfNqoPnS2T6kbROU8G6kUxP5xfduUQl4f29cWRNaelR6HFPBjLNf0mwFOJ/C4 HgR7PC+zbP8bFG/m7OcfFbQnUB6U5aduehorldmm2lqxy2b296Uie+WHlsEE2UEU TGRHdWqsJ8IGYEkWZRrMY05K/QOc3AmkbJujI5W9DMs17u6619KXVMccFUsWyfeL mar2o0UdiRkXcGvAyZO6R2/DXeROqkMAAw2cZDIyuDkhOPfAz1nLAxSoYUCqD2RV GO0WTvaOFXMDltK6hsHewdaen8PIyDeA6W43t4EXRL7mqPYUYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgg3crsl86Uz/HLc0/C+B+ZJHLlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODliYmRhOWEtMTI4OC0z MjAwLWIwYjEtNzZiMzNiZmYzNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADui83/NdOTvo2ftSEIkNJkpONIWuvOGHAoL5bphOt+fSNwr7fUspU7u uwvKM+qD3RpDRqVMcXgISTJaiyKJ23BVuGeUm1I2fD2z6+eQPWKbqyEf+l0Dpp6/ dKSD0dOOEeOdIVG80OBUJs0KS+CFRKY5GAniNKo78XgKVlGEhnT+XTOJPaEQfzRJ +WncB56E+SzC0Qq728mE5/a4CwzHL+KOyO739HOELg3ImR1Q11h5PLD0ghCrxRWX Qdcx4YENPcwOwljN3L7KlyW4ZPvIZLZnxl1iUUjH/RQYk7NUzD/yyboUQhVl8EOn W0OTMWle50ftzPbHTpFPF/ckEJ/unOw= -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:18 2026 by rpki-client