$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c2adb7d-e729-34db-9464-0e3864ecde5c.roa File: 8c2adb7d-e729-34db-9464-0e3864ecde5c.roa (raw, json) Hash identifier: JTOaLOrO3EPeasHKsRpcgJxFgfBv5XKY877tD4Q9njU= Subject key identifier: C2:89:7C:70:69:0A:9C:40:4D:2D:5A:6F:BB:99:C8:96:E7:8B:B0:EA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497ADFF30C296D3FDDDBE980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c2adb7d-e729-34db-9464-0e3864ecde5c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40306 IP address blocks: 184.20.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:df:f3:0c:29:6d:3f:dd:db:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=687d7f76-95b6-4bf2-91e6-8b7a0cf17c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0e:c3:a1:68:4e:02:96:8c:65:1a:b5:77:d9: d7:d3:7e:21:d6:76:cc:15:f6:70:3e:c3:3d:d3:8b: 9b:f7:4c:61:99:6c:a8:85:f9:91:d6:20:43:12:29: e9:7f:43:ec:2f:8b:f2:a7:af:b0:89:e2:a7:83:79: 63:26:d0:a7:51:0a:c8:88:83:9e:29:b2:10:92:c4: 65:02:e2:0d:52:50:c5:43:be:49:59:2a:b1:25:0b: 6c:11:1a:da:75:ca:f3:c3:37:cf:15:7a:7f:fd:c5: c5:d1:49:94:83:aa:10:79:de:6a:f1:4c:fb:27:a8: e5:2b:8a:6a:97:1f:f0:88:28:fc:c1:28:fa:8e:67: 11:c7:83:71:97:4e:ba:bf:54:3d:25:83:90:e6:94: 9f:87:e4:12:d8:2c:c3:4d:02:42:39:93:f9:27:bb: 73:da:ea:db:88:96:a9:c7:c6:14:ba:af:c7:a3:1f: 57:f3:19:b5:58:37:59:2c:4f:ca:f4:c8:5b:40:e3: de:4f:2e:31:f5:1c:71:c2:1c:19:31:e8:f4:d4:21: 32:f5:44:ff:6c:79:f7:15:60:f3:64:52:ff:de:ea: fb:f0:21:d5:0b:ba:92:2e:d5:f4:88:36:12:92:e4: 48:3f:9b:83:50:af:cf:a3:58:c6:1f:e9:d7:9e:b2: 0b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:89:7C:70:69:0A:9C:40:4D:2D:5A:6F:BB:99:C8:96:E7:8B:B0:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c2adb7d-e729-34db-9464-0e3864ecde5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:c2:7a:6e:aa:04:1a:9d:a8:94:49:ad:50:de:49:21:f9:fc: a0:1b:b4:1c:ee:dd:05:a7:16:04:b2:f1:87:14:c1:45:d6:4a: 28:6f:d0:12:4b:10:8f:75:8b:82:0a:b8:8c:93:a9:f8:1e:97: bb:8f:05:3d:e7:5e:41:a5:b6:30:c5:eb:ac:6e:32:40:d9:11: 08:13:b5:e1:21:3e:ba:e1:d9:d1:ef:3c:f9:3e:9c:0a:42:77: c7:35:a7:d3:d3:6d:ca:c0:1a:1e:bc:12:0f:3f:88:16:4b:67: 7f:ef:c3:86:6b:9c:36:42:cc:13:a0:f2:57:36:10:8f:0a:74: 9d:8c:58:8c:9f:fa:f3:13:e6:84:97:1d:76:41:64:11:75:f9: 4b:b9:6a:c2:63:62:33:7e:9d:93:7f:39:20:c7:da:49:d8:77: b0:c9:d9:c5:b3:8e:db:92:e7:7d:16:3f:a4:74:60:a8:8d:c7: 68:3c:25:44:fe:5a:62:6d:c4:80:e7:e5:0d:e9:48:b8:21:31: 06:fd:3e:3d:32:c8:bb:8b:e5:87:a8:fc:b3:bb:96:87:f2:f5: 8e:53:69:88:c7:4f:50:6e:3c:a5:d0:8c:a1:54:ee:b3:d0:40: 96:65:ae:b3:cf:a0:dc:be:bf:f9:03:86:eb:1c:5e:79:a1:bc: 7e:95:35:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jet/zDCltP93b6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Njg3ZDdmNzYtOTViNi00YmYyLTkxZTYtOGI3YTBjZjE3Yzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA7DoWhOApaMZRq1d9nX034h1nbMFfZwPsM9 04ub90xhmWyohfmR1iBDEinpf0PsL4vyp6+wieKng3ljJtCnUQrIiIOeKbIQksRl AuINUlDFQ75JWSqxJQtsERradcrzwzfPFXp//cXF0UmUg6oQed5q8Uz7J6jlK4pq lx/wiCj8wSj6jmcRx4Nxl066v1Q9JYOQ5pSfh+QS2CzDTQJCOZP5J7tz2urbiJap x8YUuq/Hox9X8xm1WDdZLE/K9MhbQOPeTy4x9RxxwhwZMej01CEy9UT/bHn3FWDz ZFL/3ur78CHVC7qSLtX0iDYSkuRIP5uDUK/Po1jGH+nXnrILqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKJfHBpCpxATS1ab7uZyJbni7DqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGMyYWRiN2QtZTcyOS0z NGRiLTk0NjQtMGUzODY0ZWNkZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7Cem6qBBqdqJRJrVDeSSH5/KAbtBzu3QWnFgSy8YcUwUXWSihv0BJL EI91i4IKuIyTqfgel7uPBT3nXkGltjDF66xuMkDZEQgTteEhPrrh2dHvPPk+nApC d8c1p9PTbcrAGh68Eg8/iBZLZ3/vw4ZrnDZCzBOg8lc2EI8KdJ2MWIyf+vMT5oSX HXZBZBF1+Uu5asJjYjN+nZN/OSDH2knYd7DJ2cWzjtuS530WP6R0YKiNx2g8JUT+ WmJtxIDn5Q3pSLghMQb9Pj0yyLuL5Yeo/LO7lofy9Y5TaYjHT1BuPKXQjKFU7rPQ QJZlrrPPoNy+v/kDhuscXnmhvH6VNY8= -----END CERTIFICATE-----Generated at Tue Sep 29 15:22:34 2026 by rpki-client