$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c50d636-edb6-3717-9a29-6ca0dccc1521.roa File: 8c50d636-edb6-3717-9a29-6ca0dccc1521.roa (raw, json) Hash identifier: HADcQ+EfRgHhA+Q98DC2xha7nNmzZLHFH65PmzZf3LM= Subject key identifier: 8D:08:B4:CA:28:51:50:A4:92:46:7F:4B:42:00:6A:22:8C:3C:3B:92 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E00A79350C57F034E39180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c50d636-edb6-3717-9a29-6ca0dccc1521.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 184.20.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:0a:79:35:0c:57:f0:34:e3:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=50c3c11e-bf78-40c7-acbf-d8f0d1ae619f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:13:9b:cf:c3:bd:9d:b1:9b:f5:62:a6:b7:80: 25:0e:b3:c8:f6:e1:6e:0b:dd:03:69:62:55:0f:98: 85:5d:49:6e:c2:2e:ca:35:c5:a7:a0:f1:9c:68:70: d1:1b:92:ed:24:db:a1:6e:a7:8f:78:e3:2a:4a:20: f9:55:e6:1a:4b:b3:a0:0f:bd:5d:a0:5a:7c:72:f0: cc:4f:cf:0b:a1:78:8a:5d:a9:be:43:98:82:48:dc: b1:a5:06:01:1d:8c:88:2c:a4:0d:02:ef:0e:3c:e3: f0:dd:52:7d:f0:0a:7a:01:bf:42:84:0e:49:0c:2d: 30:84:ea:cd:43:04:35:f2:9b:36:94:23:68:d8:88: d3:99:07:73:85:93:a9:b2:07:2c:16:da:c9:fe:2a: c9:8f:a3:23:06:56:6e:cb:20:88:c3:ce:29:0c:99: 69:86:ca:64:41:3c:9c:3b:36:ef:25:53:6b:a6:03: 01:26:87:db:b9:2a:4d:15:cb:ec:70:38:2e:86:98: c1:57:3c:2e:a0:90:c3:92:e5:f4:6a:05:c4:34:0a: 58:70:8a:cc:ea:cf:06:cb:18:0a:cf:25:61:c6:b0: cf:8c:d4:f3:7d:19:84:29:51:43:06:ec:f0:06:ff: 3b:ad:1e:e9:1b:ae:d4:89:a4:2b:31:0a:8c:ee:3c: a5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:08:B4:CA:28:51:50:A4:92:46:7F:4B:42:00:6A:22:8C:3C:3B:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c50d636-edb6-3717-9a29-6ca0dccc1521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:5a:e2:b6:a9:89:33:92:f0:e3:f9:11:b4:93:9d:d2:a6:0f: 24:2f:48:36:85:eb:7a:4c:42:7d:65:01:5e:7e:37:d6:0a:30: 1a:c7:e7:0c:56:1a:b0:13:0c:b7:17:da:fc:53:f9:43:c4:15: 99:de:fa:09:27:b0:9a:f9:a5:40:8d:cf:bf:d1:31:a5:15:50: 6c:9e:f7:cd:85:fa:65:08:18:ed:d6:07:34:15:65:be:ef:21: 3e:23:11:d7:40:51:2e:09:80:72:fa:33:27:c1:9f:18:26:a9: 5f:0e:3a:60:98:d4:5e:c5:f5:b1:66:94:9c:b3:fa:cb:8f:19: 48:17:ef:9e:8d:74:fb:fd:36:2c:75:04:1d:4c:f5:33:97:d5: f6:37:af:99:63:f4:6a:a3:09:3c:1f:fa:73:80:30:8e:d5:a7: b7:82:fc:2d:32:57:8f:5c:07:87:c1:3c:75:32:84:37:6b:d9: 26:b6:42:25:15:4a:e3:a9:6a:e9:f1:35:ac:18:1d:32:44:80: cd:a7:e4:fd:cb:e6:2b:6e:f4:54:65:98:ad:94:86:25:94:75: fc:28:90:41:fc:6a:70:4a:13:3e:1b:3e:cc:4c:5f:a1:3a:22: a1:c0:37:8f:c8:57:a6:30:8b:e0:d7:b2:f4:62:dd:33:d2:be: ff:1d:6a:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Ap5NQxX8DTjkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTBjM2MxMWUtYmY3OC00MGM3LWFjYmYtZDhmMGQxYWU2MTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RObz8O9nbGb9WKmt4AlDrPI9uFuC90DaWJV D5iFXUluwi7KNcWnoPGcaHDRG5LtJNuhbqePeOMqSiD5VeYaS7OgD71doFp8cvDM T88LoXiKXam+Q5iCSNyxpQYBHYyILKQNAu8OPOPw3VJ98Ap6Ab9ChA5JDC0whOrN QwQ18ps2lCNo2IjTmQdzhZOpsgcsFtrJ/irJj6MjBlZuyyCIw84pDJlphspkQTyc OzbvJVNrpgMBJofbuSpNFcvscDguhpjBVzwuoJDDkuX0agXENApYcIrM6s8GyxgK zyVhxrDPjNTzfRmEKVFDBuzwBv87rR7pG67UiaQrMQqM7jyl4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0ItMooUVCkkkZ/S0IAaiKMPDuSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGM1MGQ2MzYtZWRiNi0z NzE3LTlhMjktNmNhMGRjY2MxNTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBSbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEha4rapiTOS8OP5EbSTndKmDyQvSDaF63pMQn1lAV5+N9YKMBrH5wxW GrATDLcX2vxT+UPEFZne+gknsJr5pUCNz7/RMaUVUGye982F+mUIGO3WBzQVZb7v IT4jEddAUS4JgHL6MyfBnxgmqV8OOmCY1F7F9bFmlJyz+suPGUgX756NdPv9Nix1 BB1M9TOX1fY3r5lj9GqjCTwf+nOAMI7Vp7eC/C0yV49cB4fBPHUyhDdr2Sa2QiUV SuOpaunxNawYHTJEgM2n5P3L5itu9FRlmK2UhiWUdfwokEH8anBKEz4bPsxMX6E6 IqHAN4/IV6Ywi+DXsvRi3TPSvv8dajo= -----END CERTIFICATE-----Generated at Thu Mar 26 17:11:47 2026 by rpki-client