$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/976fe92d-dd5d-31b7-88e5-545d5f89498c.roa File: 976fe92d-dd5d-31b7-88e5-545d5f89498c.roa (raw, json) Hash identifier: YY2kEZV1shRAb35/nFFQqhfn2ohfz0XlnhG6owHTTaE= Subject key identifier: 27:1F:0D:0C:D7:02:0C:4C:2B:85:74:88:08:B9:C4:71:03:35:5D:4B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E00B7B423990F759F76400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/976fe92d-dd5d-31b7-88e5-545d5f89498c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 184.20.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:0b:7b:42:39:90:f7:59:f7:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c2b74b0a-340a-4fed-b671-0cbbe7ab5748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:df:aa:16:db:c5:e2:b3:ca:6f:e9:b7:39:c4: a2:cb:1e:e9:1a:82:28:43:b2:39:ba:13:52:a5:57: 1d:f0:d1:d1:1d:75:52:c4:bb:80:49:20:1c:4b:e0: d4:c7:f4:3e:4b:32:5c:51:d0:45:77:7f:bc:6b:71: 68:3b:90:4b:58:1e:90:44:c6:0c:66:82:73:cd:cd: 6a:78:d4:82:99:b9:12:4e:fa:86:0a:c1:ab:bb:7f: b8:c8:d3:56:f3:68:04:6f:3a:e3:9a:07:81:a0:25: da:86:90:5a:eb:3a:01:f6:06:a8:36:28:26:26:24: 32:2c:51:02:ae:a5:1e:80:6b:66:e2:45:3a:44:cd: 97:7e:06:01:a4:6d:71:12:b7:4c:4b:b5:5a:ae:99: 9a:3e:73:ae:c7:f1:57:e4:ba:ff:f2:7a:c6:41:68: 1e:02:e6:6a:dd:6c:97:50:58:32:01:42:74:f9:2d: a6:da:b5:25:69:22:43:da:ea:23:11:77:e0:f8:4a: cc:ad:e5:a8:97:aa:b9:0e:0b:43:c5:a8:4e:a2:a6: de:bb:da:dd:8f:3b:c0:a6:6f:e6:f2:f3:34:f2:48: 90:bc:3b:70:d6:d4:89:13:14:09:51:d8:2b:c1:b3: 33:31:79:89:32:10:46:ba:ba:05:2e:6b:b0:e3:fc: a7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1F:0D:0C:D7:02:0C:4C:2B:85:74:88:08:B9:C4:71:03:35:5D:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/976fe92d-dd5d-31b7-88e5-545d5f89498c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:70:3e:a5:6d:5a:dd:ad:9c:e7:18:f4:b2:10:ae:92:05:6e: d6:1b:c9:15:db:f5:2c:24:f9:55:92:d2:d1:90:38:63:d4:8c: 31:02:42:20:6d:7c:df:aa:12:fd:d0:05:0b:db:47:c3:6f:cb: 28:66:17:0c:42:87:eb:47:34:58:b4:71:91:a0:df:4d:a4:95: e7:b2:c0:fd:ff:02:98:e2:39:e2:dd:2d:47:8f:cb:5d:60:3c: 29:00:69:64:e3:79:7a:0c:eb:96:e2:58:9e:8a:e3:14:92:37: 96:53:ab:db:ae:1a:15:52:28:d6:1c:ab:ca:c7:4e:d3:85:5a: 38:af:4d:d4:c2:84:ad:79:20:70:0b:61:f9:1b:65:c9:31:5e: e1:77:3f:c3:ca:95:8d:49:f9:af:a0:e8:67:dc:b9:95:28:b6: e1:af:8a:62:d6:41:86:e8:1b:47:90:b1:76:e3:31:9f:df:e4: 98:88:1c:3a:ad:71:a7:af:37:83:e8:17:68:ab:42:2e:62:54: 21:21:9b:47:66:ef:f4:72:4f:30:6f:94:da:5e:a6:e3:b9:4c: f8:da:c3:16:82:de:a3:df:8f:4e:ee:a2:1e:67:a6:5c:09:48: 14:49:a4:2c:08:ab:18:cb:73:5b:c9:ab:b4:81:9c:05:07:4a: 65:dd:2c:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4At7QjmQ91n3ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YzJiNzRiMGEtMzQwYS00ZmVkLWI2NzEtMGNiYmU3YWI1NzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd+qFtvF4rPKb+m3OcSiyx7pGoIoQ7I5uhNS pVcd8NHRHXVSxLuASSAcS+DUx/Q+SzJcUdBFd3+8a3FoO5BLWB6QRMYMZoJzzc1q eNSCmbkSTvqGCsGru3+4yNNW82gEbzrjmgeBoCXahpBa6zoB9gaoNigmJiQyLFEC rqUegGtm4kU6RM2XfgYBpG1xErdMS7VarpmaPnOux/FX5Lr/8nrGQWgeAuZq3WyX UFgyAUJ0+S2m2rUlaSJD2uojEXfg+ErMreWol6q5DgtDxahOoqbeu9rdjzvApm/m 8vM08kiQvDtw1tSJExQJUdgrwbMzMXmJMhBGuroFLmuw4/ynBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcfDQzXAgxMK4V0iAi5xHEDNV1LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTc2ZmU5MmQtZGQ1ZC0z MWI3LTg4ZTUtNTQ1ZDVmODk0OThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBS9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpwPqVtWt2tnOcY9LIQrpIFbtYbyRXb9Swk+VWS0tGQOGPUjDECQiBt fN+qEv3QBQvbR8NvyyhmFwxCh+tHNFi0cZGg302kleeywP3/ApjiOeLdLUePy11g PCkAaWTjeXoM65biWJ6K4xSSN5ZTq9uuGhVSKNYcq8rHTtOFWjivTdTChK15IHAL YfkbZckxXuF3P8PKlY1J+a+g6GfcuZUotuGvimLWQYboG0eQsXbjMZ/f5JiIHDqt caevN4PoF2irQi5iVCEhm0dm7/RyTzBvlNpepuO5TPjawxaC3qPfj07uoh5nplwJ SBRJpCwIqxjLc1vJq7SBnAUHSmXdLAI= -----END CERTIFICATE-----Generated at Thu Mar 26 06:07:51 2026 by rpki-client