$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98153208-a3f1-3f81-917f-2a5ea1fd245b.roa File: 98153208-a3f1-3f81-917f-2a5ea1fd245b.roa (raw, json) Hash identifier: FVnPF7mimJ8zx/GZqDCP214I3vYBk18wJZUuxFfXMzE= Subject key identifier: D8:8C:BB:4C:22:5D:FB:14:1E:AA:7B:E9:72:FD:FE:4C:BF:36:58:34 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BCD93FF9800C64D96A540 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98153208-a3f1-3f81-917f-2a5ea1fd245b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.21.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:cd:93:ff:98:00:c6:4d:96:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=154fd70e-29ea-46b3-9052-85396a16fdd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4c:e0:bf:29:b8:a0:fd:00:52:89:5f:05:dd: a0:5b:bd:3c:f8:6b:b7:ff:9d:f4:13:29:fd:9d:71: 29:1d:63:56:3b:f5:b7:36:3f:83:90:66:16:89:4a: 81:53:15:1d:28:d3:db:7c:fd:9a:fa:28:95:ea:82: 1b:51:5a:f2:65:5a:a7:db:c9:80:38:f6:9e:bd:9f: 0f:f8:39:0e:24:4e:c0:2e:fb:b8:b7:f2:56:ac:49: 87:15:26:01:28:7e:76:74:4f:7a:6e:3f:28:02:99: bc:69:c1:0f:af:4f:d5:13:40:c1:6e:2c:51:bd:ba: 75:17:b8:5c:97:ea:6a:f0:27:50:5a:bc:fb:a7:5b: 17:48:79:e3:29:af:93:fa:d2:d0:a0:8e:25:70:f8: 96:64:8d:e8:96:ff:9e:7a:78:29:4a:6f:77:6a:da: cf:9f:5b:57:c5:c6:9c:c2:1e:d8:8b:02:b9:66:00: 97:95:09:f9:7a:19:f4:f0:ef:72:e4:1d:4d:cc:2b: 3e:2e:31:fe:4c:30:2d:40:4a:c2:79:8c:cd:f3:f7: d1:23:de:c1:a2:43:18:47:58:f8:1f:42:1f:c9:66: e9:d6:db:8f:66:1d:57:d3:ee:5d:94:db:9d:3e:12: c6:7d:ee:ba:b1:7d:da:ad:e1:d6:db:63:2a:07:7d: 3b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8C:BB:4C:22:5D:FB:14:1E:AA:7B:E9:72:FD:FE:4C:BF:36:58:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98153208-a3f1-3f81-917f-2a5ea1fd245b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:c1:e7:e7:83:69:e3:a6:7b:31:29:d4:01:88:6c:c8:6e:7a: 8f:6a:cf:45:13:fb:d5:08:5c:8a:f8:24:46:6f:ab:b4:8d:0e: 62:2f:6e:f3:3f:ca:99:89:1e:03:73:87:21:17:2a:7e:d5:9c: 8d:28:d2:0c:4a:a5:7d:21:ea:0b:24:02:27:6e:32:a9:1a:3c: 05:c8:96:3b:23:51:7a:69:90:3c:0d:68:a8:59:5f:f2:9f:96: e6:90:8b:a0:5e:be:79:75:19:a4:87:ab:e5:f7:76:70:87:25: 9c:2a:ab:0c:91:e9:be:47:01:7d:f8:63:ab:04:78:dd:45:dd: 32:15:b1:5b:12:2c:df:3d:ba:26:6e:1c:8e:b6:dd:88:94:af: 58:04:c1:82:13:4b:8b:ce:4d:6e:39:b6:46:23:4e:5f:33:ea: 81:5e:50:f3:62:e0:46:39:de:10:20:53:9a:f8:8b:92:d1:c2: f7:d4:2f:d6:54:08:2b:aa:59:9b:c8:57:3d:0a:f0:c7:05:14: d0:20:df:b0:89:f8:2a:b4:76:93:34:2c:02:70:5d:64:1e:1c: be:e7:8a:b9:14:9d:c5:15:9a:20:ff:7c:2b:55:57:31:d0:9d: c3:f3:a4:6f:7e:42:15:a3:3f:dd:04:44:a6:02:55:50:6b:b2: 87:d2:d0:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je82T/5gAxk2WpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTU0ZmQ3MGUtMjllYS00NmIzLTkwNTItODUzOTZhMTZmZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0zgvym4oP0AUolfBd2gW708+Gu3/530Eyn9 nXEpHWNWO/W3Nj+DkGYWiUqBUxUdKNPbfP2a+iiV6oIbUVryZVqn28mAOPaevZ8P +DkOJE7ALvu4t/JWrEmHFSYBKH52dE96bj8oApm8acEPr0/VE0DBbixRvbp1F7hc l+pq8CdQWrz7p1sXSHnjKa+T+tLQoI4lcPiWZI3olv+eengpSm93atrPn1tXxcac wh7YiwK5ZgCXlQn5ehn08O9y5B1NzCs+LjH+TDAtQErCeYzN8/fRI97BokMYR1j4 H0IfyWbp1tuPZh1X0+5dlNudPhLGfe66sX3areHW22MqB307WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiMu0wiXfsUHqp76XL9/ky/Nlg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTgxNTMyMDgtYTNmMS0z ZjgxLTkxN2YtMmE1ZWExZmQyNDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM/B5+eDaeOmezEp1AGIbMhueo9qz0UT+9UIXIr4JEZvq7SNDmIvbvM/ ypmJHgNzhyEXKn7VnI0o0gxKpX0h6gskAiduMqkaPAXIljsjUXppkDwNaKhZX/Kf luaQi6Bevnl1GaSHq+X3dnCHJZwqqwyR6b5HAX34Y6sEeN1F3TIVsVsSLN89uiZu HI623YiUr1gEwYITS4vOTW45tkYjTl8z6oFeUPNi4EY53hAgU5r4i5LRwvfUL9ZU CCuqWZvIVz0K8McFFNAg37CJ+Cq0dpM0LAJwXWQeHL7nirkUncUVmiD/fCtVVzHQ ncPzpG9+QhWjP90ERKYCVVBrsofS0Kc= -----END CERTIFICATE-----Generated at Sat Sep 26 11:33:03 2026 by rpki-client