$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a85452de-b684-37a7-abcc-43082a293eb5.roa File: a85452de-b684-37a7-abcc-43082a293eb5.roa (raw, json) Hash identifier: BzaY0Bb7wfnJGISiiJJ7tyNefcn9pzvJTTImDqqlOWk= Subject key identifier: 66:87:61:89:62:A0:56:6E:A7:F1:3B:87:B5:5F:C2:8D:10:21:28:D8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0D6FB2A3B8B2B5B7077C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a85452de-b684-37a7-abcc-43082a293eb5.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 184.63.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:d6:fb:2a:3b:8b:2b:5b:70:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=66b4acad-6c7d-40b4-bcca-9bd937acc8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5d:b8:82:e2:46:49:94:e4:79:37:68:83:02: 4c:d0:cf:49:31:aa:53:68:11:6b:bf:29:05:69:4a: 02:12:52:dd:fd:10:d3:57:77:8b:21:07:cf:86:18: 02:0d:8f:ea:54:1c:ce:f0:c7:46:a5:0d:3c:a8:3f: 31:3c:70:2f:b9:bd:d2:a1:1a:a8:84:21:bc:c2:07: ed:f8:da:61:b8:e1:51:e3:26:c2:83:06:7a:ab:28: 62:be:fc:ca:18:eb:53:93:d2:d5:62:a8:f5:ec:8b: de:a4:c1:86:81:24:ad:35:33:3e:91:b0:ed:a7:88: 05:e4:53:bc:c2:98:fb:32:ca:53:09:a4:2c:7a:47: 44:92:37:d3:c2:4e:72:49:6a:a9:f3:54:4e:73:23: 74:80:e0:28:a4:fd:18:74:51:84:c0:af:18:c6:b4: f5:c2:36:ca:69:ec:1e:4b:82:f6:13:21:5b:99:92: 82:b0:20:ee:43:e2:28:c8:ce:88:41:b1:2d:c3:56: 1a:58:53:43:cc:e4:8c:cc:55:4b:cc:6b:48:0d:b5: 11:55:b9:49:2d:42:d5:ae:c0:e0:25:b1:c6:dd:6a: f4:1b:04:d5:6f:30:a9:dc:f1:e6:c1:b5:54:4b:c4: c0:69:84:08:21:4f:a2:c6:79:70:5b:2f:86:6f:21: 81:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:87:61:89:62:A0:56:6E:A7:F1:3B:87:B5:5F:C2:8D:10:21:28:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a85452de-b684-37a7-abcc-43082a293eb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.63.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:29:2f:25:61:0c:48:e8:0e:2c:b5:9d:79:f3:81:1f:1d:a7: 58:27:f6:bd:b2:44:34:a2:52:90:4b:d8:5f:b3:2b:60:fe:e4: c5:b8:a9:13:6a:a9:e4:69:d0:20:56:65:57:e8:de:be:f8:a8: 66:f8:87:29:e3:18:81:07:40:55:a7:6b:f3:a6:bc:62:cd:27: 19:cb:5f:17:04:34:0d:e1:ae:99:f1:f5:e8:ad:5b:ba:3b:f7: 08:f6:61:f2:ed:6a:4a:4e:2e:78:bf:1a:f8:90:08:1f:8c:41: f1:a7:f3:76:b8:e9:63:5a:8c:a8:d5:0d:b3:11:95:57:fc:68: f5:78:1e:ab:50:ca:5f:e2:c7:04:4f:d8:9c:a1:84:94:66:95: 30:26:c0:60:0f:b5:aa:10:79:58:61:de:98:06:50:66:4a:1c: 43:de:5b:fb:29:f8:b2:bc:38:24:99:fb:6e:37:bc:96:ca:84: 08:35:d4:1c:78:b5:57:07:3f:28:1b:81:bf:04:5b:19:e7:96: 4d:18:fc:cd:40:11:cb:e0:ea:51:0e:24:06:e6:8d:1a:95:d0: b8:5b:55:7a:6d:0a:2e:a6:c7:62:25:c8:1d:06:71:f9:93:fb: 0a:eb:d9:aa:d1:95:64:f9:5f:bf:4b:40:8f:65:b4:5b:49:70: bf:9f:61:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Nb7KjuLK1twd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjZiNGFjYWQtNmM3ZC00MGI0LWJjY2EtOWJkOTM3YWNjOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil24guJGSZTkeTdogwJM0M9JMapTaBFrvykF aUoCElLd/RDTV3eLIQfPhhgCDY/qVBzO8MdGpQ08qD8xPHAvub3SoRqohCG8wgft +NphuOFR4ybCgwZ6qyhivvzKGOtTk9LVYqj17IvepMGGgSStNTM+kbDtp4gF5FO8 wpj7MspTCaQsekdEkjfTwk5ySWqp81ROcyN0gOAopP0YdFGEwK8YxrT1wjbKaewe S4L2EyFbmZKCsCDuQ+IoyM6IQbEtw1YaWFNDzOSMzFVLzGtIDbURVblJLULVrsDg JbHG3Wr0GwTVbzCp3PHmwbVUS8TAaYQIIU+ixnlwWy+GbyGBJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaHYYlioFZup/E7h7Vfwo0QISjYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTg1NDUyZGUtYjY4NC0z N2E3LWFiY2MtNDMwODJhMjkzZWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD9oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALwpLyVhDEjoDiy1nXnzgR8dp1gn9r2yRDSiUpBL2F+zK2D+5MW4qRNq qeRp0CBWZVfo3r74qGb4hynjGIEHQFWna/OmvGLNJxnLXxcENA3hrpnx9eitW7o7 9wj2YfLtakpOLni/GviQCB+MQfGn83a46WNajKjVDbMRlVf8aPV4HqtQyl/ixwRP 2JyhhJRmlTAmwGAPtaoQeVhh3pgGUGZKHEPeW/sp+LK8OCSZ+243vJbKhAg11Bx4 tVcHPygbgb8EWxnnlk0Y/M1AEcvg6lEOJAbmjRqV0LhbVXptCi6mx2IlyB0GcfmT +wrr2arRlWT5X79LQI9ltFtJcL+fYYM= -----END CERTIFICATE-----Generated at Thu Mar 26 17:36:28 2026 by rpki-client