$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b05a4aea-c17e-3408-95a4-0235bebd1267.roa File: b05a4aea-c17e-3408-95a4-0235bebd1267.roa (raw, json) Hash identifier: N9bTgxWXSqbTEYuy/GixOVq+HHdIGKp5InQYIfCwE+s= Subject key identifier: F1:22:E5:25:E6:A5:04:ED:6E:1A:B6:52:74:50:FA:0A:8A:D7:BA:8B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BAF42C61B0C119E67A500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b05a4aea-c17e-3408-95a4-0235bebd1267.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.20.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:af:42:c6:1b:0c:11:9e:67:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9abbf165-23c9-4ed8-bb5d-81abda3dca77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7e:e3:88:ea:35:88:f7:12:e3:df:dc:66:28: b9:51:5b:7d:25:01:ce:0e:68:0c:d2:ea:81:45:4c: 67:65:d6:23:2b:3c:e9:dd:e4:df:9e:e9:f0:53:1f: 21:5b:9a:91:05:bd:65:86:45:78:c1:5f:7d:1f:0e: 39:8f:d9:eb:5b:b1:67:b3:84:fe:d1:13:bc:8e:67: f1:69:c7:1e:d9:cf:24:c3:05:99:7d:4e:ba:76:a2: 9b:55:58:59:a8:8c:e1:e4:0d:78:83:19:59:7b:33: 0a:cf:ee:b6:eb:c9:7c:fe:60:9f:43:86:3f:d3:d5: 4a:4c:e4:2a:60:72:8d:7b:03:2e:23:16:45:8b:b6: b9:76:ec:ae:15:ee:47:99:ca:bc:8d:0c:23:26:5e: e2:43:3d:5b:eb:03:d9:11:7a:62:55:94:db:15:6d: c3:cf:cf:5d:a3:56:2f:b5:b9:1b:03:dc:e1:47:f8: c8:a9:e0:52:4f:b2:ad:57:8a:e6:a6:78:ee:93:67: 08:99:c0:a1:38:d5:37:fd:dd:d3:50:b1:b1:93:32: c1:a3:52:bc:4c:79:5c:27:49:7d:1e:3f:ee:5a:6b: 63:f0:57:40:d0:f0:ff:aa:0d:35:88:8f:d4:8c:f1: 43:b4:e3:16:bd:1f:a3:e9:c9:4a:bb:b2:c4:17:8c: 1b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:22:E5:25:E6:A5:04:ED:6E:1A:B6:52:74:50:FA:0A:8A:D7:BA:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b05a4aea-c17e-3408-95a4-0235bebd1267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:29:f2:96:f6:6a:9c:99:1e:e7:4d:33:0f:b9:e3:d9:78:46: ee:5e:ab:36:a7:f1:27:01:b1:ab:58:25:f0:c7:46:9d:3a:c6: 74:f6:eb:0f:4e:c8:4c:da:0e:bf:fc:f4:6a:90:0e:e4:be:39: 7f:45:81:c3:89:ae:d3:cc:67:2a:8e:8f:fa:16:89:c4:1b:50: c3:10:aa:6a:d3:12:02:f1:5e:e8:5d:73:db:8e:a1:a8:65:0d: b9:de:d7:d0:bb:47:9a:2a:45:f3:f0:41:70:1c:0b:d8:a0:a1: 0f:47:c4:f1:ef:65:e4:91:d1:6f:e8:15:c2:18:5e:39:2a:52: 42:b7:68:00:5c:15:33:0a:64:e5:17:31:e1:83:93:51:64:56: 61:e7:85:fc:cf:d1:3d:e0:c5:00:60:c8:53:22:16:07:15:62: 28:41:ed:2f:9b:84:f4:85:a9:de:92:4a:68:16:da:34:3a:30: a5:a3:64:33:05:29:65:34:bf:df:bb:0a:92:0c:60:cf:8d:28: a5:87:28:2d:35:44:27:2c:9f:4a:61:cb:48:02:fb:55:bc:f7: 36:16:0c:93:52:97:db:39:5d:10:b7:6b:76:83:5e:d5:4e:c1: c0:b2:04:65:d2:20:cc:df:72:74:08:51:e2:03:d2:1a:bd:e9: 91:28:b8:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je69CxhsMEZ5npQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWFiYmYxNjUtMjNjOS00ZWQ4LWJiNWQtODFhYmRhM2RjYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn7jiOo1iPcS49/cZii5UVt9JQHODmgM0uqB RUxnZdYjKzzp3eTfnunwUx8hW5qRBb1lhkV4wV99Hw45j9nrW7Fns4T+0RO8jmfx acce2c8kwwWZfU66dqKbVVhZqIzh5A14gxlZezMKz+6268l8/mCfQ4Y/09VKTOQq YHKNewMuIxZFi7a5duyuFe5Hmcq8jQwjJl7iQz1b6wPZEXpiVZTbFW3Dz89do1Yv tbkbA9zhR/jIqeBST7KtV4rmpnjuk2cImcChONU3/d3TULGxkzLBo1K8THlcJ0l9 Hj/uWmtj8FdA0PD/qg01iI/UjPFDtOMWvR+j6clKu7LEF4wbVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEi5SXmpQTtbhq2UnRQ+gqK17qLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjA1YTRhZWEtYzE3ZS0z NDA4LTk1YTQtMDIzNWJlYmQxMjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsp8pb2apyZHudNMw+549l4Ru5eqzan8ScBsatYJfDHRp06xnT26w9O yEzaDr/89GqQDuS+OX9FgcOJrtPMZyqOj/oWicQbUMMQqmrTEgLxXuhdc9uOoahl Dbne19C7R5oqRfPwQXAcC9igoQ9HxPHvZeSR0W/oFcIYXjkqUkK3aABcFTMKZOUX MeGDk1FkVmHnhfzP0T3gxQBgyFMiFgcVYihB7S+bhPSFqd6SSmgW2jQ6MKWjZDMF KWU0v9+7CpIMYM+NKKWHKC01RCcsn0phy0gC+1W89zYWDJNSl9s5XRC3a3aDXtVO wcCyBGXSIMzfcnQIUeID0hq96ZEouE8= -----END CERTIFICATE-----Generated at Sun Oct 4 21:16:08 2026 by rpki-client