$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcf0e2aa-add3-3caa-8484-75e8c0ef2124.roa File: bcf0e2aa-add3-3caa-8484-75e8c0ef2124.roa (raw, json) Hash identifier: VgNlIAuxI0/bb0tyE58Hqkoc+2YVXVXliSSI+oiuKrc= Subject key identifier: 7B:9B:3F:67:C0:69:37:38:9C:12:40:A0:5E:44:90:15:FE:76:26:C7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E009D1AFC60803F92CE940 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcf0e2aa-add3-3caa-8484-75e8c0ef2124.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 184.20.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:09:d1:af:c6:08:03:f9:2c:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=747508b2-e18f-431c-a5fa-f633a394c1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:43:cd:5e:8b:ee:4e:b9:fd:40:79:ac:40: db:3e:4b:4e:62:c2:ea:62:22:1a:82:09:a5:06:9f: 79:c8:0c:c6:65:59:10:b8:26:cc:c2:28:57:bd:19: 00:4d:6f:cd:5f:b5:55:7c:d7:bf:84:cd:57:f1:47: e5:75:36:be:ad:60:79:d0:fa:b2:fd:55:cf:c8:72: af:e5:02:e7:ee:c0:01:37:ba:aa:dd:6b:ac:23:a6: 16:d9:e8:84:76:0d:db:56:6f:04:7e:bc:e8:5d:5e: 31:42:f1:d9:df:e2:3b:f2:d1:b4:5d:0d:1e:24:31: 60:2e:a5:95:c7:18:08:ce:20:50:c2:bc:52:ef:59: 61:80:3f:a4:ef:a6:94:09:7f:c5:09:cd:8e:47:7e: ee:1d:c8:d4:60:a4:dd:36:fb:30:3d:cb:59:33:07: 9c:54:33:f5:38:25:47:45:ac:2b:95:a5:2e:ff:e7: 92:ee:6b:af:41:d2:b9:bd:0a:c0:93:66:c8:26:34: c0:be:02:b7:fa:e4:de:87:a6:31:fa:c1:da:70:2a: 34:04:44:9c:ec:28:4a:2a:e5:d4:84:ac:b0:84:35: 4e:0f:17:56:cb:c4:94:09:6a:dc:a5:57:54:71:b0: 81:26:64:d6:50:27:c9:19:56:d3:d1:e2:21:6d:7f: 2e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9B:3F:67:C0:69:37:38:9C:12:40:A0:5E:44:90:15:FE:76:26:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcf0e2aa-add3-3caa-8484-75e8c0ef2124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:7a:c5:36:a5:d0:b1:8d:c2:23:1f:d3:72:04:54:aa:d1:d7: ea:25:14:5a:8a:0a:77:d7:85:d5:64:f0:bf:14:8e:1d:33:28: 23:87:74:29:3c:3b:63:6c:05:38:77:d4:ca:e9:66:2a:bf:ea: 2e:4d:08:b6:70:64:4f:e4:17:38:71:cb:28:3e:68:82:50:a5: 01:15:41:a7:99:0c:45:f4:30:08:9d:fa:dd:65:f1:47:a9:65: 47:64:89:76:c6:c9:9f:32:13:63:55:1f:f0:db:47:6f:a8:ce: 93:ff:38:26:2f:1c:a3:d9:6b:e4:42:1f:ec:ab:1f:66:2a:ab: e1:74:de:1b:0c:fd:8f:b7:a9:79:b7:da:3e:f4:0c:b5:8f:19: 17:4a:cc:87:01:c6:b7:95:49:17:38:36:a7:b8:fc:4b:f7:b4: d3:f7:2e:37:27:bf:83:80:b7:89:81:99:8c:e6:65:19:ad:f8: 7e:34:c1:62:0d:37:7f:1a:5c:05:ff:24:27:69:ae:9d:31:7a: bb:fd:94:f0:03:e7:02:65:61:b1:10:02:5f:23:80:ba:79:33: 95:e0:4f:b8:dd:fd:cf:65:52:61:86:5d:bc:a4:5d:4c:2f:c5: c1:cd:3b:00:ad:98:fa:fe:24:06:c2:23:b7:2a:26:7e:22:32: c0:b3:9b:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4AnRr8YIA/ks6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NzQ3NTA4YjItZTE4Zi00MzFjLWE1ZmEtZjYzM2EzOTRjMWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps9DzV6L7k65/UB5rEDbPktOYsLqYiIaggml Bp95yAzGZVkQuCbMwihXvRkATW/NX7VVfNe/hM1X8UfldTa+rWB50Pqy/VXPyHKv 5QLn7sABN7qq3WusI6YW2eiEdg3bVm8EfrzoXV4xQvHZ3+I78tG0XQ0eJDFgLqWV xxgIziBQwrxS71lhgD+k76aUCX/FCc2OR37uHcjUYKTdNvswPctZMwecVDP1OCVH RawrlaUu/+eS7muvQdK5vQrAk2bIJjTAvgK3+uTeh6Yx+sHacCo0BESc7ChKKuXU hKywhDVODxdWy8SUCWrcpVdUcbCBJmTWUCfJGVbT0eIhbX8uBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHubP2fAaTc4nBJAoF5EkBX+dibHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmNmMGUyYWEtYWRkMy0z Y2FhLTg0ODQtNzVlOGMwZWYyMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBRxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABF6xTal0LGNwiMf03IEVKrR1+olFFqKCnfXhdVk8L8Ujh0zKCOHdCk8 O2NsBTh31MrpZiq/6i5NCLZwZE/kFzhxyyg+aIJQpQEVQaeZDEX0MAid+t1l8Uep ZUdkiXbGyZ8yE2NVH/DbR2+ozpP/OCYvHKPZa+RCH+yrH2Yqq+F03hsM/Y+3qXm3 2j70DLWPGRdKzIcBxreVSRc4Nqe4/Ev3tNP3Ljcnv4OAt4mBmYzmZRmt+H40wWIN N38aXAX/JCdprp0xerv9lPAD5wJlYbEQAl8jgLp5M5XgT7jd/c9lUmGGXbykXUwv xcHNOwCtmPr+JAbCI7cqJn4iMsCzm+Y= -----END CERTIFICATE-----Generated at Thu Mar 26 19:04:45 2026 by rpki-client