$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcf0e2aa-add3-3caa-8484-75e8c0ef2124.roa File: bcf0e2aa-add3-3caa-8484-75e8c0ef2124.roa (raw, json) Hash identifier: Cliw5/QKjH0bLgj/Aj613ytuY9sIyB8TCo85DHYiOmE= Subject key identifier: 92:B6:51:34:E0:84:97:8C:97:3B:0C:56:70:5E:12:D2:90:3D:ED:26 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BB6ACAADA6FF388733880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcf0e2aa-add3-3caa-8484-75e8c0ef2124.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.20.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:b6:ac:aa:da:6f:f3:88:73:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=097cb49f-c9a4-483d-ba61-eda2a6c578d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:c8:db:3d:9f:38:45:d4:08:16:ed:f3:46: 4c:f2:56:ed:0a:8c:88:be:e8:5b:a4:29:7a:ec:13: 9f:29:43:df:8c:fb:2c:a1:41:b2:3f:75:7c:06:7e: 51:6b:71:49:7b:de:e1:5d:39:f0:ff:5a:5a:a0:df: 61:90:65:66:38:a2:c3:31:5a:c7:d0:c3:79:c9:1e: 7a:b2:9b:81:d7:22:2d:7b:01:9d:ac:10:d3:10:0b: cb:a1:5a:b6:9b:e0:c5:dc:fd:c2:81:6b:b0:e0:28: 83:99:1a:56:ee:1a:52:59:c7:27:ad:85:84:7b:fe: 28:ff:68:33:b2:a8:4b:f7:e2:e0:4e:27:06:f3:e9: c4:91:05:a4:06:c5:68:91:4f:72:71:9d:f8:aa:6a: c5:90:96:40:b0:37:a1:c9:a5:ec:85:1b:a8:2d:b8: 93:77:e6:16:d7:13:dc:09:43:af:bd:bf:45:a8:b5: 2c:69:e8:1f:7b:b0:9a:48:59:bc:2e:79:bb:1c:54: 4e:42:08:34:e1:a8:b6:a5:02:dc:3e:bb:29:26:9f: 21:c1:04:3b:74:ba:76:e1:7e:28:eb:c7:3d:4b:03: 57:46:43:a8:60:35:d8:30:62:3c:98:fc:69:40:7f: a0:9f:cf:58:cd:40:20:08:d7:8c:d3:41:79:48:0e: bb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B6:51:34:E0:84:97:8C:97:3B:0C:56:70:5E:12:D2:90:3D:ED:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcf0e2aa-add3-3caa-8484-75e8c0ef2124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:b1:ff:b4:ef:17:2c:2d:40:67:ee:f6:f8:ac:04:2c:35:e1: 87:66:d1:84:90:f1:b9:5a:92:95:a7:78:56:06:21:d9:38:d5: d5:fa:71:45:07:c4:4a:07:b5:dd:54:91:b9:8f:37:06:f3:6f: 4c:9b:ad:96:9a:b3:25:03:e4:6a:f7:65:8f:52:be:04:fc:3a: 50:19:9a:7d:2c:0e:e5:55:b9:33:9c:72:ef:f0:1a:1e:ca:af: 33:11:fb:ce:99:6b:ed:3c:c4:a7:00:dd:b1:01:ed:5f:bb:7d: 82:40:ce:8e:12:f9:be:1b:ba:3d:2d:2d:bf:36:d0:7e:86:01: c4:79:24:45:73:8c:0e:9c:1f:99:bd:bd:e8:b6:5a:7f:82:30: 99:44:e3:42:c0:5f:05:c5:48:92:41:70:45:7a:46:b0:ff:66: c7:e2:48:7d:50:f9:25:37:61:5c:51:20:c0:a1:9e:9f:79:78: ff:91:5d:ba:7f:f7:53:14:07:3e:b6:70:ff:e2:23:91:26:33: b3:c9:28:01:2e:3c:3e:9d:31:52:fe:2f:b4:3e:b9:b6:a3:fa: cb:9d:0f:cd:21:7c:04:78:ee:6f:9b:b6:72:64:a6:e3:12:3a: 8e:73:52:75:bc:e3:8a:be:17:6c:43:64:8a:9c:fc:6e:be:6d: 8e:ee:2c:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je7asqtpv84hzOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDk3Y2I0OWYtYzlhNC00ODNkLWJhNjEtZWRhMmE2YzU3OGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDXI2z2fOEXUCBbt80ZM8lbtCoyIvuhbpCl6 7BOfKUPfjPssoUGyP3V8Bn5Ra3FJe97hXTnw/1paoN9hkGVmOKLDMVrH0MN5yR56 spuB1yItewGdrBDTEAvLoVq2m+DF3P3CgWuw4CiDmRpW7hpSWccnrYWEe/4o/2gz sqhL9+LgTicG8+nEkQWkBsVokU9ycZ34qmrFkJZAsDehyaXshRuoLbiTd+YW1xPc CUOvvb9FqLUsaegfe7CaSFm8Lnm7HFROQgg04ai2pQLcPrspJp8hwQQ7dLp24X4o 68c9SwNXRkOoYDXYMGI8mPxpQH+gn89YzUAgCNeM00F5SA67jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJK2UTTghJeMlzsMVnBeEtKQPe0mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmNmMGUyYWEtYWRkMy0z Y2FhLTg0ODQtNzVlOGMwZWYyMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBRxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCx/7TvFywtQGfu9visBCw14Ydm0YSQ8blakpWneFYGIdk41dX6cUUH xEoHtd1UkbmPNwbzb0ybrZaasyUD5Gr3ZY9SvgT8OlAZmn0sDuVVuTOccu/wGh7K rzMR+86Za+08xKcA3bEB7V+7fYJAzo4S+b4buj0tLb820H6GAcR5JEVzjA6cH5m9 vei2Wn+CMJlE40LAXwXFSJJBcEV6RrD/ZsfiSH1Q+SU3YVxRIMChnp95eP+RXbp/ 91MUBz62cP/iI5EmM7PJKAEuPD6dMVL+L7Q+ubaj+sudD80hfAR47m+btnJkpuMS Oo5zUnW844q+F2xDZIqc/G6+bY7uLNo= -----END CERTIFICATE-----Generated at Tue Sep 29 11:00:36 2026 by rpki-client