$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf1da30a-b3dc-35c8-af60-efe4d3065990.roa File: bf1da30a-b3dc-35c8-af60-efe4d3065990.roa (raw, json) Hash identifier: 5yOegG7dJ7+YQqSjdCArf83OqT8Bre+/6IWbdvcUZeA= Subject key identifier: 41:A4:38:D9:19:23:2A:E4:78:9A:A5:68:62:E5:BF:DC:A0:EE:89:52 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BB66DC238961B3A856E40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf1da30a-b3dc-35c8-af60-efe4d3065990.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.20.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:b6:6d:c2:38:96:1b:3a:85:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fa78bd48-6a81-48a6-811e-c884fa16709e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7a:e7:5c:e6:ee:2a:4e:04:82:f5:fa:ca:08: 7a:15:0d:c5:ab:84:4e:03:05:e2:8e:88:23:5b:10: 1c:1a:21:8b:f1:ad:41:6f:6a:aa:95:e8:91:80:48: bd:3b:b6:17:f0:ca:69:35:2a:ea:bc:39:1a:c2:3f: 4b:b6:e1:fa:db:0d:94:69:8f:7b:8f:18:5a:aa:d3: 89:73:34:fa:a5:b7:26:86:34:ef:64:27:f1:20:7e: a7:de:80:18:b3:9b:7f:6a:d0:f1:17:c7:5a:03:36: 77:40:ee:b8:6a:40:1d:5b:c8:e5:34:e5:f5:15:6a: 42:fc:51:54:86:4b:67:ee:bb:56:b2:ce:3c:44:5c: 4e:b9:d7:15:c1:5e:2a:0a:f5:49:a8:f6:bc:d1:82: d3:91:05:0b:fa:93:67:d6:5b:db:3a:5b:77:40:28: e2:25:d1:ef:9d:7d:28:45:8d:a9:a2:cc:61:39:b0: 2e:55:b0:86:30:92:83:b5:2c:14:a0:14:75:34:be: 3d:e9:9a:1f:b9:5e:e1:aa:01:64:79:63:d9:9a:cd: 7e:d8:88:95:da:67:7f:bb:7c:85:ad:9a:b0:29:b2: 52:01:e1:4e:be:18:86:8c:33:e8:16:ab:59:2a:9f: 40:ca:bd:76:82:aa:7f:56:26:58:89:b9:9e:57:1d: 1b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A4:38:D9:19:23:2A:E4:78:9A:A5:68:62:E5:BF:DC:A0:EE:89:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf1da30a-b3dc-35c8-af60-efe4d3065990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:06:7a:aa:6a:f8:58:8c:f5:86:45:fa:63:f1:4a:bb:a5:01: 98:6b:5f:50:5b:4f:eb:ba:ab:9c:49:df:93:37:b5:ba:50:c6: 5b:10:6d:b2:19:e6:d0:02:ad:e3:ad:65:6a:17:fc:83:b8:a0: fd:3c:83:73:7d:e6:68:c9:32:e4:d4:ab:32:d8:32:18:62:cd: a0:93:5a:a1:d2:5d:47:90:d0:b6:8b:d0:02:e0:d7:8b:d1:36: fa:3a:75:bf:7a:03:b9:ab:04:c3:98:8b:cc:9b:92:46:c4:29: 3c:05:e1:f8:a3:c0:b6:db:c9:1c:f6:41:94:bc:81:90:11:8f: dd:ba:3e:13:0f:ce:59:3c:33:7b:73:ab:0c:5a:19:40:0a:4d: 5e:d9:2e:08:ce:e6:d0:97:f8:a5:37:5e:60:58:21:fe:57:e0: 28:43:d9:cf:ec:91:85:49:78:af:ee:90:5a:5a:3e:9d:de:fe: c3:93:ce:39:e8:14:fe:14:19:d7:a0:7b:a9:a4:5e:5d:02:d3: 48:9c:c7:c9:85:13:e4:f6:85:b4:84:3b:6c:9c:12:4f:fc:bd: 3e:ee:64:8b:1b:89:a1:6c:84:96:d6:1b:b0:2e:41:7e:b4:f7: 2f:e9:f4:0b:b9:3a:cb:5d:2e:c9:55:43:fe:77:a5:67:ca:8a: f5:00:f0:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je7ZtwjiWGzqFbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmE3OGJkNDgtNmE4MS00OGE2LTgxMWUtYzg4NGZhMTY3MDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3rnXObuKk4EgvX6ygh6FQ3Fq4ROAwXijogj WxAcGiGL8a1Bb2qqleiRgEi9O7YX8MppNSrqvDkawj9LtuH62w2UaY97jxhaqtOJ czT6pbcmhjTvZCfxIH6n3oAYs5t/atDxF8daAzZ3QO64akAdW8jlNOX1FWpC/FFU hktn7rtWss48RFxOudcVwV4qCvVJqPa80YLTkQUL+pNn1lvbOlt3QCjiJdHvnX0o RY2posxhObAuVbCGMJKDtSwUoBR1NL496ZofuV7hqgFkeWPZms1+2IiV2md/u3yF rZqwKbJSAeFOvhiGjDPoFqtZKp9Ayr12gqp/ViZYibmeVx0bzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGkONkZIyrkeJqlaGLlv9yg7olSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmYxZGEzMGEtYjNkYy0z NWM4LWFmNjAtZWZlNGQzMDY1OTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBRlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANAGeqpq+FiM9YZF+mPxSrulAZhrX1BbT+u6q5xJ35M3tbpQxlsQbbIZ 5tACreOtZWoX/IO4oP08g3N95mjJMuTUqzLYMhhizaCTWqHSXUeQ0LaL0ALg14vR Nvo6db96A7mrBMOYi8ybkkbEKTwF4fijwLbbyRz2QZS8gZARj926PhMPzlk8M3tz qwxaGUAKTV7ZLgjO5tCX+KU3XmBYIf5X4ChD2c/skYVJeK/ukFpaPp3e/sOTzjno FP4UGdege6mkXl0C00icx8mFE+T2hbSEO2ycEk/8vT7uZIsbiaFshJbWG7AuQX60 9y/p9Au5OstdLslVQ/53pWfKivUA8Bg= -----END CERTIFICATE-----Generated at Tue Sep 29 15:36:50 2026 by rpki-client