$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb9f349e-81a2-3b62-a174-0e2494547880.roa File: cb9f349e-81a2-3b62-a174-0e2494547880.roa (raw, json) Hash identifier: wUs6KRgLggjN1ahz5UqZ4jG2FmSCKpuaml4pD3yWHKA= Subject key identifier: B7:2C:5F:4E:02:B3:CF:C8:1B:61:60:DE:22:55:92:B2:2F:7C:7E:9C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E009A2040E514606BFC780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb9f349e-81a2-3b62-a174-0e2494547880.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 184.20.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:09:a2:04:0e:51:46:06:bf:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ef79353e-a98d-4929-b3cd-0954600b52d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:bf:c5:b6:3d:27:d6:33:a6:a1:0a:c9:1b: a8:8e:6b:0b:60:d2:42:ae:ac:f4:e4:ac:22:f6:24: 62:63:94:a5:44:3b:01:25:71:f5:92:ec:4b:c6:64: 2b:0e:d0:f6:28:fe:b2:c3:ab:bc:5e:ca:5c:20:2c: 32:29:87:f4:f2:6d:77:95:4f:48:27:a9:13:2b:ee: 0a:e6:d7:a8:a0:8f:a7:0d:29:6b:bb:b7:47:5f:44: 4d:a4:27:55:6e:d4:bd:0f:ad:66:85:d5:a2:83:44: 18:b0:d3:22:db:b3:b0:d6:93:85:b3:cc:f7:d4:b4: e1:e4:ee:aa:c6:38:43:f8:cf:8a:f2:c4:57:6f:bf: f9:a9:8f:37:a6:c6:2d:b0:37:8b:64:f9:c7:0f:9d: 21:3c:b9:89:5b:dc:6e:fa:13:47:7c:80:1e:34:a0: 13:06:6a:b7:96:28:f2:76:c8:84:1a:8b:f5:5b:1a: c1:6c:d0:f0:18:57:bc:af:ab:b6:1c:4a:87:9b:a3: bd:3b:f9:40:33:b1:6f:c6:d4:d3:0f:16:1c:75:b5: db:d1:c6:b1:4a:9f:4b:00:3e:10:84:b5:62:e9:41: 28:db:a5:8a:89:b7:c3:17:53:ab:2b:ae:a8:38:16: 11:00:57:fe:fa:ca:78:9c:92:65:9b:4c:06:ec:b3: 11:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2C:5F:4E:02:B3:CF:C8:1B:61:60:DE:22:55:92:B2:2F:7C:7E:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb9f349e-81a2-3b62-a174-0e2494547880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:17:6b:7d:df:17:36:26:b5:65:c0:bb:eb:04:b3:75:d3:1d: bf:fd:29:ba:ba:bb:f6:c8:e8:f5:6c:2b:77:a6:f4:bd:8b:fc: 17:d8:18:83:b0:70:14:31:53:9a:f3:1f:60:cc:12:9f:cb:51: e5:f3:24:de:e4:06:13:47:5d:19:d0:92:cd:95:1f:74:d4:d9: 38:67:33:06:58:4e:41:c4:b5:e9:7c:b5:69:d9:1d:42:de:d1: 42:71:08:2e:e2:cf:a9:97:6b:5f:47:a1:e5:c3:cb:01:45:ba: 66:fb:0d:53:85:66:3a:4c:6d:74:91:b5:37:ad:a0:ee:c1:a3: ef:59:14:06:3d:d7:9b:2d:a0:fb:32:9a:eb:37:6b:d2:53:8e: 67:8c:89:cc:14:40:8c:5c:e1:ae:c9:64:8d:59:25:58:65:48: 6b:1a:5a:63:bd:91:31:12:d6:70:87:d8:de:8e:19:08:77:ce: 51:4e:4f:09:0b:39:6b:22:79:db:6d:29:4a:f0:17:4d:ad:39: b0:26:f4:ac:79:8a:68:ac:85:20:40:b9:a4:13:78:50:0f:2c: b7:b0:fc:35:f2:00:22:64:ef:ce:93:ef:ca:37:7b:ad:b3:b3: 41:37:d4:91:30:d2:a9:f5:ba:42:65:e6:a9:53:c4:7f:a9:31: db:46:5f:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4AmiBA5RRga/x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZWY3OTM1M2UtYTk4ZC00OTI5LWIzY2QtMDk1NDYwMGI1MmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtG/xbY9J9YzpqEKyRuojmsLYNJCrqz05Kwi 9iRiY5SlRDsBJXH1kuxLxmQrDtD2KP6yw6u8XspcICwyKYf08m13lU9IJ6kTK+4K 5teooI+nDSlru7dHX0RNpCdVbtS9D61mhdWig0QYsNMi27Ow1pOFs8z31LTh5O6q xjhD+M+K8sRXb7/5qY83psYtsDeLZPnHD50hPLmJW9xu+hNHfIAeNKATBmq3lijy dsiEGov1WxrBbNDwGFe8r6u2HEqHm6O9O/lAM7FvxtTTDxYcdbXb0caxSp9LAD4Q hLVi6UEo26WKibfDF1OrK66oOBYRAFf++sp4nJJlm0wG7LMRqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcsX04Cs8/IG2Fg3iJVkrIvfH6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2I5ZjM0OWUtODFhMi0z YjYyLWExNzQtMGUyNDk0NTQ3ODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBRqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMXa33fFzYmtWXAu+sEs3XTHb/9Kbq6u/bI6PVsK3em9L2L/BfYGIOw cBQxU5rzH2DMEp/LUeXzJN7kBhNHXRnQks2VH3TU2ThnMwZYTkHEtel8tWnZHULe 0UJxCC7iz6mXa19HoeXDywFFumb7DVOFZjpMbXSRtTetoO7Bo+9ZFAY915stoPsy mus3a9JTjmeMicwUQIxc4a7JZI1ZJVhlSGsaWmO9kTES1nCH2N6OGQh3zlFOTwkL OWsiedttKUrwF02tObAm9Kx5imishSBAuaQTeFAPLLew/DXyACJk786T78o3e62z s0E31JEw0qn1ukJl5qlTxH+pMdtGX+E= -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:16 2026 by rpki-client