$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc009845-ba9d-36d0-a4d4-574654d93121.roa File: cc009845-ba9d-36d0-a4d4-574654d93121.roa (raw, json) Hash identifier: lPyvZGnXtn/zAR+XXPAnKIc2WQd7SVYGUOwuZjHY9es= Subject key identifier: E9:35:21:E2:53:23:F8:9D:7D:D8:9A:8C:C6:D6:89:DB:7D:D5:CD:81 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BCFE73B0771BDB0B3C3C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc009845-ba9d-36d0-a4d4-574654d93121.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.21.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:cf:e7:3b:07:71:bd:b0:b3:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c3aa0faa-6131-4a60-bc21-3ced03a1ec45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8d:52:cb:fc:88:7a:7f:c2:93:bf:58:e1:a8: 7a:b6:f0:b6:fe:45:90:63:20:db:32:c8:2e:e4:65: 28:b2:f1:1b:ed:05:f8:a6:e1:69:02:58:04:cc:92: ac:52:a9:cb:35:04:41:4e:30:48:b2:98:f5:40:6c: 04:4b:6b:75:83:bd:31:ed:66:09:82:c5:0b:e5:1d: c9:a5:00:54:6e:12:3c:74:14:0e:b9:2f:60:6c:02: db:5b:58:03:d2:42:08:5f:b1:79:08:e6:03:d6:89: 90:2d:ab:5f:68:4b:d2:c8:13:f4:0c:9f:8c:ea:81: c9:5c:a8:21:4a:cf:92:09:07:cf:e2:c9:61:7c:f9: c1:5a:c9:27:24:7e:38:1d:d3:4d:83:cc:8d:55:b0: e9:15:b3:8a:d2:89:7f:b3:74:1f:b2:81:1f:36:b2: 5c:e3:b6:a8:a6:d0:ac:ba:60:c2:86:0a:d9:13:c6: b4:de:eb:71:45:79:e0:f9:28:df:c6:70:ac:1a:ad: 1a:74:b9:02:08:2c:95:46:89:53:5d:14:2c:f4:cb: 12:be:50:ca:78:68:fe:50:6d:cf:1d:ce:56:dd:90: 91:3c:cc:9e:6e:23:71:96:8f:1b:1f:9d:b1:fe:97: 6d:b2:31:72:28:23:03:23:04:b3:f3:88:df:a8:b3: 33:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:35:21:E2:53:23:F8:9D:7D:D8:9A:8C:C6:D6:89:DB:7D:D5:CD:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc009845-ba9d-36d0-a4d4-574654d93121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:e1:da:58:9d:30:82:5c:d9:52:85:23:16:71:fd:ba:39:e9: 6d:53:13:1f:84:fe:d9:77:f4:c0:7f:23:66:e1:34:46:1a:4c: 80:e6:5e:6b:85:78:c2:ce:e8:f1:6d:bf:c1:f1:e3:7a:84:ec: 66:96:a1:3c:a7:37:26:a9:7e:80:ac:5a:f7:5d:2b:fb:20:ef: 87:f0:78:23:31:87:e1:96:5f:c2:1f:19:6f:8b:1e:9f:e3:0d: c4:cd:6f:6c:40:bb:d2:eb:0c:09:b9:1f:70:c1:2a:4f:f9:2b: b2:2a:4c:d4:17:f0:58:40:d9:e5:39:8d:f8:03:ef:04:c2:83: 42:83:75:78:47:25:e0:45:af:34:d8:13:1b:54:71:2b:cd:20: 32:9c:c2:af:ed:ce:82:d4:97:df:77:94:11:fe:59:19:dc:4c: 74:9f:68:4c:5b:81:de:05:f8:c5:1e:72:54:25:5f:7c:69:4a: 87:25:76:86:d2:d9:7c:d5:5a:3d:7c:ed:24:c3:3b:8e:df:1c: 85:56:21:ac:ef:46:ad:d8:c0:95:99:40:98:b5:54:45:60:8a: 1c:c0:7e:d4:d2:ed:02:97:0f:36:66:cc:73:0f:b2:0f:0f:9a: a9:16:e9:16:84:4c:6c:59:81:60:b3:d9:f4:30:e0:b6:6c:bc: a2:c0:a5:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je8/nOwdxvbCzw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzNhYTBmYWEtNjEzMS00YTYwLWJjMjEtM2NlZDAzYTFlYzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo1Sy/yIen/Ck79Y4ah6tvC2/kWQYyDbMsgu 5GUosvEb7QX4puFpAlgEzJKsUqnLNQRBTjBIspj1QGwES2t1g70x7WYJgsUL5R3J pQBUbhI8dBQOuS9gbALbW1gD0kIIX7F5COYD1omQLatfaEvSyBP0DJ+M6oHJXKgh Ss+SCQfP4slhfPnBWsknJH44HdNNg8yNVbDpFbOK0ol/s3QfsoEfNrJc47aoptCs umDChgrZE8a03utxRXng+SjfxnCsGq0adLkCCCyVRolTXRQs9MsSvlDKeGj+UG3P Hc5W3ZCRPMyebiNxlo8bH52x/pdtsjFyKCMDIwSz84jfqLMzvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOk1IeJTI/idfdiajMbWidt91c2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2MwMDk4NDUtYmE5ZC0z NmQwLWE0ZDQtNTc0NjU0ZDkzMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBX+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMDh2lidMIJc2VKFIxZx/bo56W1TEx+E/tl39MB/I2bhNEYaTIDmXmuF eMLO6PFtv8Hx43qE7GaWoTynNyapfoCsWvddK/sg74fweCMxh+GWX8IfGW+LHp/j DcTNb2xAu9LrDAm5H3DBKk/5K7IqTNQX8FhA2eU5jfgD7wTCg0KDdXhHJeBFrzTY ExtUcSvNIDKcwq/tzoLUl993lBH+WRncTHSfaExbgd4F+MUeclQlX3xpSocldobS 2XzVWj187STDO47fHIVWIazvRq3YwJWZQJi1VEVgihzAftTS7QKXDzZmzHMPsg8P mqkW6RaETGxZgWCz2fQw4LZsvKLApQ4= -----END CERTIFICATE-----Generated at Fri Oct 9 20:34:38 2026 by rpki-client