$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf48e534-9455-38bd-9217-4ceac46a4a8e.roa File: cf48e534-9455-38bd-9217-4ceac46a4a8e.roa (raw, json) Hash identifier: jjDmtCbTo2+vGkdxx7IfL3XihAIgt/h41uIBU23IqJM= Subject key identifier: BF:10:32:D9:3C:A8:91:72:09:52:99:0D:8E:4E:10:4B:87:3D:05:89 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E012E74C6D3BB50A86F580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf48e534-9455-38bd-9217-4ceac46a4a8e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 184.21.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:12:e7:4c:6d:3b:b5:0a:86:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=08ef0aaa-8756-40e3-83f1-cd426ac60380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:42:61:13:cf:68:bc:e8:6f:e6:fc:0e:bf: be:da:9d:b9:f7:3d:a7:56:3d:6a:18:71:23:33:21: 56:ac:40:3f:5b:aa:d4:66:2f:91:5d:61:68:2f:e8: 9e:4a:e2:ae:2b:cb:b2:3f:0e:fd:32:de:3c:29:00: 7c:eb:fd:d6:f7:fa:7f:ef:44:ba:e5:b4:b4:4b:dc: 21:28:af:45:12:77:82:b3:b4:5e:7d:82:32:7c:b8: da:fd:b7:00:49:e8:73:99:ec:e4:4e:f9:aa:ee:c7: 4f:a5:a3:86:b5:fb:d7:c7:58:c5:1e:8f:11:a5:2f: e0:60:f7:e2:26:50:c7:d5:3b:0e:56:32:3f:7b:5e: 75:cd:df:51:35:4a:84:a0:bd:0b:55:74:44:b2:62: e2:cf:32:2a:ba:03:2a:22:74:e0:75:9d:e4:91:87: 48:4d:61:10:cc:49:b2:c6:d9:a9:b9:6e:ae:6e:2d: 5d:2a:a6:0f:d7:a2:a5:c8:1e:c9:af:0f:3b:ba:cd: 5e:06:a2:52:64:2e:e3:30:ad:bf:50:7e:e9:70:53: 30:d8:a2:01:a5:11:34:77:f0:b4:65:25:dc:e4:ab: 9e:5b:1b:d2:1c:07:09:2f:ca:9d:b0:74:2f:e8:da: 1d:34:9c:f0:1b:6f:af:d8:48:58:f2:0a:df:69:bc: 3c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:10:32:D9:3C:A8:91:72:09:52:99:0D:8E:4E:10:4B:87:3D:05:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf48e534-9455-38bd-9217-4ceac46a4a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:2e:26:78:c2:32:43:2f:d6:01:63:47:5f:b4:93:ea:18:c2: a4:54:4d:08:3c:b3:fd:e1:54:19:69:a8:b1:d1:9f:2d:d4:70: 51:23:a3:0b:16:b4:5f:76:c3:1c:81:28:35:dc:c5:9a:71:cd: df:4c:2b:c1:74:a8:82:30:e4:60:1d:68:4b:70:82:2a:b8:d8: 02:d0:df:99:55:7d:f5:a9:8a:61:3b:65:d2:50:d8:a7:bd:97: 08:f2:6f:2f:71:fd:8a:3a:59:66:02:fc:e9:a8:fb:c0:81:27: aa:9e:ce:07:d2:65:24:87:68:60:16:23:96:70:b8:cd:58:e1: c9:8f:56:67:10:ad:32:bb:a2:29:1d:90:5c:49:ae:67:36:77: fa:e8:37:2b:3f:ea:58:6f:c1:2f:01:53:9c:29:1b:3e:5a:3c: 65:30:1f:91:fb:87:ad:83:58:15:19:df:89:7d:80:02:82:5e: d7:60:45:d5:29:1d:92:a5:a2:f6:3e:e7:7b:e4:45:6d:ea:12: 02:97:ab:23:1d:58:70:24:d4:96:78:cb:2d:9f:00:72:23:e5: 39:52:cf:e9:a5:62:8f:ef:fd:9e:68:f0:dc:53:2b:80:37:6e: 63:e4:90:55:59:b9:21:f9:16:c8:4f:a2:65:e7:ca:3d:51:93: a0:2e:3c:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4BLnTG07tQqG9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDhlZjBhYWEtODc1Ni00MGUzLTgzZjEtY2Q0MjZhYzYwMzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ1CYRPPaLzob+b8Dr++2p259z2nVj1qGHEj MyFWrEA/W6rUZi+RXWFoL+ieSuKuK8uyPw79Mt48KQB86/3W9/p/70S65bS0S9wh KK9FEneCs7RefYIyfLja/bcASehzmezkTvmq7sdPpaOGtfvXx1jFHo8RpS/gYPfi JlDH1TsOVjI/e151zd9RNUqEoL0LVXREsmLizzIqugMqInTgdZ3kkYdITWEQzEmy xtmpuW6ubi1dKqYP16KlyB7Jrw87us1eBqJSZC7jMK2/UH7pcFMw2KIBpRE0d/C0 ZSXc5KueWxvSHAcJL8qdsHQv6NodNJzwG2+v2EhY8grfabw8kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8QMtk8qJFyCVKZDY5OEEuHPQWJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2Y0OGU1MzQtOTQ1NS0z OGJkLTkyMTctNGNlYWM0NmE0YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsuJnjCMkMv1gFjR1+0k+oYwqRUTQg8s/3hVBlpqLHRny3UcFEjowsW tF92wxyBKDXcxZpxzd9MK8F0qIIw5GAdaEtwgiq42ALQ35lVffWpimE7ZdJQ2Ke9 lwjyby9x/Yo6WWYC/Omo+8CBJ6qezgfSZSSHaGAWI5ZwuM1Y4cmPVmcQrTK7oikd kFxJrmc2d/roNys/6lhvwS8BU5wpGz5aPGUwH5H7h62DWBUZ34l9gAKCXtdgRdUp HZKlovY+53vkRW3qEgKXqyMdWHAk1JZ4yy2fAHIj5TlSz+mlYo/v/Z5o8NxTK4A3 bmPkkFVZuSH5FshPomXnyj1Rk6AuPDw= -----END CERTIFICATE-----Generated at Thu Mar 26 13:42:25 2026 by rpki-client