$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da46a392-6c07-346f-bfe1-b3cf6bca483a.roa File: da46a392-6c07-346f-bfe1-b3cf6bca483a.roa (raw, json) Hash identifier: YgDr4FG8RbfkDYfnvEtBWx4oeRgbudLhrrRC2GU7bXY= Subject key identifier: C1:D8:45:43:33:02:31:A4:CD:DC:C7:A9:25:E3:03:EB:07:4D:43:3C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983FD3BA1FADD0617B42CC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da46a392-6c07-346f-bfe1-b3cf6bca483a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.20.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:fd:3b:a1:fa:dd:06:17:b4:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b3023573-cf1f-47a2-8d91-71e889d6e5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:7c:16:6b:91:7b:5c:db:55:92:f5:56:a1: 62:70:b3:80:18:fa:f9:d9:a9:f4:9f:85:c5:1b:af: f5:0c:10:a6:aa:51:c6:5e:9c:25:31:0f:d2:b9:47: 18:79:90:b7:ff:e1:9d:19:fc:1b:0b:90:80:9f:66: 68:91:f5:33:43:b1:08:97:46:a1:ce:8f:77:97:4c: 8c:92:85:fa:73:b0:c3:6c:21:61:ca:fc:69:08:f9: b3:24:3b:77:21:99:bd:34:70:1d:ad:ba:f7:d1:86: fd:79:38:d4:bb:ba:d3:44:2a:18:e4:ef:8f:4d:5b: 40:a6:e7:ce:9d:3b:1d:d3:10:6f:fd:28:1e:f8:99: e9:b6:bd:1d:54:02:ee:32:27:e1:e0:15:fe:14:79: 71:14:68:e4:a5:16:da:bb:a5:f0:ed:67:1e:37:90: ef:41:a3:20:87:7a:64:25:ce:53:b5:fd:be:6d:ec: 85:67:53:a8:d0:a2:4c:b5:35:46:71:d0:5e:a8:7b: e0:30:a0:f0:cd:71:e6:ce:29:91:50:fd:66:a4:09: e3:44:09:96:25:cb:28:9f:49:4d:a6:0d:e5:3c:3a: be:c4:65:26:57:1e:b3:b0:33:cb:9b:38:cd:b1:ea: 6d:72:9c:cd:ee:da:52:1d:82:c5:6d:7b:4e:83:99: fd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D8:45:43:33:02:31:A4:CD:DC:C7:A9:25:E3:03:EB:07:4D:43:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da46a392-6c07-346f-bfe1-b3cf6bca483a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:f6:3e:00:ff:3b:e6:c0:1a:51:c0:b3:ee:1c:8f:ae:85:15: 79:aa:d6:2b:18:a2:16:fa:7e:b1:de:96:c8:23:98:b2:37:bd: d5:66:1f:0d:13:3b:a5:b3:b8:ec:31:96:25:e0:5d:cb:71:26: 1c:f8:72:c8:3e:1d:d6:8b:be:e0:f0:1f:8e:fe:9c:6a:06:f7: 86:92:6e:1d:69:2d:4c:5f:b5:57:67:21:a4:ea:05:88:b8:7f: d0:47:3e:a1:ee:60:ef:e9:b6:9d:54:a9:73:57:a4:5f:04:70: 3e:07:e8:12:ea:ca:0b:18:fe:b6:b7:a8:fe:c5:bd:92:1c:f0: 39:02:11:70:42:d8:6f:59:79:4c:ea:de:2b:3d:15:f4:3a:96: 0b:f1:43:a6:12:9b:f4:bf:8b:3b:6b:8b:ef:59:5f:d6:b9:ac: ea:61:44:f4:55:b0:d0:48:ec:25:27:b5:23:0e:b2:32:bb:c5: 90:f3:5b:44:d1:10:4f:f8:14:56:79:e2:ef:5f:18:71:a0:c8: 26:e0:f2:72:11:06:fc:00:a1:89:14:4c:90:62:23:ab:9d:45: 76:9a:59:17:9e:a9:ce:88:8c:9e:0d:e1:91:02:88:61:9b:1b: 80:60:75:ce:81:29:d9:bd:9c:48:d7:5d:17:5a:c8:0e:1c:f9: 5b:e5:38:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg/07ofrdBhe0LMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjMwMjM1NzMtY2YxZi00N2EyLThkOTEtNzFlODg5ZDZlNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzx8FmuRe1zbVZL1VqFicLOAGPr52an0n4XF G6/1DBCmqlHGXpwlMQ/SuUcYeZC3/+GdGfwbC5CAn2ZokfUzQ7EIl0ahzo93l0yM koX6c7DDbCFhyvxpCPmzJDt3IZm9NHAdrbr30Yb9eTjUu7rTRCoY5O+PTVtApufO nTsd0xBv/Sge+Jnptr0dVALuMifh4BX+FHlxFGjkpRbau6Xw7WceN5DvQaMgh3pk Jc5Ttf2+beyFZ1Oo0KJMtTVGcdBeqHvgMKDwzXHmzimRUP1mpAnjRAmWJcson0lN pg3lPDq+xGUmVx6zsDPLmzjNseptcpzN7tpSHYLFbXtOg5n96QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHYRUMzAjGkzdzHqSXjA+sHTUM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGE0NmEzOTItNmMwNy0z NDZmLWJmZTEtYjNjZjZiY2E0ODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBShMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH2PgD/O+bAGlHAs+4cj66FFXmq1isYohb6frHelsgjmLI3vdVmHw0T O6WzuOwxliXgXctxJhz4csg+HdaLvuDwH47+nGoG94aSbh1pLUxftVdnIaTqBYi4 f9BHPqHuYO/ptp1UqXNXpF8EcD4H6BLqygsY/ra3qP7FvZIc8DkCEXBC2G9ZeUzq 3is9FfQ6lgvxQ6YSm/S/iztri+9ZX9a5rOphRPRVsNBI7CUntSMOsjK7xZDzW0TR EE/4FFZ54u9fGHGgyCbg8nIRBvwAoYkUTJBiI6udRXaaWReeqc6IjJ4N4ZECiGGb G4Bgdc6BKdm9nEjXXRdayA4c+VvlOOU= -----END CERTIFICATE-----Generated at Fri Sep 25 06:11:24 2026 by rpki-client