$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ea308087-7371-3450-9793-e1ba4bdc5d60.roa File: ea308087-7371-3450-9793-e1ba4bdc5d60.roa (raw, json) Hash identifier: SKwxHshHmIrhaecu8yIMPH2pa4baiD+GVWJMJepFCqw= Subject key identifier: 54:24:99:47:EE:10:57:19:BC:89:CC:4D:BF:DA:C3:03:F5:4D:4A:0F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BBCDF6457B9A0D3482000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ea308087-7371-3450-9793-e1ba4bdc5d60.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 184.20.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:bc:df:64:57:b9:a0:d3:48:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=03dcb73d-8a6e-4896-ae5c-155ab098592b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:b0:ce:47:39:07:5e:9c:ee:8f:e9:10:d1: b0:55:e7:81:ec:39:4c:b9:b8:27:46:fc:70:18:c1: 12:af:8c:aa:38:ed:09:01:a0:0c:fd:ad:04:64:19: b0:37:37:a1:e0:83:8d:ad:fa:22:d6:d1:1c:3b:a3: dc:5d:6c:83:cd:41:bc:33:a6:53:1a:e8:8c:7a:d6: 28:41:82:28:90:63:c4:82:4c:db:16:ca:8f:f9:f9: 48:37:ca:b8:0f:33:94:7d:55:55:df:9b:ad:d3:10: ce:8e:f2:f6:00:74:b4:1e:65:ca:d3:9b:9f:ac:ba: b3:f3:bf:ef:15:0a:f8:32:c1:8e:82:97:1c:f9:16: b4:ee:f7:2f:bd:ae:e5:f0:0f:90:f9:9c:c3:7b:ea: d4:89:7e:d9:07:ef:45:25:16:39:92:f3:81:36:48: b4:1d:a1:12:32:d6:e8:9a:7e:a8:22:83:e6:0c:d2: 79:83:82:d9:db:4a:c9:e3:d5:76:55:64:ff:fe:41: ba:79:1a:f3:46:bb:5d:28:2a:a1:22:91:e2:d6:98: e9:57:b6:63:8b:d7:58:9b:d5:f7:2b:f2:a1:de:d1: 6e:ff:64:98:4d:c1:78:44:a3:a2:ab:e5:bf:bc:06: fb:0f:6d:43:67:48:88:9a:67:2c:26:51:dc:ea:9e: 6b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:24:99:47:EE:10:57:19:BC:89:CC:4D:BF:DA:C3:03:F5:4D:4A:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ea308087-7371-3450-9793-e1ba4bdc5d60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d9:de:a0:4f:b3:ac:5b:9b:8b:a5:68:6f:b0:97:4c:1a:a2: 02:74:9c:f7:13:a9:f7:f9:ff:ee:da:2b:12:80:7a:28:6d:11: cf:e3:50:55:4b:67:d1:26:3c:41:3e:4e:8b:75:b5:f7:7c:e0: 59:cc:ec:42:5f:2a:3d:08:b7:0f:51:f5:6f:7c:74:cf:b0:d8: 76:f0:6c:24:ea:b2:59:20:0e:77:02:c0:f5:2f:a9:ac:ec:c2: 96:9f:1a:9c:d6:8f:6e:e3:e5:b0:56:02:c1:7d:31:b6:4a:03: 42:cb:ed:59:2c:3b:09:3d:fa:02:b2:e9:b8:28:01:a7:ec:61: 93:92:19:60:e8:e1:e4:97:aa:7f:89:80:79:20:0e:03:11:bd: 6b:ad:c5:8d:26:6a:6d:97:97:5f:4c:3a:b8:0b:9a:21:8f:f9: f0:f9:13:36:82:8e:86:c1:d3:76:b5:1a:2b:2c:fb:ea:26:7e: 71:a9:54:53:85:f3:b4:f1:dc:2c:cd:99:ee:0d:b9:29:47:3f: ec:67:28:e2:c4:f5:05:b1:86:26:ca:07:4f:44:06:e1:9c:cd: 76:95:88:4b:71:00:3b:73:89:cf:1d:c2:2e:32:70:ab:8a:42: cc:8e:49:fc:2d:f7:e3:18:73:f4:e2:a7:f2:be:ca:9e:41:66: 49:a4:f1:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je7zfZFe5oNNIIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDNkY2I3M2QtOGE2ZS00ODk2LWFlNWMtMTU1YWIwOTg1OTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+Wwzkc5B16c7o/pENGwVeeB7DlMubgnRvxw GMESr4yqOO0JAaAM/a0EZBmwNzeh4IONrfoi1tEcO6PcXWyDzUG8M6ZTGuiMetYo QYIokGPEgkzbFsqP+flIN8q4DzOUfVVV35ut0xDOjvL2AHS0HmXK05ufrLqz87/v FQr4MsGOgpcc+Ra07vcvva7l8A+Q+ZzDe+rUiX7ZB+9FJRY5kvOBNki0HaESMtbo mn6oIoPmDNJ5g4LZ20rJ49V2VWT//kG6eRrzRrtdKCqhIpHi1pjpV7Zji9dYm9X3 K/Kh3tFu/2SYTcF4RKOiq+W/vAb7D21DZ0iImmcsJlHc6p5rlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQkmUfuEFcZvInMTb/awwP1TUoPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWEzMDgwODctNzM3MS0z NDUwLTk3OTMtZTFiYTRiZGM1ZDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrZ3qBPs6xbm4ulaG+wl0waogJ0nPcTqff5/+7aKxKAeihtEc/jUFVL Z9EmPEE+Tot1tfd84FnM7EJfKj0Itw9R9W98dM+w2HbwbCTqslkgDncCwPUvqazs wpafGpzWj27j5bBWAsF9MbZKA0LL7VksOwk9+gKy6bgoAafsYZOSGWDo4eSXqn+J gHkgDgMRvWutxY0mam2Xl19MOrgLmiGP+fD5EzaCjobB03a1Giss++omfnGpVFOF 87Tx3CzNme4NuSlHP+xnKOLE9QWxhibKB09EBuGczXaViEtxADtzic8dwi4ycKuK QsyOSfwt9+MYc/Tip/K+yp5BZkmk8bA= -----END CERTIFICATE-----Generated at Sun Sep 27 12:38:19 2026 by rpki-client