$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ebb524c9-83a7-303a-a9f8-2047e7d79096.roa File: ebb524c9-83a7-303a-a9f8-2047e7d79096.roa (raw, json) Hash identifier: QAI/ZENbFKbYhx4i+XwA976vC0Ah7pql2hu2Dvh9tkU= Subject key identifier: 82:DD:B1:B0:4A:75:6A:11:42:7D:E9:E2:B9:01:67:75:10:FB:B7:09 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497ADFDAA9DD5BFB1BAF2680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ebb524c9-83a7-303a-a9f8-2047e7d79096.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40306 IP address blocks: 184.20.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:df:da:a9:dd:5b:fb:1b:af:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cae71461-cc6f-4fad-a276-c3b8a90b7139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:d1:9d:3e:9d:73:09:21:8d:6a:6f:ad:43: 0d:a9:6d:82:99:47:87:9f:c3:36:1e:34:e9:68:52: dc:6b:13:c9:3b:81:84:03:d7:14:8e:4d:8b:44:79: 30:a4:9a:1b:cb:7e:04:e7:aa:83:39:0a:f2:bd:f1: 64:17:d9:50:8a:46:3c:ee:8c:70:b3:42:73:d9:43: b0:b5:70:2c:cc:14:a8:1c:12:11:64:10:c0:af:55: 39:f2:ad:a1:71:5e:17:fb:7b:4f:f3:5d:87:89:34: 37:8c:6e:5b:2a:23:2f:4a:cb:03:38:24:94:dc:97: dc:51:fd:24:b5:dc:fd:7f:b0:80:dc:63:2d:27:a2: ee:cc:bd:ce:95:bc:61:bf:88:37:6b:42:08:bd:81: 08:69:ff:32:b9:f4:fd:06:18:32:4a:98:e6:b0:0a: 9f:27:2f:65:d8:7d:83:9d:aa:11:6e:c6:61:f4:4a: fc:7c:2e:6e:c1:1b:5c:c2:f1:45:5c:f7:fb:3f:23: 48:3c:23:0e:4d:7d:56:44:a1:b5:d4:90:cd:b6:b0: eb:58:e8:d7:72:f2:7c:0e:70:ec:6e:71:f6:3b:24: 2a:a5:b6:f0:20:26:e1:93:f8:b2:fa:68:bc:67:8d: fb:ff:92:b3:f2:5a:12:37:5d:31:0f:c1:9b:d4:2a: e7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DD:B1:B0:4A:75:6A:11:42:7D:E9:E2:B9:01:67:75:10:FB:B7:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ebb524c9-83a7-303a-a9f8-2047e7d79096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:a6:61:0c:39:a0:84:1b:a2:4d:06:94:0c:b6:2b:89:03:ab: ec:52:92:45:7e:b6:95:6c:23:c0:c6:75:39:1b:bc:60:fb:14: 07:f8:2c:25:59:b4:fc:96:63:b4:3a:16:11:e7:7e:f5:e1:05: 6c:8f:22:e1:cf:1e:7d:87:cc:9b:8e:7c:a3:87:80:df:3b:b0: 84:d6:e5:ed:42:d4:86:17:1b:db:8a:e7:72:62:06:3f:7b:1f: e1:6e:6c:6b:fe:ef:1f:f4:b4:e9:6d:31:01:f0:a9:90:d0:83: 50:f4:47:4b:4e:33:c8:84:2f:13:fd:24:55:be:7d:32:3d:ea: bf:bb:9e:f0:db:5c:cd:8f:e0:15:a7:9f:14:9a:26:71:b5:8a: 34:a8:48:44:cf:26:6e:e7:6d:c2:22:a3:b6:14:84:fd:ab:26: d7:c0:13:4d:c6:11:67:78:75:67:4c:0d:34:28:13:ba:27:a4: 7b:92:b4:4f:59:4a:a9:3d:86:9f:d7:d6:70:ca:21:a1:93:43: ac:de:87:79:0f:d6:75:a3:ac:6a:0e:d8:df:44:54:95:83:29: 3d:7a:21:16:5f:4b:61:07:e0:e6:c8:f9:bc:a8:30:8c:bc:10: cf:60:f9:90:d6:b9:d6:63:81:7f:df:9d:c4:e0:60:61:8c:50: 02:ef:28:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jet/aqd1b+xuvJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2FlNzE0NjEtY2M2Zi00ZmFkLWEyNzYtYzNiOGE5MGI3MTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd/RnT6dcwkhjWpvrUMNqW2CmUeHn8M2HjTp aFLcaxPJO4GEA9cUjk2LRHkwpJoby34E56qDOQryvfFkF9lQikY87oxws0Jz2UOw tXAszBSoHBIRZBDAr1U58q2hcV4X+3tP812HiTQ3jG5bKiMvSssDOCSU3JfcUf0k tdz9f7CA3GMtJ6LuzL3Olbxhv4g3a0IIvYEIaf8yufT9BhgySpjmsAqfJy9l2H2D naoRbsZh9Er8fC5uwRtcwvFFXPf7PyNIPCMOTX1WRKG11JDNtrDrWOjXcvJ8DnDs bnH2OyQqpbbwICbhk/iy+mi8Z437/5Kz8loSN10xD8Gb1CrnjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILdsbBKdWoRQn3p4rkBZ3UQ+7cJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWJiNTI0YzktODNhNy0z MDNhLWE5ZjgtMjA0N2U3ZDc5MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGmYQw5oIQbok0GlAy2K4kDq+xSkkV+tpVsI8DGdTkbvGD7FAf4LCVZ tPyWY7Q6FhHnfvXhBWyPIuHPHn2HzJuOfKOHgN87sITW5e1C1IYXG9uK53JiBj97 H+FubGv+7x/0tOltMQHwqZDQg1D0R0tOM8iELxP9JFW+fTI96r+7nvDbXM2P4BWn nxSaJnG1ijSoSETPJm7nbcIio7YUhP2rJtfAE03GEWd4dWdMDTQoE7onpHuStE9Z Sqk9hp/X1nDKIaGTQ6zeh3kP1nWjrGoO2N9EVJWDKT16IRZfS2EH4ObI+byoMIy8 EM9g+ZDWudZjgX/fncTgYGGMUALvKN0= -----END CERTIFICATE-----Generated at Mon Sep 28 18:51:35 2026 by rpki-client