$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa File: 475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa (raw, json) Hash identifier: hqeRVNTIQiZSxlK9d0cAzemEwORyIKjrA0zr+sK0WWA= Subject key identifier: B0:2F:CA:34:24:1B:DA:5B:1C:F3:5F:77:38:41:DA:5E:0D:C1:35:5E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD27CEF55B813F34BE3D40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 184.20.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:27:ce:f5:5b:81:3f:34:be:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=3b88cf05-1929-45f2-b28c-60ff2156b6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ef:78:64:7a:33:23:31:54:67:3f:98:fd:ea: 79:f5:2e:be:e6:ed:f3:19:05:91:2e:1c:87:69:72: 14:35:35:15:89:2c:83:b4:aa:cb:56:b6:af:b9:73: ac:d0:7c:10:70:7e:ad:b4:7f:00:b1:92:97:56:7a: 17:1a:ff:2b:4e:27:ac:1c:29:3d:40:3e:a1:29:bd: 92:87:1d:50:8e:09:a2:0a:c0:10:54:41:ff:3f:54: 77:cd:d6:b0:dd:aa:3c:e6:79:0c:7f:3a:c9:3b:6c: a6:f0:d6:27:fe:d4:bc:e9:84:e1:8a:f5:de:ea:e5: 2c:67:94:ef:da:43:63:95:ae:0c:c4:61:ce:f8:a3: 41:2b:07:55:0b:45:f7:29:1c:d4:d2:30:03:a8:95: 2c:d1:ea:85:39:2d:ce:5a:21:d3:b3:2d:a2:63:c6: d4:da:07:c3:44:74:71:6f:7d:58:be:26:0c:ea:41: 50:72:f0:df:35:42:2b:ee:d1:11:cb:67:a5:55:79: 95:32:1c:d2:26:62:f4:13:fa:ae:cb:36:83:fe:55: 42:ed:d4:65:ac:0e:31:04:28:2f:1b:ff:c7:b1:24: 8c:ed:be:35:7e:12:bf:ee:2e:32:d5:95:a4:7e:2b: 21:61:28:d2:76:74:f5:ab:1f:79:5e:b5:7c:67:83: 08:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2F:CA:34:24:1B:DA:5B:1C:F3:5F:77:38:41:DA:5E:0D:C1:35:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:cb:4e:19:0a:96:fb:b5:93:82:9e:2c:86:9d:22:81:b0:f4: 20:d2:36:da:7a:c9:1f:0f:96:29:fb:81:84:cd:f8:09:b2:03: 46:d0:7a:88:7a:cd:fc:a4:2e:f9:62:a9:f9:17:09:d3:e4:aa: 5f:50:09:b1:a1:f5:4a:01:20:53:70:75:e9:c1:63:df:e7:93: fd:2d:ba:3e:9d:29:4f:6a:20:e1:ad:42:dd:20:48:a1:7f:fb: 89:b9:e1:b6:23:11:fd:83:ca:4e:5d:16:58:eb:2b:05:da:b3: 29:9f:ba:13:e7:ea:fa:45:b7:a9:88:50:3c:1e:6c:f9:ec:a2: 40:5e:b7:1e:d3:1c:d1:58:f6:62:06:d2:bc:3f:69:3a:76:63: 60:9d:67:d6:2c:5b:23:aa:3d:9c:43:19:00:44:f9:c5:73:ca: 89:ef:d1:62:77:cb:45:aa:c5:37:21:ea:ea:a5:44:d8:d9:e4: de:b1:91:d3:be:02:6c:cc:a1:68:b4:f3:8a:84:98:c1:da:93: 04:86:dc:80:3e:a6:da:fd:b7:51:38:89:57:71:64:ff:d2:5c: 94:87:8a:b6:44:88:83:5d:68:e3:28:5a:ae:c5:76:65:49:13: 4d:d6:ec:ec:50:7f:1e:c8:f6:84:96:b6:8c:44:11:f3:01:59: 7f:ac:db:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSfO9VuBPzS+PUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk M2I4OGNmMDUtMTkyOS00NWYyLWIyOGMtNjBmZjIxNTZiNmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO94ZHozIzFUZz+Y/ep59S6+5u3zGQWRLhyH aXIUNTUViSyDtKrLVravuXOs0HwQcH6ttH8AsZKXVnoXGv8rTiesHCk9QD6hKb2S hx1QjgmiCsAQVEH/P1R3zdaw3ao85nkMfzrJO2ym8NYn/tS86YThivXe6uUsZ5Tv 2kNjla4MxGHO+KNBKwdVC0X3KRzU0jADqJUs0eqFOS3OWiHTsy2iY8bU2gfDRHRx b31YviYM6kFQcvDfNUIr7tERy2elVXmVMhzSJmL0E/quyzaD/lVC7dRlrA4xBCgv G//HsSSM7b41fhK/7i4y1ZWkfishYSjSdnT1qx95XrV8Z4MICQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAvyjQkG9pbHPNfdzhB2l4NwTVeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDc1YzE3M2MtNmEzMC0z NGQ1LWJiYjQtOTUwZjdmZmU4ZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3LThkKlvu1k4KeLIadIoGw9CDSNtp6yR8Plin7gYTN+AmyA0bQeoh6 zfykLvliqfkXCdPkql9QCbGh9UoBIFNwdenBY9/nk/0tuj6dKU9qIOGtQt0gSKF/ +4m54bYjEf2Dyk5dFljrKwXasymfuhPn6vpFt6mIUDwebPnsokBetx7THNFY9mIG 0rw/aTp2Y2CdZ9YsWyOqPZxDGQBE+cVzyonv0WJ3y0WqxTch6uqlRNjZ5N6xkdO+ AmzMoWi084qEmMHakwSG3IA+ptr9t1E4iVdxZP/SXJSHirZEiINdaOMoWq7FdmVJ E03W7OxQfx7I9oSWtoxEEfMBWX+s25E= -----END CERTIFICATE-----Generated at Sun Oct 26 12:05:13 2025 by rpki-client