$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4fc07ac7-cd9c-3eeb-a1a9-e2121ca56e34.roa File: 4fc07ac7-cd9c-3eeb-a1a9-e2121ca56e34.roa (raw, json) Hash identifier: 4lk/BjGCwjCxjm1P4L24awlcs+CI7/0AZpVpQ1RGJ1E= Subject key identifier: E7:9E:50:F6:88:25:FB:FE:AC:28:BC:96:8E:13:91:11:7F:8F:8A:AE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDEC0D132B1DAB63611A70 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4fc07ac7-cd9c-3eeb-a1a9-e2121ca56e34.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 184.20.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:ec:0d:13:2b:1d:ab:63:61:1a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=0f78ba17-0af0-408b-b8ec-fdd7d1271fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9d:8d:fd:5b:08:02:ee:97:da:77:42:b1:48: 22:ae:ec:f1:81:14:9b:4e:6e:c8:d9:ea:d2:b1:51: fc:b3:a4:2e:72:63:e7:d7:c3:a1:98:72:8c:c9:05: c8:41:c7:12:39:7e:a6:8f:84:f4:a7:cf:33:53:5b: 3d:5c:c9:19:fb:48:89:65:ef:73:a5:0d:13:50:c8: e7:5f:d5:15:ff:09:c6:fd:f0:a4:ab:e3:d2:10:36: 5d:80:32:8a:44:9b:85:73:98:05:54:0f:fc:a7:be: 8b:e5:61:3c:7e:21:2c:f3:c6:0a:23:b9:14:67:33: 1c:2d:e4:85:e6:cc:4c:64:7c:4c:2c:0c:3e:5e:fa: 96:55:27:0c:e8:91:8a:42:d1:4a:44:9e:2b:e0:89: 45:6a:ec:f9:05:56:b1:48:d5:64:4d:3f:0c:7d:7a: f4:d5:4c:90:39:f2:33:b6:31:22:d9:91:5b:2e:d3: 44:4e:e7:29:32:ee:26:77:bb:f6:f8:3a:28:12:47: f9:25:6d:12:e7:3a:bb:f7:83:95:7b:0c:0a:a1:65: c3:6b:76:ff:ad:18:2d:a2:b9:d8:a1:ef:4a:9c:89: db:91:ca:0d:22:1f:88:74:bf:96:78:ff:eb:8e:ab: fa:3c:20:52:42:84:01:c2:2e:df:6a:19:da:50:58: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9E:50:F6:88:25:FB:FE:AC:28:BC:96:8E:13:91:11:7F:8F:8A:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4fc07ac7-cd9c-3eeb-a1a9-e2121ca56e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:e2:cb:a2:d1:3f:8a:90:8f:6f:5f:db:3d:63:e2:3b:5a:e0: 70:74:3f:26:ee:9c:7c:a2:09:b0:db:08:06:67:53:1f:9b:7d: c5:8e:c5:e6:6f:25:c4:46:54:7f:29:a3:f3:2d:8c:89:f5:a1: bb:00:34:fc:a5:f2:a6:3a:5d:9c:03:c3:f6:83:13:06:14:74: be:d2:03:79:74:df:87:a2:13:fa:f7:89:57:dd:45:e5:c8:80: 1b:92:e4:65:e5:60:f1:80:54:54:d4:1e:f6:c3:7f:a9:e0:40: 99:b4:5a:48:56:ad:30:ea:4f:d4:88:b9:8d:84:5b:8b:fc:cb: 0d:35:92:2d:64:7e:b1:d5:91:b1:c6:94:38:91:2f:da:6b:82: 02:22:7e:4a:3e:b6:e3:8f:fd:d6:ec:ab:93:5c:3e:5f:20:aa: 99:d6:d7:95:56:80:61:4f:85:ee:62:76:c5:86:cd:aa:a4:2b: 71:68:9c:a7:d5:53:17:ba:81:fa:ed:26:66:06:90:26:d1:95: e3:db:f3:71:5b:c5:25:1d:e8:6e:d0:95:43:43:ea:03:a2:00: a7:19:8e:85:11:62:3d:e8:c6:9d:18:ef:ce:04:25:c0:5f:d2: 84:3f:73:74:cc:46:c1:31:6c:28:b3:fd:96:be:0d:a6:ee:c6: df:1c:8b:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzewNEysdq2NhGnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MGY3OGJhMTctMGFmMC00MDhiLWI4ZWMtZmRkN2QxMjcxZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ2N/VsIAu6X2ndCsUgiruzxgRSbTm7I2erS sVH8s6QucmPn18OhmHKMyQXIQccSOX6mj4T0p88zU1s9XMkZ+0iJZe9zpQ0TUMjn X9UV/wnG/fCkq+PSEDZdgDKKRJuFc5gFVA/8p76L5WE8fiEs88YKI7kUZzMcLeSF 5sxMZHxMLAw+XvqWVScM6JGKQtFKRJ4r4IlFauz5BVaxSNVkTT8MfXr01UyQOfIz tjEi2ZFbLtNETucpMu4md7v2+DooEkf5JW0S5zq794OVewwKoWXDa3b/rRgtornY oe9KnInbkcoNIh+IdL+WeP/rjqv6PCBSQoQBwi7fahnaUFjCmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeeUPaIJfv+rCi8lo4TkRF/j4quMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGZjMDdhYzctY2Q5Yy0z ZWViLWExYTktZTIxMjFjYTU2ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACniy6LRP4qQj29f2z1j4jta4HB0PybunHyiCbDbCAZnUx+bfcWOxeZv JcRGVH8po/MtjIn1obsANPyl8qY6XZwDw/aDEwYUdL7SA3l034eiE/r3iVfdReXI gBuS5GXlYPGAVFTUHvbDf6ngQJm0WkhWrTDqT9SIuY2EW4v8yw01ki1kfrHVkbHG lDiRL9prggIifko+tuOP/dbsq5NcPl8gqpnW15VWgGFPhe5idsWGzaqkK3FonKfV Uxe6gfrtJmYGkCbRlePb83FbxSUd6G7QlUND6gOiAKcZjoURYj3oxp0Y784EJcBf 0oQ/c3TMRsExbCiz/Za+Dabuxt8ci44= -----END CERTIFICATE-----Generated at Sun Oct 26 10:05:21 2025 by rpki-client