$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb9f349e-81a2-3b62-a174-0e2494547880.roa File: cb9f349e-81a2-3b62-a174-0e2494547880.roa (raw, json) Hash identifier: aX2YEaZN/OS3J4NY6eS5szBUQh1AGZCY+StzkO4WWLU= Subject key identifier: 13:0E:F3:A1:1A:3C:58:76:41:75:53:AF:62:A7:CB:0D:16:4D:51:46 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD2AC55FDD63D6E57A6D80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb9f349e-81a2-3b62-a174-0e2494547880.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 184.20.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:2a:c5:5f:dd:63:d6:e5:7a:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ed574212-0e58-440a-baea-6538186babf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2e:58:59:ec:b7:de:71:d7:91:8f:8b:cb:c2: 6b:e8:e1:28:3d:a4:ce:16:11:5a:e5:51:4e:81:ed: e8:9b:bb:c6:23:01:18:36:45:3f:0d:aa:75:09:69: e0:90:2d:3e:f6:08:e5:00:17:24:90:9d:43:48:56: e5:e8:fe:be:7e:59:8f:30:b1:b8:46:12:e4:75:f2: 18:5b:17:7b:26:23:63:75:36:02:ac:8e:d0:e4:6d: 34:dd:d5:0b:f1:75:92:83:e0:c6:3d:6e:9b:52:a1: ad:77:41:23:d4:5b:1d:7f:8d:e4:30:03:40:98:a4: a1:e6:2e:c4:6a:a2:48:df:fd:e8:7f:41:1c:ec:9c: 48:51:ba:1a:c1:81:35:d1:ad:7c:f9:6a:a4:39:4e: e0:79:50:6c:57:c9:27:52:25:6f:1a:75:9d:5d:30: 15:e2:79:50:44:ae:1b:48:19:14:09:22:b7:f9:fe: 13:f9:6a:7d:77:61:d5:fa:f4:88:3f:b3:a0:be:1e: 63:e1:45:32:41:ad:70:76:87:8e:35:6c:d7:ea:98: d9:19:0d:2e:40:41:d9:d5:fe:c1:19:ff:d2:fb:6d: ad:6f:45:c1:55:6f:61:b3:fd:7e:ac:ef:25:f1:48: b9:47:cb:d2:60:85:c0:db:ec:59:0a:32:57:13:d5: 51:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:0E:F3:A1:1A:3C:58:76:41:75:53:AF:62:A7:CB:0D:16:4D:51:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb9f349e-81a2-3b62-a174-0e2494547880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:dd:d2:cf:63:dc:c6:a4:98:18:b0:ec:b0:a0:d6:0b:79:20: aa:d3:2c:2d:c4:4d:93:f4:db:2a:a7:d4:b5:81:9b:da:80:28: 5c:ef:6c:f7:69:d5:39:f5:f6:7f:b8:56:4a:6c:6e:66:7b:f3: 78:14:5a:23:1f:8f:16:f8:d3:1b:bd:f4:ff:59:a5:f2:04:45: 9f:3b:37:ca:b6:af:4b:51:15:0c:c3:81:ef:1a:e5:41:16:47: 66:41:50:8f:12:a4:a5:57:58:1d:9e:fc:5a:a2:d8:34:d9:c8: 9f:50:79:27:80:45:ef:f7:da:09:f9:26:52:d0:3b:53:89:a0: c5:18:62:c6:40:59:5e:f6:b5:cc:96:b3:da:9c:7f:64:c6:2c: fa:92:52:56:8c:76:96:43:20:20:91:03:78:68:a4:c6:8d:b0: a4:71:3c:57:35:f7:66:94:d1:57:59:c8:24:5f:e1:a3:c6:fb: 6c:c1:9c:91:a7:a4:d1:79:54:64:b5:77:35:76:9d:19:4f:66: c9:f9:b9:29:26:62:ec:99:21:4c:85:f5:e1:43:fc:62:93:fa: 27:fc:44:db:16:9b:85:fb:be:9b:58:a7:3f:0b:e2:62:bd:4f: ba:df:20:d0:ee:b4:d8:0e:af:26:5a:2e:f2:d9:02:6e:aa:6d: 4f:6a:24:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSrFX91j1uV6bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZWQ1NzQyMTItMGU1OC00NDBhLWJhZWEtNjUzODE4NmJhYmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy5YWey33nHXkY+Ly8Jr6OEoPaTOFhFa5VFO ge3om7vGIwEYNkU/Dap1CWngkC0+9gjlABckkJ1DSFbl6P6+flmPMLG4RhLkdfIY Wxd7JiNjdTYCrI7Q5G003dUL8XWSg+DGPW6bUqGtd0Ej1Fsdf43kMANAmKSh5i7E aqJI3/3of0Ec7JxIUboawYE10a18+WqkOU7geVBsV8knUiVvGnWdXTAV4nlQRK4b SBkUCSK3+f4T+Wp9d2HV+vSIP7Ogvh5j4UUyQa1wdoeONWzX6pjZGQ0uQEHZ1f7B Gf/S+22tb0XBVW9hs/1+rO8l8Ui5R8vSYIXA2+xZCjJXE9VRSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMO86EaPFh2QXVTr2Knyw0WTVFGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2I5ZjM0OWUtODFhMi0z YjYyLWExNzQtMGUyNDk0NTQ3ODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBRqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXd0s9j3MakmBiw7LCg1gt5IKrTLC3ETZP02yqn1LWBm9qAKFzvbPdp 1Tn19n+4VkpsbmZ783gUWiMfjxb40xu99P9ZpfIERZ87N8q2r0tRFQzDge8a5UEW R2ZBUI8SpKVXWB2e/Fqi2DTZyJ9QeSeARe/32gn5JlLQO1OJoMUYYsZAWV72tcyW s9qcf2TGLPqSUlaMdpZDICCRA3hopMaNsKRxPFc192aU0VdZyCRf4aPG+2zBnJGn pNF5VGS1dzV2nRlPZsn5uSkmYuyZIUyF9eFD/GKT+if8RNsWm4X7vptYpz8L4mK9 T7rfINDutNgOryZaLvLZAm6qbU9qJHw= -----END CERTIFICATE-----Generated at Sun Oct 26 10:07:44 2025 by rpki-client