$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29bf653b-e4f7-392d-b105-2ac60f5c4331.roa File: 29bf653b-e4f7-392d-b105-2ac60f5c4331.roa (raw, json) Hash identifier: W94bjZ36+DeDzM58qRJxfWpPKF8Tl7Vd/LCRMQYMPeM= Subject key identifier: 39:65:20:1D:AA:C9:24:4C:19:DF:18:C3:19:C2:5A:9A:F4:34:C2:46 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7EB13D3A610D215F47F00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29bf653b-e4f7-392d-b105-2ac60f5c4331.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 21788 IP address blocks: 184.104.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:eb:13:d3:a6:10:d2:15:f4:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=0ce2b21b-31fc-4dad-a562-ae9714ea52b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:20:ae:1a:41:20:5d:2c:4f:c2:74:67:91:8e: c2:ce:0d:0a:86:4d:88:5e:38:fc:aa:92:59:a2:e3: e7:82:8f:bf:c0:f9:af:db:07:c3:85:7d:0d:66:98: 7f:ae:49:61:6a:2a:3a:c7:24:99:58:f8:91:10:c5: d9:0c:2d:90:08:5e:72:f9:be:e0:5d:e7:df:5d:3e: 0a:0e:0a:d0:99:e2:41:cc:09:75:39:63:15:42:0a: 2b:04:ce:70:5f:b3:8f:61:60:6a:b1:ff:6f:96:ff: 26:7c:97:91:02:ce:8e:69:fe:b6:30:ec:ef:78:11: 34:ff:c7:ca:14:67:27:50:d6:71:d6:03:cf:e9:cf: 79:07:20:35:d8:4e:7b:1f:f3:b9:78:26:03:1a:61: 11:ab:b2:d4:44:b3:1f:5b:8b:ad:22:4c:e1:89:af: 1d:0f:0a:fd:f7:b8:4f:35:bb:7b:c9:04:10:44:ad: 56:4f:b0:d9:a0:ca:ee:51:12:8c:99:6d:c4:a8:0e: 30:3e:57:4b:2d:b2:0f:d6:26:44:67:2e:3e:27:e2: 20:01:09:a3:69:a2:9c:48:76:f0:15:45:b6:87:f2: d4:4b:72:bd:0c:4a:bc:2f:22:0b:92:e2:ec:eb:35: 89:4f:a8:55:39:ba:09:6e:10:b6:a5:b0:fc:e0:82: 1c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:65:20:1D:AA:C9:24:4C:19:DF:18:C3:19:C2:5A:9A:F4:34:C2:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29bf653b-e4f7-392d-b105-2ac60f5c4331.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 184.104.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d4:96:cd:2e:b8:2d:1b:1d:54:f3:4c:a3:52:e8:d4:c3:46: 3e:89:10:f4:e2:0b:71:8e:0f:18:8a:89:84:50:db:9e:0f:f4: 6d:30:2d:42:44:34:4d:b7:77:ba:a5:47:2c:20:19:b4:a6:77: 70:b0:dc:09:67:b2:30:43:fe:7d:c2:0c:3e:85:6b:49:a3:50: 50:d4:26:65:c8:c0:ee:be:12:9c:bb:17:32:74:29:8c:e6:9b: c8:4a:b8:8f:63:9b:ac:80:65:36:e5:de:b1:98:91:b5:88:20: 99:39:dd:71:82:2b:d9:9f:26:8d:75:b6:56:e2:55:4f:f8:6f: f5:cc:f3:51:df:0a:ab:b1:51:84:1c:03:b7:f6:2b:31:70:77: b3:9a:26:3d:ba:d2:4d:cf:e5:14:11:e7:62:c8:00:02:f7:af: 20:2e:30:22:f9:31:1d:44:21:21:f2:77:ba:f2:91:56:8e:9f: 1c:39:ea:b4:b6:00:d2:0d:19:95:9e:a8:31:df:e1:41:e5:b3: 0b:50:4f:bf:52:aa:cf:83:9b:21:52:2d:db:8d:45:70:ed:21: 07:94:3b:ed:d8:a7:79:00:16:5f:08:39:fa:d5:29:e4:5c:f6: 0d:e7:c1:f5:31:3e:2c:ea:df:8d:df:33:4a:a8:36:79:58:d2: 01:2b:cc:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ1+sT06YQ0hX0fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MGNlMmIyMWItMzFmYy00ZGFkLWE1NjItYWU5NzE0ZWE1MmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SCuGkEgXSxPwnRnkY7Czg0Khk2IXjj8qpJZ ouPngo+/wPmv2wfDhX0NZph/rklhaio6xySZWPiREMXZDC2QCF5y+b7gXeffXT4K DgrQmeJBzAl1OWMVQgorBM5wX7OPYWBqsf9vlv8mfJeRAs6Oaf62MOzveBE0/8fK FGcnUNZx1gPP6c95ByA12E57H/O5eCYDGmERq7LURLMfW4utIkzhia8dDwr997hP Nbt7yQQQRK1WT7DZoMruURKMmW3EqA4wPldLLbIP1iZEZy4+J+IgAQmjaaKcSHbw FUW2h/LUS3K9DEq8LyILkuLs6zWJT6hVOboJbhC2pbD84IIcvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDllIB2qySRMGd8YwxnCWpr0NMJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjliZjY1M2ItZTRmNy0z OTJkLWIxMDUtMmFjNjBmNWM0MzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuGjtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXUls0uuC0bHVTzTKNS6NTDRj6JEPTiC3GODxiKiYRQ254P9G0wLUJE NE23d7qlRywgGbSmd3Cw3AlnsjBD/n3CDD6Fa0mjUFDUJmXIwO6+Epy7FzJ0KYzm m8hKuI9jm6yAZTbl3rGYkbWIIJk53XGCK9mfJo11tlbiVU/4b/XM81HfCquxUYQc A7f2KzFwd7OaJj260k3P5RQR52LIAAL3ryAuMCL5MR1EISHyd7rykVaOnxw56rS2 ANINGZWeqDHf4UHlswtQT79Sqs+DmyFSLduNRXDtIQeUO+3Yp3kAFl8IOfrVKeRc 9g3nwfUxPizq343fM0qoNnlY0gErzFo= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:18 2025 by rpki-client