$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/339361cf-cb70-3d8c-862d-4e28c892e46a.roa File: 339361cf-cb70-3d8c-862d-4e28c892e46a.roa (raw, json) Hash identifier: rU9c6jZ+UHqrit3WLptKMfUsgg6ZE+o24pXjtEak1kA= Subject key identifier: 8E:4F:83:86:C7:08:BD:53:CD:1C:5C:98:EE:CB:23:94:2C:B3:BB:F7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDEB1671FADCF7054F8780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/339361cf-cb70-3d8c-862d-4e28c892e46a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 184.20.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:eb:16:71:fa:dc:f7:05:4f:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=e95ceda9-7ae3-48d8-83f9-10220848bb52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:20:c9:e5:61:ea:48:0f:e6:88:ea:76:9e:af: 8e:3c:fa:98:0f:bd:c5:78:2c:9c:f3:3b:20:34:ed: c6:f9:54:89:2a:58:08:63:6f:1c:c6:84:b8:1b:f4: 5f:20:ae:ea:8e:6c:bb:85:07:f2:38:61:3c:17:ec: eb:97:a8:1c:f6:ef:bd:68:2c:f2:5d:1c:49:cb:59: 61:2d:c7:ae:c1:a1:4b:1f:21:1d:41:92:23:70:08: ac:65:53:8a:3f:89:c5:ec:56:60:4c:63:7f:59:29: cf:6b:68:a9:94:df:10:8f:05:17:38:97:07:c3:96: e4:1e:64:c4:e7:9b:b1:1b:62:82:92:ad:71:11:21: af:fc:44:56:b6:21:d0:78:78:29:e5:5d:b3:39:48: f3:cc:88:9a:f9:9c:76:21:8e:fb:cf:d2:2c:f0:5c: ac:57:be:26:93:a8:e0:17:dc:21:99:fd:bf:20:6a: 5d:00:33:93:49:42:f7:5d:8f:02:35:0b:78:c7:63: 96:f8:9d:a4:1e:41:47:7e:5a:a3:92:82:1a:2f:2a: a2:f3:0a:01:ec:b2:74:fb:6a:b8:73:98:c0:0e:2d: 40:50:9e:59:6f:21:3c:28:c0:3f:71:95:d1:f5:4d: 30:c8:8b:b4:20:7c:43:df:e5:40:85:d7:84:95:a7: e6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4F:83:86:C7:08:BD:53:CD:1C:5C:98:EE:CB:23:94:2C:B3:BB:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/339361cf-cb70-3d8c-862d-4e28c892e46a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:3f:f1:92:da:17:c7:92:98:88:54:49:9c:e7:2f:a3:61:9b: 23:f8:cd:6e:88:40:9e:09:49:8f:74:5d:1e:fa:5e:37:34:ef: f6:1b:cc:38:7f:d3:1d:d4:2c:39:5f:88:b9:9c:02:98:92:da: 4b:e0:0b:60:cb:6a:7c:c7:6c:03:0d:ad:84:8d:e8:d1:39:dc: f6:d9:65:bd:a9:eb:1a:c6:34:18:4a:53:09:92:88:f6:17:03: e0:36:98:e9:bd:be:36:41:e0:32:45:f8:6b:ae:bf:97:32:74: 87:8d:04:b5:ad:b3:f5:ca:f9:04:97:93:ba:79:cb:42:ad:d6: 4a:24:93:cd:8e:00:f1:65:7c:37:e6:b8:26:ad:dd:a6:4c:52: 34:34:6f:59:a5:73:5c:ca:ec:24:cc:99:af:1e:13:86:54:71: 5b:89:96:1e:06:32:b0:72:42:ad:ba:31:12:e2:29:a5:7b:e0: b3:a4:53:39:a4:c0:43:e7:fd:ec:01:7d:2e:60:82:8c:20:54: 73:f8:ac:85:c6:48:6d:5a:c6:a8:63:a3:75:b7:59:14:4e:00: dd:4d:7c:ff:04:c0:55:4b:81:5c:ab:6a:6d:a7:1c:4d:6d:40: 73:f4:22:da:b6:43:5a:cb:3f:16:a7:94:33:62:98:a7:b4:6b: 2f:8d:5c:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzesWcfrc9wVPh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTk1Y2VkYTktN2FlMy00OGQ4LTgzZjktMTAyMjA4NDhiYjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyDJ5WHqSA/miOp2nq+OPPqYD73FeCyc8zsg NO3G+VSJKlgIY28cxoS4G/RfIK7qjmy7hQfyOGE8F+zrl6gc9u+9aCzyXRxJy1lh LceuwaFLHyEdQZIjcAisZVOKP4nF7FZgTGN/WSnPa2iplN8QjwUXOJcHw5bkHmTE 55uxG2KCkq1xESGv/ERWtiHQeHgp5V2zOUjzzIia+Zx2IY77z9Is8FysV74mk6jg F9whmf2/IGpdADOTSUL3XY8CNQt4x2OW+J2kHkFHflqjkoIaLyqi8woB7LJ0+2q4 c5jADi1AUJ5ZbyE8KMA/cZXR9U0wyIu0IHxD3+VAhdeElafmGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5Pg4bHCL1TzRxcmO7LI5Qss7v3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzM5MzYxY2YtY2I3MC0z ZDhjLTg2MmQtNGUyOGM4OTJlNDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMU/8ZLaF8eSmIhUSZznL6NhmyP4zW6IQJ4JSY90XR76Xjc07/YbzDh/ 0x3ULDlfiLmcApiS2kvgC2DLanzHbAMNrYSN6NE53PbZZb2p6xrGNBhKUwmSiPYX A+A2mOm9vjZB4DJF+Guuv5cydIeNBLWts/XK+QSXk7p5y0Kt1kokk82OAPFlfDfm uCat3aZMUjQ0b1mlc1zK7CTMma8eE4ZUcVuJlh4GMrByQq26MRLiKaV74LOkUzmk wEPn/ewBfS5ggowgVHP4rIXGSG1axqhjo3W3WRROAN1NfP8EwFVLgVyram2nHE1t QHP0Itq2Q1rLPxanlDNimKe0ay+NXGg= -----END CERTIFICATE-----Generated at Sun Oct 19 23:40:48 2025 by rpki-client