$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3eb4639e-680e-3fbb-b287-6f893225dd39.roa File: 3eb4639e-680e-3fbb-b287-6f893225dd39.roa (raw, json) Hash identifier: zl+9knk9b66MC5LNs+b0I0Ktg6sCrxO8MXE8sPB6j/E= Subject key identifier: FC:CE:6F:4F:FD:11:F1:AC:14:ED:5A:6A:E3:7F:11:F3:CE:FD:D3:D9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD2ED2F6110D6156C51600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3eb4639e-680e-3fbb-b287-6f893225dd39.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 184.21.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:2e:d2:f6:11:0d:61:56:c5:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=bd2d6d69-b7fe-4495-b97d-2eb03c3d15e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f8:d5:5e:b5:eb:3e:88:04:4d:2d:ac:92:40: 2c:c9:b9:72:c5:88:45:6c:bc:13:3d:06:5d:81:03: 94:9e:12:7f:e1:34:0a:d3:4f:17:b1:53:62:31:fa: f3:32:74:57:0c:84:f0:40:a7:75:52:7b:4e:3d:70: 58:39:19:f7:a9:95:5a:63:c3:1b:a7:dd:dc:e6:03: 73:0f:1a:43:42:19:69:9c:11:e5:82:1d:09:08:0d: 36:97:d8:1e:a4:5c:f5:4e:ab:b2:7f:f4:50:f7:e3: 68:1b:4b:f5:e2:73:e0:47:6d:a6:cb:63:f0:1d:57: 75:e8:ff:09:03:f5:ed:5b:5f:43:39:5e:ca:60:0d: 3b:d9:12:e5:0c:57:d6:07:d4:d6:71:6f:77:3c:53: 11:1a:9d:ac:23:a3:13:4d:c9:c6:ec:1b:7c:6e:fd: 6b:a2:fd:f2:19:24:5c:57:ff:99:f3:c5:8b:79:7e: 2f:12:36:46:33:b8:31:16:b1:0f:06:f6:df:45:a1: fb:d2:b8:bd:df:ff:55:91:03:96:50:25:b1:6d:65: 70:20:be:3e:c0:31:11:fa:45:03:42:a1:80:95:c9: de:80:70:44:f3:92:60:72:df:52:93:55:92:60:30: d1:02:92:18:e7:22:77:59:1d:62:8a:5e:c3:47:cf: 60:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CE:6F:4F:FD:11:F1:AC:14:ED:5A:6A:E3:7F:11:F3:CE:FD:D3:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3eb4639e-680e-3fbb-b287-6f893225dd39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:06:97:30:68:87:34:9b:c6:d6:7c:4e:3d:ce:47:e7:c7:9f: d7:de:da:8e:22:a1:52:6a:6d:bf:45:0a:09:3e:1f:81:82:5a: 8a:e5:b7:d3:5f:94:e4:16:52:ba:63:b5:68:cd:00:ff:46:a9: 57:de:3a:f6:4b:7d:65:5e:97:b1:af:a5:f8:eb:32:c2:ea:fa: b8:22:28:ad:6f:8d:51:41:6f:c2:99:96:f9:0c:44:07:5e:8e: a5:50:9e:c3:dc:05:20:fb:d9:5d:57:d9:55:de:b6:78:e4:4b: 15:59:31:18:e3:99:ea:73:4f:bf:22:c8:c8:e9:ac:86:19:a3: c5:a5:07:45:be:ea:2a:71:f5:a2:52:48:33:62:3f:01:ed:f5: 16:b6:17:62:a1:b8:c3:07:e3:19:b8:98:f2:30:b1:2c:92:82: 16:cb:ec:df:3f:c2:a6:fe:9f:61:83:40:d0:b3:5c:eb:4f:7c: 2c:ac:84:fa:23:b4:e0:c9:d5:58:de:79:d2:22:9d:fc:f5:f9: 21:f2:bc:c0:eb:d4:6a:fa:c8:09:bc:1b:9e:af:29:cb:1f:f9: d4:9c:d0:a2:46:16:27:fc:6a:53:54:2f:28:8c:13:9d:9d:0c: 7c:c7:14:2b:49:01:33:a0:63:a1:30:ae:4e:72:fb:b5:88:f5: 20:b3:6d:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzS7S9hENYVbFFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YmQyZDZkNjktYjdmZS00NDk1LWI5N2QtMmViMDNjM2QxNWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/jVXrXrPogETS2skkAsyblyxYhFbLwTPQZd gQOUnhJ/4TQK008XsVNiMfrzMnRXDITwQKd1UntOPXBYORn3qZVaY8Mbp93c5gNz DxpDQhlpnBHlgh0JCA02l9gepFz1Tquyf/RQ9+NoG0v14nPgR22my2PwHVd16P8J A/XtW19DOV7KYA072RLlDFfWB9TWcW93PFMRGp2sI6MTTcnG7Bt8bv1rov3yGSRc V/+Z88WLeX4vEjZGM7gxFrEPBvbfRaH70ri93/9VkQOWUCWxbWVwIL4+wDER+kUD QqGAlcnegHBE85Jgct9Sk1WSYDDRApIY5yJ3WR1iil7DR89ggQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzOb0/9EfGsFO1aauN/EfPO/dPZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2ViNDYzOWUtNjgwZS0z ZmJiLWIyODctNmY4OTMyMjVkZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMYGlzBohzSbxtZ8Tj3OR+fHn9fe2o4ioVJqbb9FCgk+H4GCWorlt9Nf lOQWUrpjtWjNAP9GqVfeOvZLfWVel7GvpfjrMsLq+rgiKK1vjVFBb8KZlvkMRAde jqVQnsPcBSD72V1X2VXetnjkSxVZMRjjmepzT78iyMjprIYZo8WlB0W+6ipx9aJS SDNiPwHt9Ra2F2KhuMMH4xm4mPIwsSySghbL7N8/wqb+n2GDQNCzXOtPfCyshPoj tODJ1VjeedIinfz1+SHyvMDr1Gr6yAm8G56vKcsf+dSc0KJGFif8alNULyiME52d DHzHFCtJATOgY6Ewrk5y+7WI9SCzbRs= -----END CERTIFICATE-----Generated at Sun Oct 19 23:56:25 2025 by rpki-client