$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88c24c0a-a8ad-30a9-9adf-4d7bc283d760.roa File: 88c24c0a-a8ad-30a9-9adf-4d7bc283d760.roa (raw, json) Hash identifier: hku+nLYQrURfH0zuIvIFYpFmTs9gnYRvIWAls7sLW84= Subject key identifier: C8:11:09:57:E9:24:26:40:A2:11:E6:47:74:CE:60:F3:9A:CF:09:30 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDE5C64A41097131AB5250 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88c24c0a-a8ad-30a9-9adf-4d7bc283d760.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 184.20.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:e5:c6:4a:41:09:71:31:ab:52:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=1684a782-9072-4c59-9cee-9e0c517a86a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ab:f7:08:71:ce:33:04:2f:30:05:63:11:0c: 46:50:bf:32:5b:71:46:4e:a6:be:3f:12:bc:60:28: 5c:9e:da:d0:0f:6a:55:95:ed:cd:e7:8d:0f:e9:89: c4:ad:b0:34:2d:c4:24:00:3d:cf:1c:82:62:5a:f5: 7f:c5:34:0b:29:8a:63:1e:18:8f:4d:e8:d9:cc:61: d5:4c:a0:7d:da:bc:9d:03:2c:84:95:ce:17:d9:48: fa:2c:73:59:b4:fa:19:eb:81:0a:23:b1:9f:a4:b9: ae:4c:10:82:24:3f:02:76:b6:14:3f:06:8c:df:fe: 85:a8:77:d1:81:7b:7c:19:ae:58:57:1d:f5:5e:af: 74:b5:d6:f2:fe:a9:c4:61:e6:30:e3:3a:56:f7:d7: 7f:40:89:e4:b5:bb:55:a3:cf:6d:29:9c:e9:6b:04: 28:1c:93:df:fe:f2:4d:c3:95:a7:89:80:4c:d7:82: 43:7f:3d:b4:ed:9d:29:ef:59:de:0d:45:2f:10:ce: de:c9:b2:c9:d6:10:64:d1:21:00:29:36:9c:d4:08: 59:f1:1c:d8:79:80:45:b6:98:fc:34:8e:6b:a8:3e: 43:a3:88:34:1e:79:f9:24:d9:3f:53:46:60:6a:09: 8d:bd:cf:9f:4e:83:97:94:35:91:be:a9:28:24:aa: ca:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:11:09:57:E9:24:26:40:A2:11:E6:47:74:CE:60:F3:9A:CF:09:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88c24c0a-a8ad-30a9-9adf-4d7bc283d760.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a8:10:9f:5b:56:4d:59:30:ee:50:65:a0:4f:a6:c4:03:1b: a2:57:a5:45:e4:50:db:9e:0e:1d:0f:dc:9a:c2:3b:43:16:fd: 66:6d:42:3d:24:b5:e8:4a:b3:78:5b:81:2f:c3:d4:5f:45:62: 7e:0a:2f:ee:59:87:f8:fc:c6:a4:d0:a5:df:2f:5d:f6:8d:e4: a6:6d:3c:f8:6f:80:2d:91:f5:20:a5:29:b0:ca:58:12:fe:e4: 29:46:53:bf:b1:55:03:07:db:45:a6:80:91:46:cb:40:97:1e: 98:6a:e4:89:6c:c9:34:d4:4c:3a:36:5f:a9:b5:cc:2c:5a:a6: 3a:a4:8e:fa:63:0a:5a:8a:c8:ab:c0:69:4e:fb:c4:c6:2d:44: 58:cb:1f:a4:21:b3:60:b8:4f:90:21:06:85:36:68:a1:83:53: da:cb:25:ab:55:4c:f7:ee:d2:b4:df:91:3b:cb:1c:75:20:79: 43:b1:1b:87:b5:c6:bf:23:83:4a:39:50:dd:bf:43:0f:55:68: bb:ca:9e:da:1e:2d:b0:dd:25:05:18:5c:21:b6:f6:cd:17:bf: 09:96:8b:d3:21:72:c5:a4:7f:57:86:d6:ad:80:95:19:3c:1f: b0:e3:e4:b7:ed:23:36:6e:a9:de:d2:43:bc:e1:ab:aa:26:a6: 75:85:93:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzeXGSkEJcTGrUlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MTY4NGE3ODItOTA3Mi00YzU5LTljZWUtOWUwYzUxN2E4NmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqv3CHHOMwQvMAVjEQxGUL8yW3FGTqa+PxK8 YChcntrQD2pVle3N540P6YnErbA0LcQkAD3PHIJiWvV/xTQLKYpjHhiPTejZzGHV TKB92rydAyyElc4X2Uj6LHNZtPoZ64EKI7GfpLmuTBCCJD8CdrYUPwaM3/6FqHfR gXt8Ga5YVx31Xq90tdby/qnEYeYw4zpW99d/QInktbtVo89tKZzpawQoHJPf/vJN w5WniYBM14JDfz207Z0p71neDUUvEM7eybLJ1hBk0SEAKTac1AhZ8RzYeYBFtpj8 NI5rqD5Do4g0Hnn5JNk/U0ZgagmNvc+fToOXlDWRvqkoJKrK/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgRCVfpJCZAohHmR3TOYPOazwkwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODhjMjRjMGEtYThhZC0z MGE5LTlhZGYtNGQ3YmMyODNkNzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2oEJ9bVk1ZMO5QZaBPpsQDG6JXpUXkUNueDh0P3JrCO0MW/WZtQj0k tehKs3hbgS/D1F9FYn4KL+5Zh/j8xqTQpd8vXfaN5KZtPPhvgC2R9SClKbDKWBL+ 5ClGU7+xVQMH20WmgJFGy0CXHphq5IlsyTTUTDo2X6m1zCxapjqkjvpjClqKyKvA aU77xMYtRFjLH6Qhs2C4T5AhBoU2aKGDU9rLJatVTPfu0rTfkTvLHHUgeUOxG4e1 xr8jg0o5UN2/Qw9VaLvKntoeLbDdJQUYXCG29s0XvwmWi9MhcsWkf1eG1q2AlRk8 H7Dj5LftIzZuqd7SQ7zhq6ompnWFk/k= -----END CERTIFICATE-----Generated at Mon Oct 20 00:06:11 2025 by rpki-client