$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e6812ff-9a74-3465-b730-3f6336424604.roa File: 8e6812ff-9a74-3465-b730-3f6336424604.roa (raw, json) Hash identifier: RwcclezA1A4YhDspF6SEsvaFfGgXifZivGBC8aV8C1w= Subject key identifier: A8:55:2B:5A:A2:A8:D4:05:41:02:1F:8F:4E:CC:81:9C:57:8A:F9:63 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD33A88CB0D4E0D7A48520 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e6812ff-9a74-3465-b730-3f6336424604.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 184.21.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:33:a8:8c:b0:d4:e0:d7:a4:85:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=b921e424-5b37-44a2-ab6d-f44251a44836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:29:47:e8:6e:c5:27:37:f3:c8:f8:f6:ef: ab:80:f1:31:5e:4f:ac:9d:7b:db:36:e5:f4:29:79: e4:be:b3:27:56:52:03:7e:da:66:81:bc:4e:d2:df: 75:65:5b:e9:e8:f8:ee:7a:3d:36:0c:d0:28:9d:46: 8d:d0:cd:b4:90:88:54:58:5c:89:fa:75:d4:c0:ab: 2c:67:c8:fb:3e:7b:4f:04:7a:87:45:20:5c:3d:dc: 87:96:ec:8a:87:58:be:78:db:a5:c0:f6:6a:85:e3: 14:a3:9c:00:42:69:47:87:04:c6:e1:87:a1:2a:77: 67:2c:63:2d:ea:57:7a:c3:bd:4e:45:9c:16:1b:76: fa:ce:e7:ce:2b:71:f7:ea:db:53:bb:a4:74:5a:76: 28:20:7c:66:df:8d:a1:da:64:65:60:58:6b:af:6f: 6f:74:5d:e1:ef:f9:3b:23:cb:28:5f:e2:1e:7b:64: 88:53:e6:3b:84:a0:56:f3:c8:f4:f7:9a:20:d8:ea: ba:a8:15:46:12:4c:7a:49:62:6a:a3:b8:b7:0f:22: 55:9d:fb:11:01:12:08:eb:59:1b:ec:49:72:63:7a: 68:44:e0:fc:be:4a:a8:f4:1b:93:4e:5b:db:8a:87: 12:f7:50:0f:13:ff:81:c1:5b:b5:13:0a:1d:70:8e: 1b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:55:2B:5A:A2:A8:D4:05:41:02:1F:8F:4E:CC:81:9C:57:8A:F9:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e6812ff-9a74-3465-b730-3f6336424604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:0f:43:2d:cc:ea:6c:ef:18:15:e3:d3:91:71:26:e3:af:b4: b7:7f:8a:0e:a6:48:7d:fa:60:76:8f:80:36:ba:9a:25:56:be: 0b:9e:a6:92:1e:15:e7:47:4e:37:65:58:e6:5d:c8:12:c7:73: 8e:25:25:0e:a1:7b:b9:92:77:66:a6:a4:eb:cc:a9:db:dc:41: 88:6b:57:97:06:dd:91:8e:4b:3e:74:51:c6:55:a4:26:0b:30: d0:0b:02:9a:a9:95:83:0b:92:af:f0:c4:00:84:66:a9:9f:e4: 49:4b:2b:b0:d5:37:63:0f:ee:10:83:20:22:02:27:82:1c:9b: ee:de:67:e7:e0:54:f7:22:a3:b5:4c:51:de:f8:dd:cf:18:6e: 1e:2b:a5:17:54:80:24:51:eb:bc:95:0e:9a:c1:87:d6:2f:c9: 52:ca:29:d2:49:4c:12:19:22:62:46:f8:8c:9c:e5:d0:65:15: 7a:91:75:b4:f8:c2:00:7c:6b:dd:9b:7c:b7:eb:e9:99:d4:ce: 03:59:30:d9:5c:64:3c:ae:73:40:1c:c6:7d:90:15:41:f0:35: 10:96:87:a3:99:d9:c8:35:a2:13:00:02:52:3c:63:d5:dc:ec: b2:b3:bd:45:82:61:11:6e:fa:fa:5e:9f:dc:80:65:3a:68:d1: 8d:35:9e:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzTOojLDU4NekhSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YjkyMWU0MjQtNWIzNy00NGEyLWFiNmQtZjQ0MjUxYTQ0ODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVspR+huxSc388j49u+rgPExXk+snXvbNuX0 KXnkvrMnVlIDftpmgbxO0t91ZVvp6Pjuej02DNAonUaN0M20kIhUWFyJ+nXUwKss Z8j7PntPBHqHRSBcPdyHluyKh1i+eNulwPZqheMUo5wAQmlHhwTG4YehKndnLGMt 6ld6w71ORZwWG3b6zufOK3H36ttTu6R0WnYoIHxm342h2mRlYFhrr29vdF3h7/k7 I8soX+Iee2SIU+Y7hKBW88j095og2Oq6qBVGEkx6SWJqo7i3DyJVnfsRARII61kb 7ElyY3poROD8vkqo9BuTTlvbiocS91APE/+BwVu1EwodcI4bkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhVK1qiqNQFQQIfj07MgZxXivljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGU2ODEyZmYtOWE3NC0z NDY1LWI3MzAtM2Y2MzM2NDI0NjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUPQy3M6mzvGBXj05FxJuOvtLd/ig6mSH36YHaPgDa6miVWvgueppIe FedHTjdlWOZdyBLHc44lJQ6he7mSd2ampOvMqdvcQYhrV5cG3ZGOSz50UcZVpCYL MNALApqplYMLkq/wxACEZqmf5ElLK7DVN2MP7hCDICICJ4Icm+7eZ+fgVPcio7VM Ud743c8Ybh4rpRdUgCRR67yVDprBh9YvyVLKKdJJTBIZImJG+Iyc5dBlFXqRdbT4 wgB8a92bfLfr6ZnUzgNZMNlcZDyuc0Acxn2QFUHwNRCWh6OZ2cg1ohMAAlI8Y9Xc 7LKzvUWCYRFu+vpen9yAZTpo0Y01npg= -----END CERTIFICATE-----Generated at Sun Oct 19 23:59:31 2025 by rpki-client