$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99e29ee2-6389-3e87-9899-c49e8997035e.roa File: 99e29ee2-6389-3e87-9899-c49e8997035e.roa (raw, json) Hash identifier: 9n+aGITLLgOMdPfYnUkPBSU3fPbDQJpL5cIdrlH43oA= Subject key identifier: 51:87:AE:E5:8E:A4:3F:1D:CD:23:09:15:4A:14:C1:77:2F:6D:74:8C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD2B1ECCD9854DF86D0C40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99e29ee2-6389-3e87-9899-c49e8997035e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 184.20.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:2b:1e:cc:d9:85:4d:f8:6d:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a6bb15ae-a724-45d9-a588-af0ec0451192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1d:2b:8e:e1:32:ac:2b:8b:f7:18:cd:cc:d3: 3b:39:9f:f7:25:18:e0:e0:86:ce:fc:5a:80:8a:49: 1e:38:e1:e1:27:98:2b:4d:81:85:b8:4f:94:90:08: be:3b:84:31:8c:f6:7a:7c:72:3c:78:e5:f2:3a:80: 7e:1b:66:a2:c4:c4:f4:e4:8b:1b:6d:11:2f:1b:c7: 7f:80:35:ac:ef:da:3a:7a:73:a8:77:6a:60:9f:c2: ea:b6:b8:89:04:c9:81:1f:87:3c:47:38:fd:80:4b: 32:96:60:56:71:a4:86:cc:1f:ab:be:85:6e:e5:2f: 54:bf:11:2d:38:29:e3:8c:68:71:e2:bb:6a:81:3f: 0a:9d:a8:e6:7e:fc:82:d7:ba:6a:e2:f5:58:0a:1a: ae:1b:61:d9:47:a3:ed:4f:03:20:59:03:a9:a5:5c: 6f:08:fe:65:d9:96:fa:e1:84:14:c1:d9:99:81:0b: eb:d1:be:8e:8d:db:59:8a:6f:de:f1:89:b0:cb:0d: d0:ab:f7:94:ee:56:24:f0:17:b2:4d:09:50:56:1c: 11:56:d0:f1:71:2a:95:3b:74:61:09:95:45:80:f6: a4:49:d6:e5:b4:4d:c5:70:f6:4b:d2:e5:d7:27:48: 0e:99:e8:7f:d6:e8:6f:d0:65:21:75:87:7e:4d:b2: d2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:87:AE:E5:8E:A4:3F:1D:CD:23:09:15:4A:14:C1:77:2F:6D:74:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99e29ee2-6389-3e87-9899-c49e8997035e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:12:6b:57:fa:31:2c:fe:c5:60:8e:71:18:46:4e:7e:a2:00: 09:c6:14:bf:02:04:21:24:b0:74:9c:21:83:09:ca:42:aa:35: 6e:fd:d1:15:79:33:3a:d0:2c:29:7d:73:52:8e:7d:3e:24:1b: f7:dc:9d:9f:92:2a:a1:86:9f:fe:e2:53:ff:75:6e:26:39:5e: b9:55:67:ff:b5:2f:9e:6e:ad:d9:24:83:8d:dd:0e:58:b8:f1: 34:54:e5:18:c8:af:ef:51:a0:8f:c4:e3:af:2a:ab:07:31:20: eb:d5:87:8c:e6:ab:db:ce:31:f2:9f:ee:1e:da:d6:b8:cd:64: 99:c6:3b:fb:0c:49:33:20:a9:f5:4d:04:20:33:36:b9:b9:f8: 5b:dd:a3:bc:e6:07:9f:8a:ce:e4:51:97:59:79:19:71:52:8c: 48:42:1d:ce:e0:53:52:f5:3a:83:13:2c:25:04:2a:f1:f1:69: eb:37:19:9d:9f:36:a1:dc:b3:ab:c3:16:4f:17:11:e0:fa:b0: c3:56:08:d8:33:d5:e3:af:6f:e4:91:31:d2:ea:c9:36:dc:a4: 7d:3d:bd:c0:de:e4:24:c5:d6:b0:92:09:eb:02:eb:8b:63:a9: 68:49:08:c0:82:b9:be:cf:9d:d3:e2:28:cd:0a:ff:55:e1:6f: 85:aa:5f:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSsezNmFTfhtDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTZiYjE1YWUtYTcyNC00NWQ5LWE1ODgtYWYwZWMwNDUxMTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx0rjuEyrCuL9xjNzNM7OZ/3JRjg4IbO/FqA ikkeOOHhJ5grTYGFuE+UkAi+O4QxjPZ6fHI8eOXyOoB+G2aixMT05IsbbREvG8d/ gDWs79o6enOod2pgn8LqtriJBMmBH4c8Rzj9gEsylmBWcaSGzB+rvoVu5S9UvxEt OCnjjGhx4rtqgT8KnajmfvyC17pq4vVYChquG2HZR6PtTwMgWQOppVxvCP5l2Zb6 4YQUwdmZgQvr0b6OjdtZim/e8Ymwyw3Qq/eU7lYk8BeyTQlQVhwRVtDxcSqVO3Rh CZVFgPakSdbltE3FcPZL0uXXJ0gOmeh/1uhv0GUhdYd+TbLSvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGHruWOpD8dzSMJFUoUwXcvbXSMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTllMjllZTItNjM4OS0z ZTg3LTk4OTktYzQ5ZTg5OTcwMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBR6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsSa1f6MSz+xWCOcRhGTn6iAAnGFL8CBCEksHScIYMJykKqNW790RV5 MzrQLCl9c1KOfT4kG/fcnZ+SKqGGn/7iU/91biY5XrlVZ/+1L55urdkkg43dDli4 8TRU5RjIr+9RoI/E468qqwcxIOvVh4zmq9vOMfKf7h7a1rjNZJnGO/sMSTMgqfVN BCAzNrm5+Fvdo7zmB5+KzuRRl1l5GXFSjEhCHc7gU1L1OoMTLCUEKvHxaes3GZ2f NqHcs6vDFk8XEeD6sMNWCNgz1eOvb+SRMdLqyTbcpH09vcDe5CTF1rCSCesC64tj qWhJCMCCub7PndPiKM0K/1Xhb4WqX0I= -----END CERTIFICATE-----Generated at Mon Oct 20 02:23:57 2025 by rpki-client