$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e098f45-cfef-3979-8466-a5b85563d21c.roa File: 9e098f45-cfef-3979-8466-a5b85563d21c.roa (raw, json) Hash identifier: 3+uM/zAlDrenn7eH64JFuvPWmGucc7ieOWaQqpY2mNI= Subject key identifier: 32:C4:11:CD:31:57:C6:B1:1C:7C:55:F7:72:BE:7D:CA:78:E3:C3:8B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD2A6C6F833161300DC178 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e098f45-cfef-3979-8466-a5b85563d21c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 184.20.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:2a:6c:6f:83:31:61:30:0d:c1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=f1fcab04-6ddb-41e3-a20f-7c310a99a994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:77:16:d6:37:9f:19:53:be:b3:70:89:8b:97: 65:0f:90:f5:9f:d8:7c:9c:00:cf:09:f3:7d:26:f3: 9a:f8:48:86:c2:35:04:8c:1a:a5:2d:4b:cc:8d:54: 4b:d5:df:ce:23:97:71:1c:ef:11:32:a4:26:e7:fb: 25:d9:60:d9:c8:0d:45:91:c9:a5:d2:5a:1f:76:68: 1d:05:25:4a:a8:0f:da:35:9b:42:57:c1:09:bd:1e: b7:f5:e4:50:78:8a:bf:5f:d7:61:ab:ef:5a:52:13: 96:84:93:db:ae:9d:49:19:82:74:a2:3a:16:f3:ed: eb:39:2c:0a:53:f5:5d:27:3a:a1:f1:50:4d:8c:23: 60:02:d5:1f:aa:3f:a9:9f:3d:fa:69:75:ab:27:b3: f8:6c:3c:b3:b5:5a:c4:ef:47:26:d5:ad:ca:c9:54: bd:9b:c5:f2:57:53:eb:6a:1d:20:38:81:8c:90:7c: 82:70:5b:1f:9f:7d:11:b5:4b:1a:5f:55:cb:5d:de: 56:53:40:26:9a:bc:f7:0f:92:97:a8:73:4c:f5:66: 58:33:97:4a:26:4e:0c:6a:ee:af:aa:4b:32:60:78: 4d:8f:b4:82:e5:e9:59:86:51:06:5c:bb:73:7d:ec: 7d:49:44:13:55:0a:bd:7e:4e:76:d1:4f:f0:a7:18: 4e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C4:11:CD:31:57:C6:B1:1C:7C:55:F7:72:BE:7D:CA:78:E3:C3:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e098f45-cfef-3979-8466-a5b85563d21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:33:3e:82:c8:8b:17:20:ed:c8:d9:c1:cd:8c:62:09:cd:2d: b3:1e:52:d6:73:28:e3:6e:bf:98:9e:2b:50:9c:2f:0f:97:5c: f7:3d:ae:1e:a7:62:1f:8f:8b:c6:2e:bf:6f:f1:23:b5:53:09: ca:84:b1:24:1f:0e:8b:24:90:a9:bb:c2:8f:f9:2d:0d:eb:c7: 03:cd:c5:af:c7:59:d6:32:9e:00:0d:7c:0b:44:b2:61:69:e4: 90:8f:05:b4:f8:d9:a9:b0:df:5d:58:ff:cf:7b:cd:b2:1a:64: 36:ef:61:e2:77:df:70:97:4e:97:c7:5c:47:6f:43:02:97:f2: cd:0a:80:6d:52:c6:f9:cd:a6:2a:df:40:dd:52:87:d0:7e:db: ea:9b:8e:23:d3:74:0f:2c:06:0e:89:e8:60:6b:a0:a3:12:88: ea:cf:8f:2f:f7:22:2d:3b:74:5d:c4:bf:00:0a:45:95:d6:44: dc:51:03:c7:a9:71:fe:ac:f0:92:e4:c7:4a:a1:7d:12:74:44: a9:3a:a1:51:e1:16:3b:45:a5:b2:56:e8:45:bb:00:f4:7f:ab: 87:51:40:73:f2:b5:40:06:13:64:fd:1f:57:d3:88:69:7f:99: 09:a4:aa:7c:a8:36:9d:27:48:65:2a:72:bc:60:6c:8d:c2:cb: 0a:f2:27:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSpsb4MxYTANwXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjFmY2FiMDQtNmRkYi00MWUzLWEyMGYtN2MzMTBhOTlhOTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXcW1jefGVO+s3CJi5dlD5D1n9h8nADPCfN9 JvOa+EiGwjUEjBqlLUvMjVRL1d/OI5dxHO8RMqQm5/sl2WDZyA1Fkcml0lofdmgd BSVKqA/aNZtCV8EJvR639eRQeIq/X9dhq+9aUhOWhJPbrp1JGYJ0ojoW8+3rOSwK U/VdJzqh8VBNjCNgAtUfqj+pnz36aXWrJ7P4bDyztVrE70cm1a3KyVS9m8XyV1Pr ah0gOIGMkHyCcFsfn30RtUsaX1XLXd5WU0Ammrz3D5KXqHNM9WZYM5dKJk4Mau6v qksyYHhNj7SC5elZhlEGXLtzfex9SUQTVQq9fk520U/wpxhOwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLEEc0xV8axHHxV93K+fcp448OLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWUwOThmNDUtY2ZlZi0z OTc5LTg0NjYtYTViODU1NjNkMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKozPoLIixcg7cjZwc2MYgnNLbMeUtZzKONuv5ieK1CcLw+XXPc9rh6n Yh+Pi8Yuv2/xI7VTCcqEsSQfDoskkKm7wo/5LQ3rxwPNxa/HWdYyngANfAtEsmFp 5JCPBbT42amw311Y/897zbIaZDbvYeJ333CXTpfHXEdvQwKX8s0KgG1SxvnNpirf QN1Sh9B+2+qbjiPTdA8sBg6J6GBroKMSiOrPjy/3Ii07dF3EvwAKRZXWRNxRA8ep cf6s8JLkx0qhfRJ0RKk6oVHhFjtFpbJW6EW7APR/q4dRQHPytUAGE2T9H1fTiGl/ mQmkqnyoNp0nSGUqcrxgbI3CywryJwg= -----END CERTIFICATE-----Generated at Mon Oct 20 17:36:40 2025 by rpki-client