$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a119b2f0-8096-30b4-be34-8a23098ed8d8.roa File: a119b2f0-8096-30b4-be34-8a23098ed8d8.roa (raw, json) Hash identifier: 6Nf/WbsAwprj6m/XopLk9ElNE6YMYJOv0nYibLkfzTY= Subject key identifier: 0A:71:1F:0E:83:94:7C:0D:9A:35:50:BA:71:8C:2F:03:35:90:44:82 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDF35E1405E3E7D9B41900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a119b2f0-8096-30b4-be34-8a23098ed8d8.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 184.21.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:f3:5e:14:05:e3:e7:d9:b4:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=d86a9fd5-b03c-4b5a-ab9f-4374a695443d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:85:69:50:a2:38:91:e4:c4:72:0a:11:29:c7: 2d:a7:d9:21:39:04:31:c5:8a:f8:92:e6:4d:d4:1b: 50:48:4e:82:c9:b7:92:7c:31:bf:00:98:16:8e:90: 15:18:bd:ea:a7:66:a3:b2:52:b0:e2:81:06:52:4b: 4d:66:10:8d:98:21:14:1d:4c:b5:bf:c4:ca:6f:77: bd:55:a2:5c:8b:85:03:a6:1c:4d:0a:a0:9e:05:9f: 46:a1:cc:7d:f0:f1:da:3e:47:df:eb:c5:a6:d2:81: 54:eb:06:26:83:63:43:5f:61:3a:3a:61:29:03:da: 91:6c:db:98:f0:61:bf:b5:9e:a1:22:2c:d3:ac:60: 6d:b0:1d:15:ed:e7:02:ba:91:cf:5a:e6:dc:90:7a: 4b:8d:c8:a9:2b:d9:fc:9f:88:c1:58:08:9a:c2:31: b8:59:e5:2e:5e:5d:83:8d:00:98:30:83:9d:fc:86: 1b:6e:49:42:b0:ec:76:51:f7:4b:90:57:f2:cd:26: b9:bb:d6:8f:b9:41:84:21:2f:8a:32:3a:0c:41:5b: 01:ab:af:59:ff:fd:eb:4b:9b:e1:fb:3b:00:43:d9: ba:1f:7b:6e:e3:5a:6b:56:82:f9:57:e8:60:37:bc: 6c:c3:cd:03:97:d1:62:d7:fb:36:82:61:ed:a7:e0: d0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:71:1F:0E:83:94:7C:0D:9A:35:50:BA:71:8C:2F:03:35:90:44:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a119b2f0-8096-30b4-be34-8a23098ed8d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:71:66:3a:db:62:00:00:48:6d:97:4d:9a:8a:92:d1:7b:32: 26:ba:40:f4:cc:3e:59:fa:52:cd:fe:00:77:a4:7f:74:e6:a9: b2:a1:b2:31:c3:91:fd:99:41:af:f7:70:a1:26:bf:9a:a6:2c: 81:18:49:c8:7c:8c:ab:09:a0:c6:e6:06:cb:81:a0:b3:30:65: 1e:c4:c6:94:93:8c:2e:c8:54:42:f3:30:90:8d:c1:68:c9:15: bc:e0:b1:6d:10:42:0d:51:58:e0:1a:61:4f:34:9f:eb:00:eb: cd:9e:8d:b1:93:63:0f:55:14:0f:62:ff:cf:bf:42:a9:94:b6: df:8a:de:58:1b:c9:5c:4d:ba:40:de:e1:65:c8:22:d9:0a:5e: 7b:34:b4:9e:ad:ce:8c:90:98:b4:3e:cd:72:bd:0d:a5:47:65: e9:b5:e9:8f:42:9a:23:af:5a:6c:03:1b:4b:ee:5e:69:3b:a7: 07:6f:96:dc:91:b9:b4:96:2c:30:8f:71:99:d1:c6:af:a0:61: fd:8c:38:3f:f5:39:e6:44:3d:8f:97:01:11:d8:b3:21:03:82: 4a:8a:57:f0:2c:d7:32:ee:84:ce:4d:12:76:59:a2:3c:51:5f: 11:84:c9:be:73:6d:28:5b:2c:28:8e:2f:86:c5:75:50:33:08: b3:01:e0:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzfNeFAXj59m0GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDg2YTlmZDUtYjAzYy00YjVhLWFiOWYtNDM3NGE2OTU0NDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoVpUKI4keTEcgoRKcctp9khOQQxxYr4kuZN 1BtQSE6CybeSfDG/AJgWjpAVGL3qp2ajslKw4oEGUktNZhCNmCEUHUy1v8TKb3e9 VaJci4UDphxNCqCeBZ9Gocx98PHaPkff68Wm0oFU6wYmg2NDX2E6OmEpA9qRbNuY 8GG/tZ6hIizTrGBtsB0V7ecCupHPWubckHpLjcipK9n8n4jBWAiawjG4WeUuXl2D jQCYMIOd/IYbbklCsOx2UfdLkFfyzSa5u9aPuUGEIS+KMjoMQVsBq69Z//3rS5vh +zsAQ9m6H3tu41prVoL5V+hgN7xsw80Dl9Fi1/s2gmHtp+DQLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApxHw6DlHwNmjVQunGMLwM1kESCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTExOWIyZjAtODA5Ni0z MGI0LWJlMzQtOGEyMzA5OGVkOGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBxZjrbYgAASG2XTZqKktF7Mia6QPTMPln6Us3+AHekf3TmqbKhsjHD kf2ZQa/3cKEmv5qmLIEYSch8jKsJoMbmBsuBoLMwZR7ExpSTjC7IVELzMJCNwWjJ FbzgsW0QQg1RWOAaYU80n+sA682ejbGTYw9VFA9i/8+/QqmUtt+K3lgbyVxNukDe 4WXIItkKXns0tJ6tzoyQmLQ+zXK9DaVHZem16Y9CmiOvWmwDG0vuXmk7pwdvltyR ubSWLDCPcZnRxq+gYf2MOD/1OeZEPY+XARHYsyEDgkqKV/As1zLuhM5NEnZZojxR XxGEyb5zbShbLCiOL4bFdVAzCLMB4Mc= -----END CERTIFICATE-----Generated at Mon Oct 20 08:03:47 2025 by rpki-client