$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8303e79-3d2e-3c52-9517-df947d7a1e5d.roa File: b8303e79-3d2e-3c52-9517-df947d7a1e5d.roa (raw, json) Hash identifier: QZXHsNAteJ35Ll096glDFfY4RK0TfhSsbM1rMPvGRQI= Subject key identifier: 9E:40:EA:E1:66:A6:E0:73:06:3D:6E:40:4D:35:99:01:EF:D5:E5:A8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDE57C0C19ECB84F1F3000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8303e79-3d2e-3c52-9517-df947d7a1e5d.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 184.20.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:e5:7c:0c:19:ec:b8:4f:1f:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=890e2185-347b-4661-a388-017803dc8670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:ac:1a:5e:10:79:b9:38:72:7f:7a:c5:db: 55:4d:04:60:e2:63:0f:d9:9b:83:20:f0:b9:45:d8: b4:af:4d:1c:de:ab:ce:5a:88:3e:c0:b9:95:57:7d: f2:b6:ae:39:a1:7e:b6:e7:97:3d:5f:a8:fd:f3:db: 54:3a:ff:38:e9:bb:47:f7:d2:2f:7c:60:22:09:59: 55:94:43:97:00:d9:31:4f:5c:94:b8:4d:e2:31:35: 0b:2b:3f:10:1e:19:94:66:c0:01:78:bf:5c:54:13: ad:e9:61:95:3e:d0:01:93:dc:8f:db:e4:ed:0e:ee: 23:a6:cf:0e:84:bc:94:83:b7:27:a7:04:88:e3:ee: da:55:2b:c5:18:6c:e3:f8:6d:2e:ec:ae:19:ff:21: 5c:98:9f:1d:d2:83:79:08:3a:00:84:44:f5:02:40: a9:7b:11:a6:43:0e:7a:3d:ed:7c:29:1a:eb:df:07: 38:50:b0:62:e8:c8:b5:dd:42:6e:47:90:55:61:66: 80:50:b8:fa:fb:ca:5b:6a:54:5a:68:7a:b2:1f:d4: eb:67:ee:2d:b2:3e:ad:d4:1a:36:b1:0e:0f:4d:58: be:0e:c1:4a:8e:9a:2d:76:31:b4:3c:de:fe:f2:35: c9:d4:ff:32:45:10:7a:e2:bd:88:3d:32:2f:78:c1: 54:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:40:EA:E1:66:A6:E0:73:06:3D:6E:40:4D:35:99:01:EF:D5:E5:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8303e79-3d2e-3c52-9517-df947d7a1e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:a7:a9:3b:82:10:02:cd:8b:0e:dd:4e:80:73:23:05:83:29: ca:e7:83:19:a8:85:d1:bf:68:71:89:be:a4:cb:df:7f:0b:22: 09:cd:27:5d:ce:ee:bf:01:31:dc:90:c3:9c:5a:ea:13:e7:24: e7:45:af:6a:68:e3:27:4f:82:d0:2f:d5:88:1c:37:ce:b2:0b: ae:c8:ec:70:d4:43:64:7e:dd:e5:3d:5e:cf:7c:72:e9:38:1d: 98:aa:14:8d:38:f7:e7:c5:7f:40:74:b2:cd:83:52:14:c5:8e: 9e:df:42:0d:3e:ce:29:31:0b:d8:f2:41:38:c1:03:39:54:1c: e1:dd:df:aa:ed:1b:03:a0:59:64:7a:15:62:a1:28:50:db:49: 3a:f5:72:31:52:bf:70:c3:f9:e6:d8:0e:19:63:19:fb:0e:e5: 0d:d2:0c:ce:4c:c4:b6:4b:9a:48:de:46:5f:e1:2d:fe:31:86: ca:13:d7:9f:a1:50:c6:46:fb:6b:e3:d6:37:76:42:d7:09:36: 43:67:19:d3:35:7a:64:1b:5f:20:61:aa:27:72:36:d8:8a:1a: 3b:5e:e5:02:2f:f2:db:ea:48:2e:ed:28:34:4d:bd:1c:69:6c: ff:64:6e:12:b4:17:e3:d9:2b:a4:39:44:a0:e8:0e:36:96:4b: e5:88:0b:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzeV8DBnsuE8fMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ODkwZTIxODUtMzQ3Yi00NjYxLWEzODgtMDE3ODAzZGM4NjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBmsGl4Qebk4cn96xdtVTQRg4mMP2ZuDIPC5 Rdi0r00c3qvOWog+wLmVV33ytq45oX6255c9X6j989tUOv846btH99IvfGAiCVlV lEOXANkxT1yUuE3iMTULKz8QHhmUZsABeL9cVBOt6WGVPtABk9yP2+TtDu4jps8O hLyUg7cnpwSI4+7aVSvFGGzj+G0u7K4Z/yFcmJ8d0oN5CDoAhET1AkCpexGmQw56 Pe18KRrr3wc4ULBi6Mi13UJuR5BVYWaAULj6+8pbalRaaHqyH9TrZ+4tsj6t1Bo2 sQ4PTVi+DsFKjpotdjG0PN7+8jXJ1P8yRRB64r2IPTIveMFUwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5A6uFmpuBzBj1uQE01mQHv1eWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjgzMDNlNzktM2QyZS0z YzUyLTk1MTctZGY5NDdkN2ExZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIynqTuCEALNiw7dToBzIwWDKcrngxmohdG/aHGJvqTL338LIgnNJ13O 7r8BMdyQw5xa6hPnJOdFr2po4ydPgtAv1YgcN86yC67I7HDUQ2R+3eU9Xs98cuk4 HZiqFI049+fFf0B0ss2DUhTFjp7fQg0+zikxC9jyQTjBAzlUHOHd36rtGwOgWWR6 FWKhKFDbSTr1cjFSv3DD+ebYDhljGfsO5Q3SDM5MxLZLmkjeRl/hLf4xhsoT15+h UMZG+2vj1jd2QtcJNkNnGdM1emQbXyBhqidyNtiKGjte5QIv8tvqSC7tKDRNvRxp bP9kbhK0F+PZK6Q5RKDoDjaWS+WIC8w= -----END CERTIFICATE-----Generated at Sun Oct 19 23:40:52 2025 by rpki-client