$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bad12e0f-6f5f-35bc-9edb-41b97a955116.roa File: bad12e0f-6f5f-35bc-9edb-41b97a955116.roa (raw, json) Hash identifier: WK64fZGMa20LNT1XNAXPa2SABo+0bRs4M2DxQgFNn+E= Subject key identifier: D2:2F:04:A5:C8:0F:F5:D9:12:2B:25:E0:26:59:30:41:C3:5B:56:B2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDEDBC0BDFD47B7A8F5FE0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bad12e0f-6f5f-35bc-9edb-41b97a955116.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 184.21.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:ed:bc:0b:df:d4:7b:7a:8f:5f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c28ca497-34ad-46fb-96eb-22de09af0a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:37:57:25:bb:e8:6f:78:94:c1:79:a1:a5: cd:94:af:0b:9d:a5:b2:12:5c:ed:f1:c6:9e:10:ce: 91:72:d2:8b:77:a6:9f:ce:e2:ea:3a:08:21:28:19: de:0f:48:27:c7:67:14:13:4b:fb:8c:dd:6a:83:a1: 83:ec:9a:01:a9:52:5f:8b:40:16:15:4c:61:de:ef: bd:0d:cb:f7:ef:29:1e:fa:02:61:cd:3e:58:23:22: 77:5e:8d:9a:c5:dd:75:02:e8:c2:8c:4a:25:ee:85: c8:46:37:0c:48:b0:e6:75:d7:6a:7d:37:20:f5:37: 32:8a:ac:dd:85:d6:30:76:d3:83:86:5a:53:06:52: 43:e7:79:15:5d:22:62:ad:39:2b:8f:65:81:fc:a8: 7d:6c:ef:06:97:cf:b1:dd:17:e3:de:aa:fe:7d:9b: ca:a9:1f:90:2b:c5:5c:44:6b:5c:f7:75:b9:ec:9b: 3b:92:8e:fa:b2:5f:a0:49:cb:dd:9d:5b:e1:46:22: 3d:ba:77:6c:80:c4:8e:ea:1b:63:2b:48:f2:10:b3: 1d:cc:25:5d:2d:29:92:31:65:e9:05:24:03:95:36: 79:9c:74:f4:b2:fc:71:f4:bc:07:c7:eb:14:e9:b5: cc:d8:53:43:1c:66:fc:df:eb:93:d0:22:fd:c8:c1: 62:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2F:04:A5:C8:0F:F5:D9:12:2B:25:E0:26:59:30:41:C3:5B:56:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bad12e0f-6f5f-35bc-9edb-41b97a955116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:d7:f1:6b:06:17:f2:51:0b:49:58:c9:3f:64:ab:13:29:12: 3c:f0:95:d0:78:99:75:73:17:2a:37:8b:d5:5e:b8:73:a3:09: 80:21:5c:57:e5:21:54:f5:23:c5:cd:ed:7d:07:4b:1c:43:a7: 36:25:66:13:b6:ab:e9:ca:36:54:d1:0f:b9:e6:9a:46:4d:6a: 64:ee:b9:32:5c:9b:dd:c3:d9:65:ca:7c:8a:de:84:a2:39:9c: a8:34:ec:96:1e:9f:7b:51:82:97:0d:36:16:fb:01:80:bd:34: 34:da:69:f1:ee:3d:9f:39:c6:eb:e7:55:b0:08:66:6a:18:ea: 5d:15:ba:fd:61:59:4d:73:bb:5a:8d:0d:a1:fe:db:33:e2:38: 7d:71:fa:d6:ec:9f:68:01:f8:af:58:05:d3:27:c6:61:8c:4f: 3d:76:be:01:3f:ea:87:4c:59:e2:68:f5:85:53:8e:4b:f7:29: 5b:ef:ec:5f:76:6d:4c:ac:e0:e3:8c:82:0f:26:44:e3:c7:fc: 11:c6:27:e6:86:80:03:89:9f:1b:21:15:fd:65:ea:cf:5f:ef: 04:ba:d3:45:92:31:96:30:c2:3a:b4:2e:7d:62:75:9c:08:b1: 89:7e:68:c0:3f:c6:5a:b6:d8:73:16:b9:7c:64:ca:34:b3:a7: 5c:b9:f8:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkze28C9/Ue3qPX+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzI4Y2E0OTctMzRhZC00NmZiLTk2ZWItMjJkZTA5YWYwYTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ03VyW76G94lMF5oaXNlK8LnaWyElzt8cae EM6RctKLd6afzuLqOgghKBneD0gnx2cUE0v7jN1qg6GD7JoBqVJfi0AWFUxh3u+9 Dcv37yke+gJhzT5YIyJ3Xo2axd11AujCjEol7oXIRjcMSLDmdddqfTcg9Tcyiqzd hdYwdtODhlpTBlJD53kVXSJirTkrj2WB/Kh9bO8Gl8+x3Rfj3qr+fZvKqR+QK8Vc RGtc93W57Js7ko76sl+gScvdnVvhRiI9undsgMSO6htjK0jyELMdzCVdLSmSMWXp BSQDlTZ5nHT0svxx9LwHx+sU6bXM2FNDHGb83+uT0CL9yMFifwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIvBKXID/XZEisl4CZZMEHDW1ayMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmFkMTJlMGYtNmY1Zi0z NWJjLTllZGItNDFiOTdhOTU1MTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANbX8WsGF/JRC0lYyT9kqxMpEjzwldB4mXVzFyo3i9VeuHOjCYAhXFfl IVT1I8XN7X0HSxxDpzYlZhO2q+nKNlTRD7nmmkZNamTuuTJcm93D2WXKfIrehKI5 nKg07JYen3tRgpcNNhb7AYC9NDTaafHuPZ85xuvnVbAIZmoY6l0Vuv1hWU1zu1qN DaH+2zPiOH1x+tbsn2gB+K9YBdMnxmGMTz12vgE/6odMWeJo9YVTjkv3KVvv7F92 bUys4OOMgg8mROPH/BHGJ+aGgAOJnxshFf1l6s9f7wS600WSMZYwwjq0Ln1idZwI sYl+aMA/xlq22HMWuXxkyjSzp1y5+O4= -----END CERTIFICATE-----Generated at Mon Oct 20 05:05:32 2025 by rpki-client