$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be681068-e4e1-3d7b-a576-f250d1138324.roa File: be681068-e4e1-3d7b-a576-f250d1138324.roa (raw, json) Hash identifier: rfNbDnRrkfBuSkjzZp9sVxvZy1HkXfdizoSPBAc66bU= Subject key identifier: B5:04:B4:E2:DA:A6:F2:2C:C5:EA:7B:A9:D9:70:66:5B:87:54:87:2E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDFC66A6100D8278BB1D60 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be681068-e4e1-3d7b-a576-f250d1138324.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 184.63.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:fc:66:a6:10:0d:82:78:bb:1d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=43ea24d0-c501-445c-b42d-67f05d72d49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:25:03:17:5a:0f:01:16:b3:39:fd:c0:ba:97: 12:a8:72:9b:fb:72:2a:29:aa:6e:a9:d9:f4:db:56: 3c:83:8e:2e:f0:34:91:fb:bd:00:91:f3:6c:e1:0e: 7c:30:0b:f7:92:bd:32:14:fc:b9:28:43:09:b8:b0: 2b:18:1a:71:4e:84:f9:bd:10:d9:01:41:36:50:20: 0a:15:41:0f:d7:e9:2f:b6:cf:8f:d5:5c:ee:4e:83: 13:e8:87:10:3b:eb:3a:d7:e3:6d:65:ff:61:04:73: 85:61:7c:80:74:d4:1d:fa:a4:d8:c3:61:d0:2a:28: 70:28:14:a3:4b:46:3b:22:cd:2c:8c:f6:5d:c0:5e: 23:1d:46:00:dc:2d:6b:58:2c:66:18:2b:cf:96:ab: ed:34:0d:05:36:4c:3b:6a:7b:10:82:20:cc:1d:d2: 58:95:72:63:25:ed:2b:79:81:f4:c2:b5:ad:df:05: 41:e5:75:c2:62:32:23:11:55:2c:b6:c2:12:a8:f3: 6c:43:49:04:3a:82:8f:e0:f7:97:16:72:41:71:23: 51:d7:80:f5:eb:70:43:27:21:14:de:eb:1b:90:f8: e1:5f:fd:70:76:c8:da:c9:a5:77:65:a4:7c:bc:8d: a5:ae:ae:f9:2b:cf:53:bf:99:1f:3a:db:f5:3c:7e: 1a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:04:B4:E2:DA:A6:F2:2C:C5:EA:7B:A9:D9:70:66:5B:87:54:87:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be681068-e4e1-3d7b-a576-f250d1138324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.63.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f9:fc:06:60:a1:c2:32:2c:1d:f9:15:db:fd:22:d6:7c:1c: 77:f6:fc:45:48:9f:da:4c:fa:15:31:7a:80:69:28:41:1f:eb: 62:b0:fb:d8:cd:b9:4c:bc:89:58:c2:50:c1:9b:f0:aa:0b:1c: ad:f1:6d:a9:e0:20:d5:34:8c:51:05:fa:4b:7e:be:5e:1b:99: a9:ed:39:10:b5:a0:f1:d3:78:d6:de:81:6e:dc:d3:8f:88:f7: e8:51:79:26:d7:24:7e:f6:45:ab:7d:03:5e:bb:7f:38:59:f9: b7:00:e1:5e:e2:c6:a6:08:77:80:c0:0f:1f:65:6c:09:c5:01: ce:07:10:55:77:47:ca:4f:66:3c:a9:11:37:28:5e:bb:ef:16: 55:58:8e:e8:c9:1d:f2:66:9e:d1:fd:46:1d:b9:dd:7e:ae:73: 6b:cf:5a:ac:f3:ec:db:97:49:0f:d9:ec:d2:ee:fc:d1:fe:89: 6a:79:d9:e6:e7:f4:a8:d6:1f:15:8a:b3:60:9a:b0:ac:50:82: f2:e4:95:b5:fb:b9:2a:77:88:08:61:8e:e0:77:19:35:ef:7d: 85:66:68:eb:fd:44:4d:e6:e5:8c:63:0b:6f:9e:3a:d5:6b:ac: 94:0b:55:59:cb:8c:1c:71:ae:0e:46:4a:ef:f6:37:75:6b:48: d2:e2:1f:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzfxmphANgni7HWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NDNlYTI0ZDAtYzUwMS00NDVjLWI0MmQtNjdmMDVkNzJkNDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiUDF1oPARazOf3AupcSqHKb+3IqKapuqdn0 21Y8g44u8DSR+70AkfNs4Q58MAv3kr0yFPy5KEMJuLArGBpxToT5vRDZAUE2UCAK FUEP1+kvts+P1VzuToMT6IcQO+s61+NtZf9hBHOFYXyAdNQd+qTYw2HQKihwKBSj S0Y7Is0sjPZdwF4jHUYA3C1rWCxmGCvPlqvtNA0FNkw7ansQgiDMHdJYlXJjJe0r eYH0wrWt3wVB5XXCYjIjEVUstsISqPNsQ0kEOoKP4PeXFnJBcSNR14D163BDJyEU 3usbkPjhX/1wdsjayaV3ZaR8vI2lrq75K89Tv5kfOtv1PH4aRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUEtOLapvIsxep7qdlwZluHVIcuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmU2ODEwNjgtZTRlMS0z ZDdiLWE1NzYtZjI1MGQxMTM4MzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD8VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD75/AZgocIyLB35Fdv9ItZ8HHf2/EVIn9pM+hUxeoBpKEEf62Kw+9jN uUy8iVjCUMGb8KoLHK3xbangINU0jFEF+kt+vl4bmantORC1oPHTeNbegW7c04+I 9+hReSbXJH72Rat9A167fzhZ+bcA4V7ixqYId4DADx9lbAnFAc4HEFV3R8pPZjyp ETcoXrvvFlVYjujJHfJmntH9Rh253X6uc2vPWqzz7NuXSQ/Z7NLu/NH+iWp52ebn 9KjWHxWKs2CasKxQgvLklbX7uSp3iAhhjuB3GTXvfYVmaOv9RE3m5YxjC2+eOtVr rJQLVVnLjBxxrg5GSu/2N3VrSNLiH3o= -----END CERTIFICATE-----Generated at Mon Oct 20 10:30:11 2025 by rpki-client