$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfe5a18a-774e-39ef-a460-8c0b8f0409d5.roa File: bfe5a18a-774e-39ef-a460-8c0b8f0409d5.roa (raw, json) Hash identifier: 3ijuEjGmdes2K5XWy/tzwqLcfljwyWhfGK6VaZzU+gE= Subject key identifier: 05:81:C1:16:A5:4A:57:86:C9:A0:8D:A1:37:3C:3C:8F:D5:6A:EA:74 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CE027D383B2407B2C22C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfe5a18a-774e-39ef-a460-8c0b8f0409d5.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 184.63.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:02:7d:38:3b:24:07:b2:c2:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=afb312ac-e7a4-45f0-b992-2fd27193a905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:59:77:4a:b5:be:27:a4:80:f3:b2:c1:06:1a: dd:5d:25:c9:35:86:f8:9f:7a:b7:8d:1d:ee:b4:73: 3d:e6:a0:5c:42:8f:4e:b3:7a:da:26:9f:39:68:f8: 5c:e9:82:c9:a0:ea:0e:4b:dd:93:30:55:9c:ab:61: 07:97:e8:19:d7:fe:4b:e1:9a:b1:c8:d0:aa:7d:fd: 2b:e2:fd:ad:a4:63:81:40:56:2b:41:8d:12:54:47: cd:cc:f1:2b:3a:46:e9:6e:3a:18:40:13:bb:84:54: 72:6a:7e:d9:fc:e6:90:59:ae:98:f4:c2:d7:94:90: f4:17:56:f6:11:b5:97:cf:93:4f:4d:52:0a:80:fb: bd:22:e9:07:4a:23:6c:2a:2e:9c:9c:7e:38:02:fc: 89:96:ec:93:c3:71:91:71:c7:25:04:03:27:94:dc: 89:9e:b5:8a:e2:89:92:36:1b:b4:f5:b8:fd:45:08: cf:d8:b8:67:cd:87:b0:92:65:0f:7a:eb:c7:f0:43: 1c:9d:4b:9c:b9:b9:fd:73:2f:60:ed:c7:c1:a6:c1: c2:36:d6:aa:f2:f9:d7:f8:07:56:02:0f:08:99:3a: 6b:b5:0d:d6:c7:cb:fc:11:9c:29:38:2e:dc:a6:2e: cb:3b:6e:da:44:1e:0e:1c:de:e4:b3:e3:55:8c:3b: 34:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:81:C1:16:A5:4A:57:86:C9:A0:8D:A1:37:3C:3C:8F:D5:6A:EA:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfe5a18a-774e-39ef-a460-8c0b8f0409d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.63.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:bf:42:4e:5a:44:0b:5c:90:81:4a:96:f4:bb:3a:b6:e4:b1: 2e:02:fa:98:90:ca:d0:76:a3:4c:d6:14:f9:55:ae:f0:6b:7f: b2:65:8d:80:7e:e8:e3:05:f7:0a:99:77:af:85:f8:6a:b1:9a: 60:03:02:32:f3:e9:b8:e6:ee:ae:b8:49:86:73:9a:61:63:af: c7:4f:7d:28:2b:1f:c1:65:ee:6d:0e:68:a3:c5:16:85:cd:63: 19:b4:d9:c1:47:3c:17:3a:eb:9e:c4:c3:e7:14:27:39:f8:ba: 02:34:88:17:29:1f:bc:0f:0a:ba:67:53:2f:2e:43:88:2a:16: 86:41:9c:4f:3d:53:cf:9f:b5:a0:8c:28:79:3c:47:e4:67:8a: e2:a9:22:9d:7d:2f:d1:0d:9a:18:85:a1:1d:3d:8f:95:8d:0b: 44:44:10:85:f1:97:1f:40:a4:9a:c3:b5:6b:8b:a6:32:2e:f6: bd:86:f8:29:13:59:9e:fc:79:78:18:14:cd:a8:fa:15:92:02: 06:02:5a:c9:f1:f5:89:0d:32:aa:93:43:f4:da:bc:63:9b:9f: 77:ce:68:65:d2:cc:09:b0:05:00:01:5b:08:bb:78:12:8e:41: 72:f5:58:0e:80:ca:09:b9:98:ea:a6:f7:93:ea:97:37:e8:a8: b2:ef:b5:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzgJ9ODskB7LCLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YWZiMzEyYWMtZTdhNC00NWYwLWI5OTItMmZkMjcxOTNhOTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFl3SrW+J6SA87LBBhrdXSXJNYb4n3q3jR3u tHM95qBcQo9Os3raJp85aPhc6YLJoOoOS92TMFWcq2EHl+gZ1/5L4ZqxyNCqff0r 4v2tpGOBQFYrQY0SVEfNzPErOkbpbjoYQBO7hFRyan7Z/OaQWa6Y9MLXlJD0F1b2 EbWXz5NPTVIKgPu9IukHSiNsKi6cnH44AvyJluyTw3GRccclBAMnlNyJnrWK4omS Nhu09bj9RQjP2LhnzYewkmUPeuvH8EMcnUucubn9cy9g7cfBpsHCNtaq8vnX+AdW Ag8ImTprtQ3Wx8v8EZwpOC7cpi7LO27aRB4OHN7ks+NVjDs03QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWBwRalSleGyaCNoTc8PI/Vaup0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmZlNWExOGEtNzc0ZS0z OWVmLWE0NjAtOGMwYjhmMDQwOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKe/Qk5aRAtckIFKlvS7OrbksS4C+piQytB2o0zWFPlVrvBrf7JljYB+ 6OMF9wqZd6+F+GqxmmADAjLz6bjm7q64SYZzmmFjr8dPfSgrH8Fl7m0OaKPFFoXN Yxm02cFHPBc6657Ew+cUJzn4ugI0iBcpH7wPCrpnUy8uQ4gqFoZBnE89U8+ftaCM KHk8R+RniuKpIp19L9ENmhiFoR09j5WNC0REEIXxlx9ApJrDtWuLpjIu9r2G+CkT WZ78eXgYFM2o+hWSAgYCWsnx9YkNMqqTQ/TavGObn3fOaGXSzAmwBQABWwi7eBKO QXL1WA6Aygm5mOqm95PqlzfoqLLvtR4= -----END CERTIFICATE-----Generated at Mon Oct 20 00:05:43 2025 by rpki-client