$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf04f1b5-f524-377d-b178-85d8e4ac8a3b.roa File: cf04f1b5-f524-377d-b178-85d8e4ac8a3b.roa (raw, json) Hash identifier: Eko9lU+m8UkLK5B212mu3qkrRTR/VoVECuzj7lcf320= Subject key identifier: E0:FC:08:1F:EA:2A:5B:EC:13:20:93:3A:06:9A:35:5E:6E:84:92:02 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDE58D622F2DD3CEEB2FC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf04f1b5-f524-377d-b178-85d8e4ac8a3b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 184.20.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:e5:8d:62:2f:2d:d3:ce:eb:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=d84224fb-2aba-4d8a-9dae-b92efdd38686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f1:e4:03:ee:87:2f:bb:f4:a6:ff:89:d2:fc: 68:22:8b:eb:28:aa:5b:ef:8a:e6:cd:c5:fc:0f:1e: 97:7a:ef:a6:e1:86:8f:3f:6f:5a:91:99:a5:a2:3c: 11:e4:cb:37:29:f7:6b:d5:64:b1:5a:8c:fd:c9:9a: 21:7b:04:21:21:ce:b1:1f:41:26:78:9c:08:e6:79: af:7d:27:59:94:11:97:d0:7c:5c:2d:28:9f:43:b0: e0:0e:b6:46:03:b7:8b:3a:83:5b:33:3c:f3:e3:14: 1c:f9:9e:19:5d:7c:c2:30:d7:cb:02:c5:ae:10:0e: c0:ae:76:c6:64:9b:a0:18:d7:dc:c8:c4:cc:c4:b4: 74:9e:d6:6a:3e:52:8b:05:f8:fc:c8:1d:9e:e8:44: 33:69:52:f0:ea:e4:d0:0d:e7:32:f2:2e:be:77:53: 3e:fb:f2:ac:f9:d9:09:23:74:b1:02:37:ec:84:41: db:73:00:ae:5a:a6:cb:99:49:e9:ef:df:9e:e1:65: ad:1b:9b:a8:b1:39:5d:ae:e5:b5:a8:4f:7d:e2:8d: e7:10:03:69:ab:b3:b3:2d:55:b7:1f:a0:93:4a:93: 89:cb:ca:ba:17:dd:87:5d:62:31:9f:29:c7:3b:a2: 0c:c5:8e:5f:13:f4:95:16:a8:e6:f2:c3:1b:62:68: 4f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FC:08:1F:EA:2A:5B:EC:13:20:93:3A:06:9A:35:5E:6E:84:92:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf04f1b5-f524-377d-b178-85d8e4ac8a3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:39:99:6f:ee:fe:6d:0d:de:55:57:01:6f:c9:2e:bd:54:6d: a6:de:87:54:17:a8:fb:f5:40:59:b0:d9:47:4b:a3:99:df:4d: 46:60:12:27:4e:83:52:56:6c:cd:4c:e9:43:b0:ae:22:53:13: 3a:40:85:39:66:b5:03:52:31:ee:ab:43:b0:15:30:ac:71:17: 77:5e:83:50:43:19:8f:61:f2:fe:21:18:61:7c:80:72:bf:47: 1c:3e:d3:37:20:b0:de:7c:3c:a5:48:b3:e8:14:44:ff:e1:fd: 6f:75:49:23:f5:65:b3:60:e7:4a:70:d0:18:95:21:91:a7:86: 2f:55:7b:30:ae:5c:0b:a9:8f:34:ed:4a:79:39:bc:62:88:37: 24:75:04:b4:4a:8b:39:17:4b:a3:ce:de:e4:48:bf:07:5d:00: 15:19:1a:6e:b1:01:32:c7:60:a7:91:29:d3:c1:f5:cf:8b:a0: 45:91:b3:9a:6e:d4:74:97:60:94:2e:95:d6:21:fa:df:fb:cf: 7e:21:c9:e8:eb:b5:3c:71:20:76:6f:40:3b:7e:77:1f:ee:8b: 18:ac:2f:ca:f4:83:a2:f2:e4:4a:f8:0a:65:07:9f:f4:e8:dc: e7:85:e1:99:03:6f:9e:d9:16:fa:3f:22:2c:fa:d4:f1:1a:bf: cb:25:d6:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzeWNYi8t087rL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDg0MjI0ZmItMmFiYS00ZDhhLTlkYWUtYjkyZWZkZDM4Njg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fHkA+6HL7v0pv+J0vxoIovrKKpb74rmzcX8 Dx6Xeu+m4YaPP29akZmlojwR5Ms3Kfdr1WSxWoz9yZohewQhIc6xH0EmeJwI5nmv fSdZlBGX0HxcLSifQ7DgDrZGA7eLOoNbMzzz4xQc+Z4ZXXzCMNfLAsWuEA7ArnbG ZJugGNfcyMTMxLR0ntZqPlKLBfj8yB2e6EQzaVLw6uTQDecy8i6+d1M++/Ks+dkJ I3SxAjfshEHbcwCuWqbLmUnp79+e4WWtG5uosTldruW1qE994o3nEANpq7OzLVW3 H6CTSpOJy8q6F92HXWIxnynHO6IMxY5fE/SVFqjm8sMbYmhPqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOD8CB/qKlvsEyCTOgaaNV5uhJICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2YwNGYxYjUtZjUyNC0z NzdkLWIxNzgtODVkOGU0YWM4YTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF45mW/u/m0N3lVXAW/JLr1Ubabeh1QXqPv1QFmw2UdLo5nfTUZgEidO g1JWbM1M6UOwriJTEzpAhTlmtQNSMe6rQ7AVMKxxF3deg1BDGY9h8v4hGGF8gHK/ Rxw+0zcgsN58PKVIs+gURP/h/W91SSP1ZbNg50pw0BiVIZGnhi9VezCuXAupjzTt Snk5vGKINyR1BLRKizkXS6PO3uRIvwddABUZGm6xATLHYKeRKdPB9c+LoEWRs5pu 1HSXYJQuldYh+t/7z34hyejrtTxxIHZvQDt+dx/uixisL8r0g6Ly5Er4CmUHn/To 3OeF4ZkDb57ZFvo/Iiz61PEav8sl1hw= -----END CERTIFICATE-----Generated at Mon Oct 20 00:06:12 2025 by rpki-client