$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da028a3d-d0b9-339d-8b94-77c819d6abe2.roa File: da028a3d-d0b9-339d-8b94-77c819d6abe2.roa (raw, json) Hash identifier: 3tLZJE/gsHdV61TIwvvtWYSr/V6CDk6JHDd2dRzI2S4= Subject key identifier: 41:CD:43:50:D9:1B:11:6D:17:15:2F:73:CE:40:D6:71:14:5A:42:3F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD3AD4AC9B62DA1DB0A800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da028a3d-d0b9-339d-8b94-77c819d6abe2.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 184.62.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:3a:d4:ac:9b:62:da:1d:b0:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4fde4692-37e6-456a-9443-5e067970a8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:80:fd:07:6b:20:0d:44:b4:d8:7b:11:c6:d0: 61:54:56:c4:ef:64:ef:61:30:4a:1c:3f:ee:60:fc: c9:b3:5b:c3:8f:8e:ac:d2:a2:12:ef:84:0a:8a:14: a1:72:75:82:a4:40:fb:92:47:2d:73:82:5d:41:ac: cf:dc:10:a3:18:97:f6:84:30:e0:84:39:a4:b6:9e: df:26:77:37:fe:36:42:2a:96:da:df:90:08:40:28: 14:9d:2e:11:f3:d4:b5:ec:85:93:6f:85:77:76:17: 60:f4:b3:aa:c5:2b:00:e3:76:1f:61:32:66:97:35: ae:4e:60:96:31:69:c5:43:d8:f7:44:74:18:6a:b4: 4d:75:1c:45:23:b2:61:ae:0d:2b:6d:81:65:bc:34: f1:9c:89:9a:ef:d7:74:4f:43:43:46:cc:47:6e:ca: 8b:04:dc:26:e8:48:fd:bf:4a:da:c2:a9:36:71:0b: 72:03:a6:4f:a1:40:7c:57:97:c3:2d:23:8f:14:76: b4:01:4c:78:eb:b8:64:40:9c:4b:06:50:cf:2a:0b: 0b:f8:94:25:89:0b:3d:97:d4:4b:cd:ab:e2:1f:82: fc:12:20:f9:b7:f0:a5:2f:ee:e2:3b:ef:6f:47:9d: 09:67:58:c9:bf:d1:24:69:1b:32:14:a8:3b:b8:ef: 4d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CD:43:50:D9:1B:11:6D:17:15:2F:73:CE:40:D6:71:14:5A:42:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da028a3d-d0b9-339d-8b94-77c819d6abe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.62.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:3a:7b:c4:02:8b:55:0b:38:d9:18:85:eb:fc:8e:e8:41:88: 3d:90:95:2c:5f:74:5d:9c:17:ff:17:8b:87:c3:1e:ee:5c:b8: ec:62:2f:c9:60:d0:2d:f6:23:e9:4a:a6:5a:6f:90:f8:57:a4: 10:b9:ab:25:76:15:02:68:cf:b5:81:8b:39:51:f7:c2:cc:1a: 65:ec:8e:15:0d:fe:0d:57:2f:69:1c:83:04:e0:d4:25:2f:69: 09:d3:8d:4c:63:82:3b:27:66:24:57:33:e0:26:7f:a0:f8:e5: ae:f9:13:35:40:70:3e:40:12:be:8b:4f:47:7d:34:6d:ce:7e: 55:dd:81:83:eb:7b:49:6a:f0:c5:af:94:fa:57:b0:8a:ad:62: fa:2d:a0:29:f5:40:f8:15:16:7a:bd:77:73:0a:a9:5e:43:63: 5a:6e:83:83:ed:53:54:00:8f:51:7e:78:d0:04:77:c6:d0:de: 9c:28:f7:ef:a5:65:c4:03:e2:b6:40:f1:8a:09:2c:fc:e6:e9: 01:21:f7:e7:d4:0f:97:cb:68:90:c9:02:f9:a2:dc:94:b1:cd: 21:b1:38:78:51:30:50:41:3f:11:76:e6:21:59:5b:e5:a4:ae: 61:5b:93:bf:3f:95:5a:d7:1f:a1:c4:6f:1b:57:11:91:aa:25: 95:c6:f7:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzTrUrJti2h2wqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NGZkZTQ2OTItMzdlNi00NTZhLTk0NDMtNWUwNjc5NzBhOGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoD9B2sgDUS02HsRxtBhVFbE72TvYTBKHD/u YPzJs1vDj46s0qIS74QKihShcnWCpED7kkctc4JdQazP3BCjGJf2hDDghDmktp7f Jnc3/jZCKpba35AIQCgUnS4R89S17IWTb4V3dhdg9LOqxSsA43YfYTJmlzWuTmCW MWnFQ9j3RHQYarRNdRxFI7Jhrg0rbYFlvDTxnIma79d0T0NDRsxHbsqLBNwm6Ej9 v0rawqk2cQtyA6ZPoUB8V5fDLSOPFHa0AUx467hkQJxLBlDPKgsL+JQliQs9l9RL zaviH4L8EiD5t/ClL+7iO+9vR50JZ1jJv9EkaRsyFKg7uO9NUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHNQ1DZGxFtFxUvc85A1nEUWkI/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGEwMjhhM2QtZDBiOS0z MzlkLThiOTQtNzdjODE5ZDZhYmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD5TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALc6e8QCi1ULONkYhev8juhBiD2QlSxfdF2cF/8Xi4fDHu5cuOxiL8lg 0C32I+lKplpvkPhXpBC5qyV2FQJoz7WBizlR98LMGmXsjhUN/g1XL2kcgwTg1CUv aQnTjUxjgjsnZiRXM+Amf6D45a75EzVAcD5AEr6LT0d9NG3OflXdgYPre0lq8MWv lPpXsIqtYvotoCn1QPgVFnq9d3MKqV5DY1pug4PtU1QAj1F+eNAEd8bQ3pwo9++l ZcQD4rZA8YoJLPzm6QEh9+fUD5fLaJDJAvmi3JSxzSGxOHhRMFBBPxF25iFZW+Wk rmFbk78/lVrXH6HEbxtXEZGqJZXG9/s= -----END CERTIFICATE-----Generated at Mon Oct 20 05:32:00 2025 by rpki-client