$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38c8de0c-ff6d-3ad4-88eb-1b3f73ea7283.roa File: 38c8de0c-ff6d-3ad4-88eb-1b3f73ea7283.roa (raw, json) Hash identifier: 1NQqF7YkOds7hM/8vakc9UDExZNKB7i6FBZ7rxO8BPo= Subject key identifier: B4:ED:10:94:30:F5:4B:97:53:CB:2D:38:74:73:22:DE:70:11:0A:A6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84120FF49E8B1060EF059C88 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38c8de0c-ff6d-3ad4-88eb-1b3f73ea7283.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 184.21.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:0f:f4:9e:8b:10:60:ef:05:9c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=9ac500d9-9afb-40b0-bc8b-25d8e3300027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:da:03:ae:8b:4b:a6:48:06:34:50:21:ea:b7: 38:01:45:07:16:3a:1c:b3:0a:0c:ab:fd:8a:df:c4: ae:c9:d2:c5:1f:78:6c:93:ea:8a:26:53:6d:1c:60: 6d:58:ab:fc:e0:60:6d:15:69:c2:c7:54:69:6b:4d: f0:a8:9a:96:e5:84:e1:9d:67:d0:1c:89:de:51:03: df:6f:dc:b4:e7:67:31:7a:58:6c:d3:bb:1e:38:74: 45:1b:44:8d:dd:12:8c:c2:e7:9b:90:98:de:49:07: c5:ab:b1:44:bf:99:56:6e:6a:e6:eb:51:d9:48:3a: 1d:28:78:59:88:0a:86:0d:20:11:fd:21:9f:87:d6: a7:d6:62:ed:e7:d7:be:48:55:82:ab:82:11:64:a2: 80:d9:f6:f0:e1:d4:87:23:4e:60:1f:29:de:fc:de: 59:10:9e:b2:d9:5d:40:4a:3e:23:bc:f9:36:b6:19: 63:61:1d:db:9f:96:e3:a5:c0:b0:ea:bb:57:ef:4b: ce:3e:52:fb:9b:fa:9d:33:81:fa:14:0a:77:41:51: fa:56:f8:c4:e1:ef:1d:18:5b:18:4f:9b:83:7f:03: fc:2c:c7:fb:59:64:b7:de:aa:25:c4:2d:f6:94:92: 74:3e:7f:b6:01:60:eb:b8:40:6c:a1:a4:df:9c:9a: 0a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:ED:10:94:30:F5:4B:97:53:CB:2D:38:74:73:22:DE:70:11:0A:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38c8de0c-ff6d-3ad4-88eb-1b3f73ea7283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:22:43:62:c6:7d:ee:43:da:8f:07:9e:08:4b:ac:8c:38:33: c8:d3:cb:ec:52:ea:a3:ca:f1:cc:18:ae:ec:25:06:93:1f:fc: 05:ef:68:1c:6a:0e:17:ef:df:e1:76:a1:59:9c:96:0a:df:3d: c5:18:78:33:74:61:2e:7f:6d:a9:29:d7:18:d8:d2:6d:70:d9: 4b:1b:21:51:f2:f1:3a:74:54:ec:9c:2d:81:7e:29:4a:6d:a3: e8:1f:f8:5b:86:0e:97:66:ba:a6:26:ea:b1:0e:1d:2b:2c:22: f7:9b:72:bf:39:06:3a:df:ce:37:54:5d:16:af:7c:a5:4f:4b: 23:32:12:7b:17:13:74:3b:47:ed:06:ad:27:65:f8:41:9b:2f: 65:6b:f6:5a:a7:97:9c:ed:cf:e4:d1:fb:49:0e:16:aa:52:f8: e3:85:ab:07:5b:40:9b:44:64:49:9b:9b:37:be:d8:a5:99:6e: c2:a3:7f:5f:a9:94:00:db:de:24:00:14:4a:b8:2a:f1:ad:2f: 14:80:e4:b1:3b:10:91:db:19:1c:23:a5:92:27:db:85:70:7e: 90:17:7f:7b:ee:a0:fb:36:ca:3a:4d:3c:7d:04:ed:c9:b5:66: 01:a5:1f:bd:b2:1f:72:34:6c:5d:da:e8:73:34:97:df:7d:4a: 67:b1:d2:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEg/0nosQYO8FnIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OWFjNTAwZDktOWFmYi00MGIwLWJjOGItMjVkOGUzMzAwMDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttoDrotLpkgGNFAh6rc4AUUHFjocswoMq/2K 38SuydLFH3hsk+qKJlNtHGBtWKv84GBtFWnCx1Rpa03wqJqW5YThnWfQHIneUQPf b9y052cxelhs07seOHRFG0SN3RKMwuebkJjeSQfFq7FEv5lWbmrm61HZSDodKHhZ iAqGDSAR/SGfh9an1mLt59e+SFWCq4IRZKKA2fbw4dSHI05gHyne/N5ZEJ6y2V1A Sj4jvPk2thljYR3bn5bjpcCw6rtX70vOPlL7m/qdM4H6FAp3QVH6VvjE4e8dGFsY T5uDfwP8LMf7WWS33qolxC32lJJ0Pn+2AWDruEBsoaTfnJoKhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTtEJQw9UuXU8stOHRzIt5wEQqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzhjOGRlMGMtZmY2ZC0z YWQ0LTg4ZWItMWIzZjczZWE3MjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAiQ2LGfe5D2o8HnghLrIw4M8jTy+xS6qPK8cwYruwlBpMf/AXvaBxq Dhfv3+F2oVmclgrfPcUYeDN0YS5/bakp1xjY0m1w2UsbIVHy8Tp0VOycLYF+KUpt o+gf+FuGDpdmuqYm6rEOHSssIvebcr85BjrfzjdUXRavfKVPSyMyEnsXE3Q7R+0G rSdl+EGbL2Vr9lqnl5ztz+TR+0kOFqpS+OOFqwdbQJtEZEmbmze+2KWZbsKjf1+p lADb3iQAFEq4KvGtLxSA5LE7EJHbGRwjpZIn24VwfpAXf3vuoPs2yjpNPH0E7cm1 ZgGlH72yH3I0bF3a6HM0l999Smex0tY= -----END CERTIFICATE-----Generated at Sat Jul 26 11:07:27 2025 by rpki-client