$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa File: 4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa (raw, json) Hash identifier: PYK3OX/98sC6Wzb6D6tidtSrQG5B3XBREPkVsPkGCWA= Subject key identifier: 7D:D2:27:D8:C0:09:0E:32:4A:90:06:A8:D9:F6:C0:13:F4:4F:BD:8A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84115CA7E3125407C4551300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 184.21.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:5c:a7:e3:12:54:07:c4:55:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=893dd596-552f-4334-bc5b-305b2457d69c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a4:fa:26:89:51:a9:79:af:70:fe:b6:a9:69: 2d:63:ba:92:45:0a:76:46:0f:2a:ce:2c:a8:5b:69: c7:d7:31:79:ea:55:d9:f6:0a:41:e2:79:a9:80:68: 20:e6:fe:cc:b0:8d:34:23:15:00:dd:7b:bf:78:d4: a6:5d:9e:0d:7b:a1:7c:d7:4d:db:70:42:9e:1e:26: a9:ac:6f:6a:49:25:1f:21:56:ed:d8:a6:58:2f:8d: 9a:32:72:55:fe:a3:e8:af:cf:da:88:b4:cc:f7:47: e6:8a:a0:cc:7b:c7:1f:cc:67:86:ec:0b:e2:70:e3: ee:78:4e:06:0a:84:b7:d7:e8:85:8d:a6:fb:02:38: 49:da:40:1c:25:26:d5:0f:49:44:7d:73:11:2c:3a: 62:c7:13:8f:8b:5b:c8:21:f7:cd:11:0a:7e:2a:01: 76:83:a8:94:eb:b2:a1:bc:62:a1:8e:a5:31:19:c5: 1e:d2:dd:13:68:55:d8:7f:13:bc:ec:5c:25:40:3a: 2a:05:f7:8f:56:8b:59:49:9e:1f:fc:e5:f9:bc:0b: 50:46:e0:51:fa:06:64:0f:61:d7:2d:ed:33:73:60: 60:49:1a:7f:b4:a2:31:a8:e1:30:9a:d9:6d:c6:91: b9:af:b0:0e:c9:a7:ca:78:61:f8:86:27:50:fa:ef: 33:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D2:27:D8:C0:09:0E:32:4A:90:06:A8:D9:F6:C0:13:F4:4F:BD:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:57:d4:f8:f3:f6:0d:bf:3d:eb:6c:0e:a6:76:68:83:84:c4: 1f:17:11:bd:14:d1:f0:34:49:97:d1:e0:41:33:7b:8a:88:3f: c4:26:78:cb:65:b7:c6:3f:d7:4d:75:3f:9e:ed:68:16:e4:73: 1b:97:80:e1:4f:20:79:f5:b5:4b:64:50:1e:cf:15:6c:f2:e0: b9:48:c0:15:82:5c:67:d9:d8:7e:bc:fd:41:8f:b2:b2:cc:c2: e9:67:5c:b1:e4:32:8a:e7:71:a9:4f:48:38:15:f5:f9:1d:7a: 9a:76:c6:d1:eb:6f:83:3c:7b:2c:be:66:a5:b2:ae:44:92:b8: 2d:cc:b4:6b:04:68:2f:fb:eb:e3:54:1f:85:91:84:9e:08:7e: f7:02:7c:1c:e9:61:c8:eb:a4:8b:f0:35:f7:91:fb:0f:9e:24: 86:55:7a:ca:8e:9f:8f:37:02:e5:aa:91:83:fc:59:28:71:70: 41:e3:01:97:e5:fe:8e:ee:a6:7b:7a:02:7c:cd:86:7c:38:cd: 3d:5b:3f:79:69:49:2d:5c:fd:43:5c:8a:7a:4b:1b:92:2c:2d: ed:02:ad:85:d8:8e:0c:52:7d:f4:b3:0a:b2:96:62:f9:0e:ac: af:aa:20:37:d8:d9:3e:60:26:99:ec:41:92:53:0b:1f:ab:96: cc:a4:81:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEVyn4xJUB8RVEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODkzZGQ1OTYtNTUyZi00MzM0LWJjNWItMzA1YjI0NTdkNjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6T6JolRqXmvcP62qWktY7qSRQp2Rg8qziyo W2nH1zF56lXZ9gpB4nmpgGgg5v7MsI00IxUA3Xu/eNSmXZ4Ne6F8103bcEKeHiap rG9qSSUfIVbt2KZYL42aMnJV/qPor8/aiLTM90fmiqDMe8cfzGeG7AvicOPueE4G CoS31+iFjab7AjhJ2kAcJSbVD0lEfXMRLDpixxOPi1vIIffNEQp+KgF2g6iU67Kh vGKhjqUxGcUe0t0TaFXYfxO87FwlQDoqBfePVotZSZ4f/OX5vAtQRuBR+gZkD2HX Le0zc2BgSRp/tKIxqOEwmtltxpG5r7AOyafKeGH4hidQ+u8zGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3SJ9jACQ4ySpAGqNn2wBP0T72KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGM1NzEwYTItOWU3YS0z ZGUxLTg3NmEtOGJlNGFhMjhkYjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlX1Pjz9g2/PetsDqZ2aIOExB8XEb0U0fA0SZfR4EEze4qIP8QmeMtl t8Y/1011P57taBbkcxuXgOFPIHn1tUtkUB7PFWzy4LlIwBWCXGfZ2H68/UGPsrLM wulnXLHkMorncalPSDgV9fkdepp2xtHrb4M8eyy+ZqWyrkSSuC3MtGsEaC/76+NU H4WRhJ4IfvcCfBzpYcjrpIvwNfeR+w+eJIZVesqOn483AuWqkYP8WShxcEHjAZfl /o7upnt6AnzNhnw4zT1bP3lpSS1c/UNcinpLG5IsLe0CrYXYjgxSffSzCrKWYvkO rK+qIDfY2T5gJpnsQZJTCx+rlsykgVw= -----END CERTIFICATE-----Generated at Sat Jul 26 00:03:53 2025 by rpki-client