$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59b4871d-a498-3da7-83f5-50b555d63f76.roa File: 59b4871d-a498-3da7-83f5-50b555d63f76.roa (raw, json) Hash identifier: /kb4kQurOYm+3rL3VOkXyyVvtwRBLnlUPB3ZhEulNPs= Subject key identifier: A1:F1:85:84:DE:81:03:E6:B1:97:14:A7:41:59:55:28:5C:39:DB:B0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841156DE46636E2DAFC96640 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59b4871d-a498-3da7-83f5-50b555d63f76.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 184.21.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:56:de:46:63:6e:2d:af:c9:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ecaba37f-8de3-421b-aa47-b140e357a60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9a:0e:e4:83:f4:6a:68:e9:bd:55:b0:b4:f7: 5f:4c:35:4a:4f:cf:5b:9b:81:7b:b5:b8:a1:20:f0: 00:ca:6c:bf:57:d1:fb:c4:77:04:ae:6c:6c:0b:f6: 90:b1:13:66:7e:dc:9f:41:b2:41:b5:9c:a2:fb:bd: 46:a9:0f:49:a7:d3:19:21:95:63:94:89:56:55:e2: f1:b1:a9:2f:46:84:ae:7d:17:3f:d9:a7:39:1f:55: 57:3d:7a:28:04:25:39:00:1c:e6:4e:a9:4f:92:f1: 07:c9:09:f3:e3:5f:8c:fd:2f:d8:5d:48:3f:c0:3f: 66:56:db:46:74:f2:8d:6f:68:99:f1:14:0f:14:78: f2:bd:18:fa:5e:63:7a:e1:d8:4b:ac:1b:c1:01:dc: a0:a8:1e:e3:72:38:cf:45:e1:b2:f2:65:ec:82:d4: 26:9d:81:2b:49:06:25:7a:bb:85:e3:b5:54:22:64: d9:2b:74:87:44:7e:ad:16:02:30:43:29:16:01:62: 3c:51:10:01:4d:c0:17:92:42:83:20:f2:4f:5c:95: e4:33:e5:c8:e0:d2:0e:8f:43:f9:4f:6d:51:4c:7d: 74:8e:98:ca:76:f2:68:c8:85:a5:1d:6f:9b:ba:8e: 19:11:d5:e1:d8:d6:96:c6:91:a6:48:cc:7a:81:df: 73:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F1:85:84:DE:81:03:E6:B1:97:14:A7:41:59:55:28:5C:39:DB:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59b4871d-a498-3da7-83f5-50b555d63f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:03:3f:9f:3b:b9:b3:21:5c:fc:d2:4c:2e:b5:82:42:13:18: 16:50:59:1b:95:ff:20:02:96:38:b1:e9:4e:5d:8c:11:26:c3: c5:c8:58:0a:18:1a:f2:1f:f5:1d:f0:f3:64:48:0a:42:ec:13: 8c:fe:b7:11:f8:f5:7b:37:8d:ad:55:61:4c:a4:30:b6:8c:82: 6b:2b:1e:c0:b6:21:1a:85:d7:77:c5:91:f6:c9:c7:63:da:05: 99:7c:99:52:8c:47:07:8a:79:bf:6a:25:a3:43:6f:fa:92:8d: 73:f6:59:d0:0b:02:0e:05:5b:dd:90:61:89:d3:b7:ce:24:da: c3:84:fc:ad:96:d9:26:e3:16:95:eb:d7:43:40:61:ba:cc:a6: 2a:89:ef:dc:3e:d5:cd:14:ff:bc:bd:da:dd:01:a5:7d:87:00: 86:47:b0:ee:47:1a:09:33:7d:79:42:d5:28:e2:48:52:5f:fd: 4f:fd:fe:e2:a8:68:b0:ca:c3:44:5d:57:3d:29:16:a7:33:27: f7:2c:25:8e:dd:fa:cf:a2:36:97:1f:b1:db:27:58:62:19:4d: 50:b6:ed:8d:2f:7a:8f:f7:7f:4c:f3:c1:05:a9:71:bd:66:f9: 1f:a0:76:30:f2:31:5c:e3:2b:d1:dd:01:38:f8:fe:be:dc:89: cf:7f:de:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEVbeRmNuLa/JZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZWNhYmEzN2YtOGRlMy00MjFiLWFhNDctYjE0MGUzNTdhNjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5oO5IP0amjpvVWwtPdfTDVKT89bm4F7tbih IPAAymy/V9H7xHcErmxsC/aQsRNmftyfQbJBtZyi+71GqQ9Jp9MZIZVjlIlWVeLx sakvRoSufRc/2ac5H1VXPXooBCU5ABzmTqlPkvEHyQnz41+M/S/YXUg/wD9mVttG dPKNb2iZ8RQPFHjyvRj6XmN64dhLrBvBAdygqB7jcjjPReGy8mXsgtQmnYErSQYl eruF47VUImTZK3SHRH6tFgIwQykWAWI8URABTcAXkkKDIPJPXJXkM+XI4NIOj0P5 T21RTH10jpjKdvJoyIWlHW+buo4ZEdXh2NaWxpGmSMx6gd9zOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHxhYTegQPmsZcUp0FZVShcOduwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTliNDg3MWQtYTQ5OC0z ZGE3LTgzZjUtNTBiNTU1ZDYzZjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwDP587ubMhXPzSTC61gkITGBZQWRuV/yACljix6U5djBEmw8XIWAoY GvIf9R3w82RICkLsE4z+txH49Xs3ja1VYUykMLaMgmsrHsC2IRqF13fFkfbJx2Pa BZl8mVKMRweKeb9qJaNDb/qSjXP2WdALAg4FW92QYYnTt84k2sOE/K2W2SbjFpXr 10NAYbrMpiqJ79w+1c0U/7y92t0BpX2HAIZHsO5HGgkzfXlC1SjiSFJf/U/9/uKo aLDKw0RdVz0pFqczJ/csJY7d+s+iNpcfsdsnWGIZTVC27Y0veo/3f0zzwQWpcb1m +R+gdjDyMVzjK9HdATj4/r7cic9/3iE= -----END CERTIFICATE-----Generated at Sat Jul 26 00:03:33 2025 by rpki-client