$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/634d5589-0fca-3c0a-ab8e-9c75b408a534.roa File: 634d5589-0fca-3c0a-ab8e-9c75b408a534.roa (raw, json) Hash identifier: KyTOWmnUJo6CYsUAzxDIKHtQBmE5/nMhOMCyj/F3FQo= Subject key identifier: 32:1F:F4:05:F8:25:D6:05:48:57:20:3E:E1:91:EB:C4:10:70:20:B3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411530C5C8AD985E8E8F580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/634d5589-0fca-3c0a-ab8e-9c75b408a534.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 184.20.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:53:0c:5c:8a:d9:85:e8:e8:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=e1fde016-093a-4c8b-ba05-bcbb3d2021fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:75:fd:99:26:d1:20:46:30:c5:c1:51:61: 6d:21:1a:f7:40:d7:65:53:30:17:b4:77:a2:d8:24: 4b:d2:ee:3e:75:db:64:67:f6:33:32:70:b0:63:15: ac:55:31:97:8c:f8:69:1d:15:04:52:78:8c:65:ea: 0b:d0:34:33:d2:58:a6:c0:f0:08:c4:47:b3:75:91: 31:40:68:92:95:59:94:47:56:b9:f9:f7:79:86:8c: dc:0d:44:5c:a4:c1:df:e3:60:40:ad:7c:04:a1:da: c0:e9:b6:c7:85:bd:e3:8f:a3:e0:7e:8a:6f:2e:75: c1:60:37:ab:69:99:d4:e0:09:a9:28:42:0c:d0:4a: 47:06:a0:71:a2:bb:5b:80:35:f8:1e:f7:47:2d:57: 6e:3f:42:95:8d:0b:a6:59:49:bb:de:d5:87:23:6f: e6:23:90:00:9c:f5:60:dc:d1:e6:f4:6a:35:7e:64: 50:4a:3d:07:13:7a:9d:39:56:62:5b:f6:3e:a8:81: ed:a5:a1:b7:cb:91:29:85:c3:3c:c3:e3:83:0a:11: 16:77:c5:ee:ee:a5:3e:93:b4:45:fd:94:4d:be:2b: 9d:7f:dc:9c:fe:5f:ff:3d:ba:11:12:ae:90:fa:3f: 41:d2:e2:3d:43:73:b8:79:f8:1e:7c:98:ca:54:94: ba:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1F:F4:05:F8:25:D6:05:48:57:20:3E:E1:91:EB:C4:10:70:20:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/634d5589-0fca-3c0a-ab8e-9c75b408a534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:93:6a:01:fc:2a:cc:90:1d:cd:a3:29:03:9b:35:b1:1c:67: b4:37:4e:ca:9d:0c:cc:4d:90:3a:a6:d0:7b:68:cd:b9:4b:25: 14:19:39:ea:42:39:cd:71:8f:5b:2a:c5:84:62:5a:14:fd:36: 6e:a7:49:a0:d8:7f:06:2a:2d:8f:37:ae:44:aa:92:65:4f:18: 1a:75:27:a5:0d:bc:76:c8:3f:1d:58:45:12:d4:aa:fe:28:1e: 15:41:e2:d7:5e:26:ef:42:e7:a9:0c:fd:20:4c:5f:3e:6a:55: c3:45:6d:74:16:fc:b2:18:c7:68:73:f2:45:0d:01:ad:0a:96: 9d:a0:df:73:ff:3a:85:fc:0a:c0:06:96:3b:2e:03:63:f3:e9: 80:16:de:19:35:10:01:b7:9f:24:30:92:10:27:00:71:4f:34: c2:92:a7:8a:75:e6:26:2b:84:22:14:e2:03:66:c7:4d:2d:99: c8:4c:97:1f:74:ab:ad:fa:d9:74:f5:ab:a6:cb:12:86:42:a0: 20:f4:43:5e:84:b3:46:b0:ce:61:a9:7d:7e:f2:01:90:63:9f: 3c:f3:b8:21:fc:5b:37:b6:e4:63:8a:ff:21:ff:e4:f1:87:4b: db:c6:12:96:14:2c:a4:8f:d5:40:32:57:8f:fc:29:05:c0:09: a1:cb:76:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEVMMXIrZhejo9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZTFmZGUwMTYtMDkzYS00YzhiLWJhMDUtYmNiYjNkMjAyMWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0V1/Zkm0SBGMMXBUWFtIRr3QNdlUzAXtHei 2CRL0u4+ddtkZ/YzMnCwYxWsVTGXjPhpHRUEUniMZeoL0DQz0limwPAIxEezdZEx QGiSlVmUR1a5+fd5hozcDURcpMHf42BArXwEodrA6bbHhb3jj6PgfopvLnXBYDer aZnU4AmpKEIM0EpHBqBxortbgDX4HvdHLVduP0KVjQumWUm73tWHI2/mI5AAnPVg 3NHm9Go1fmRQSj0HE3qdOVZiW/Y+qIHtpaG3y5EphcM8w+ODChEWd8Xu7qU+k7RF /ZRNviudf9yc/l//PboREq6Q+j9B0uI9Q3O4efgefJjKVJS6jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIf9AX4JdYFSFcgPuGR68QQcCCzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjM0ZDU1ODktMGZjYS0z YzBhLWFiOGUtOWM3NWI0MDhhNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBSKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmTagH8KsyQHc2jKQObNbEcZ7Q3TsqdDMxNkDqm0HtozblLJRQZOepC Oc1xj1sqxYRiWhT9Nm6nSaDYfwYqLY83rkSqkmVPGBp1J6UNvHbIPx1YRRLUqv4o HhVB4tdeJu9C56kM/SBMXz5qVcNFbXQW/LIYx2hz8kUNAa0Klp2g33P/OoX8CsAG ljsuA2Pz6YAW3hk1EAG3nyQwkhAnAHFPNMKSp4p15iYrhCIU4gNmx00tmchMlx90 q6362XT1q6bLEoZCoCD0Q16Es0awzmGpfX7yAZBjnzzzuCH8Wze25GOK/yH/5PGH S9vGEpYULKSP1UAyV4/8KQXACaHLduk= -----END CERTIFICATE-----Generated at Sat Jul 26 00:10:11 2025 by rpki-client