$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf1da30a-b3dc-35c8-af60-efe4d3065990.roa File: bf1da30a-b3dc-35c8-af60-efe4d3065990.roa (raw, json) Hash identifier: iqYI/wOJHcQTQDkrPcPyQABXzGMT08lupJ3pmYa1doE= Subject key identifier: BD:F8:5F:66:5D:F7:E7:B0:5C:5E:BF:F0:B3:7D:B5:2B:10:10:47:82 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411526A41B3809B91716C00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf1da30a-b3dc-35c8-af60-efe4d3065990.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 184.20.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:52:6a:41:b3:80:9b:91:71:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6889474b-be44-4124-adef-6a22186a5e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d8:da:80:eb:7f:6f:1f:d7:ff:55:38:c6:ef: bb:9a:5f:ab:8b:df:78:5e:e7:b5:93:c0:e9:de:7f: 43:d1:9a:4c:ea:9a:4d:9c:62:d9:d3:1e:f0:ab:01: a9:d6:8e:69:2a:84:3a:5d:53:23:ae:65:60:d3:86: 03:0b:64:a9:70:f6:f3:50:0f:93:85:6c:e7:7f:5c: 33:03:ef:2a:52:a8:35:6c:f8:cd:a7:d3:e5:a3:b1: 6c:ea:9a:41:9a:49:3e:6d:2b:b8:b1:f5:c8:28:b3: 66:55:1c:e9:69:6e:d3:21:87:00:bf:81:7f:b8:58: db:de:83:e2:9b:15:e9:b0:1b:97:a3:18:51:b3:31: 35:70:d5:81:fb:49:4f:51:f1:bf:3b:2e:71:db:16: 1b:ce:29:be:d3:c3:92:39:2e:e5:39:d4:18:e0:3d: 00:62:c2:5e:1d:7c:df:10:b7:e7:40:26:b0:07:31: e9:cb:e5:78:3a:6e:99:14:e8:b6:b9:98:34:7d:78: 9c:ef:dc:d4:62:dc:c2:1e:13:c1:63:a0:c6:ee:70: e8:4c:2d:dc:c2:26:78:11:f7:94:ad:67:ef:a8:5a: 7a:b9:28:d5:fc:ef:41:82:fc:2d:22:28:d2:6f:46: 56:a4:58:ac:47:03:64:29:74:80:f5:62:76:12:61: 39:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F8:5F:66:5D:F7:E7:B0:5C:5E:BF:F0:B3:7D:B5:2B:10:10:47:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf1da30a-b3dc-35c8-af60-efe4d3065990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:d7:38:62:9f:05:ca:25:9e:db:c0:b7:70:73:86:32:37:09: 43:f3:42:da:b7:bb:92:c4:a9:e4:fe:80:ac:2d:8c:b0:fe:bc: 63:51:00:81:7c:f0:c2:61:31:31:93:4a:5f:41:df:4d:34:87: 24:ad:f4:db:25:5d:a4:c5:a3:b4:17:f5:cb:a8:26:9f:91:e6: 8a:81:59:54:16:17:29:c9:24:15:e8:ed:b3:ac:00:ac:ba:1d: 0b:9f:c3:aa:24:05:34:20:19:d0:3e:15:8e:e2:80:d9:2f:13: 9c:4c:32:bc:da:af:eb:95:a1:79:81:cd:9f:0f:c3:e2:c4:1b: c1:5d:bc:ed:2c:80:ad:67:db:e9:e0:6e:fe:49:2b:c6:6d:8a: 9d:fc:32:f6:46:f3:fa:02:69:7d:d9:eb:e2:18:d8:e7:52:3e: 11:d2:f4:1a:5a:da:7e:68:96:0a:13:43:29:44:aa:08:1c:cd: 26:ae:40:c1:70:80:26:c8:72:13:69:57:bb:17:f9:60:38:22: 71:fc:f9:fc:29:42:bc:8d:91:ac:12:20:38:32:90:22:ee:71: b4:3b:88:1e:4b:18:57:72:54:77:4e:d4:83:68:3f:6a:8e:a2: d2:53:c1:91:c1:0b:c4:cf:c4:bd:bb:03:c8:bb:f6:67:07:91: fe:74:a5:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEVJqQbOAm5FxbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Njg4OTQ3NGItYmU0NC00MTI0LWFkZWYtNmEyMjE4NmE1ZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltjagOt/bx/X/1U4xu+7ml+ri994Xue1k8Dp 3n9D0ZpM6ppNnGLZ0x7wqwGp1o5pKoQ6XVMjrmVg04YDC2SpcPbzUA+ThWznf1wz A+8qUqg1bPjNp9Plo7Fs6ppBmkk+bSu4sfXIKLNmVRzpaW7TIYcAv4F/uFjb3oPi mxXpsBuXoxhRszE1cNWB+0lPUfG/Oy5x2xYbzim+08OSOS7lOdQY4D0AYsJeHXzf ELfnQCawBzHpy+V4Om6ZFOi2uZg0fXic79zUYtzCHhPBY6DG7nDoTC3cwiZ4EfeU rWfvqFp6uSjV/O9BgvwtIijSb0ZWpFisRwNkKXSA9WJ2EmE5NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL34X2Zd9+ewXF6/8LN9tSsQEEeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmYxZGEzMGEtYjNkYy0z NWM4LWFmNjAtZWZlNGQzMDY1OTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBRlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfXOGKfBcolntvAt3BzhjI3CUPzQtq3u5LEqeT+gKwtjLD+vGNRAIF8 8MJhMTGTSl9B3000hySt9NslXaTFo7QX9cuoJp+R5oqBWVQWFynJJBXo7bOsAKy6 HQufw6okBTQgGdA+FY7igNkvE5xMMrzar+uVoXmBzZ8Pw+LEG8FdvO0sgK1n2+ng bv5JK8Ztip38MvZG8/oCaX3Z6+IY2OdSPhHS9Bpa2n5olgoTQylEqggczSauQMFw gCbIchNpV7sX+WA4InH8+fwpQryNkawSIDgykCLucbQ7iB5LGFdyVHdO1INoP2qO otJTwZHBC8TPxL27A8i79mcHkf50pV0= -----END CERTIFICATE-----Generated at Sat Jul 26 00:10:40 2025 by rpki-client