$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1f5a26c-7a3d-3577-a22c-ad786e81b151.roa File: c1f5a26c-7a3d-3577-a22c-ad786e81b151.roa (raw, json) Hash identifier: giqJvClvYCTu7/gcvwXIN4A1fpbQojvEEdynBOGeJNk= Subject key identifier: B2:22:33:1C:9C:6D:48:C0:C8:84:84:01:F7:48:26:B2:5D:D6:E0:F0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114FFAD1308C51A7561966 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1f5a26c-7a3d-3577-a22c-ad786e81b151.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 184.20.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:4f:fa:d1:30:8c:51:a7:56:19:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f5fa413c-da7e-4407-b7e6-1bbbbb601446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:51:f2:74:d1:da:04:f8:9f:82:25:e4:b5:20: e2:bc:16:7a:57:19:12:ae:97:38:15:64:9b:cc:6f: a4:cb:0c:8a:8b:24:ab:32:b0:7b:f7:5f:79:eb:2f: 54:3b:91:31:65:cf:52:f9:70:5b:49:9c:11:50:32: 07:3c:a8:70:c3:36:5c:75:68:7a:fe:38:91:64:8d: ec:a5:ad:27:a6:01:1c:14:ba:af:00:b1:b7:23:ff: 22:bb:b9:e2:64:3e:3a:f5:1e:f0:6e:5d:9b:b7:d7: 80:ab:ac:e1:73:17:6c:47:33:45:06:fc:f4:f3:ca: 89:fc:30:ea:7e:78:27:6c:59:46:7f:39:3d:54:0f: 9d:f5:6c:d8:f7:69:82:b3:bb:50:7f:12:43:00:1f: 84:54:c8:99:3d:fc:68:b0:d4:39:91:01:09:15:e7: 2b:27:09:ac:19:9d:b3:20:c7:12:10:fe:fc:02:9e: 0d:db:0a:ba:07:c4:d2:59:e2:27:83:87:e2:a4:1e: 03:fa:92:27:de:c6:c4:9f:0a:0f:43:8d:a5:dd:40: a3:83:6d:43:6c:b3:4a:33:4b:28:6a:02:aa:fc:d8: c7:a9:d5:05:49:f3:58:b5:5d:88:38:11:e7:7d:6b: e8:e8:86:bb:07:f3:09:6e:b6:69:1f:cb:12:6f:8d: bd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:22:33:1C:9C:6D:48:C0:C8:84:84:01:F7:48:26:B2:5D:D6:E0:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1f5a26c-7a3d-3577-a22c-ad786e81b151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:0a:13:92:23:a2:13:02:c7:55:d5:e7:13:4e:c5:0d:aa:93: 1d:50:0f:62:ca:d8:86:bf:ad:09:f0:6e:e4:dd:62:05:ed:1e: f6:89:70:89:18:a3:e0:ed:0c:b1:4f:54:e8:6b:d9:7e:c7:19: 74:66:e2:43:33:9d:63:83:17:3e:68:50:66:3e:2b:d7:a8:bb: a3:19:be:5e:32:36:d0:80:5b:6d:df:73:82:94:c0:12:fc:8d: 74:c9:97:02:0f:23:26:3e:5d:22:83:78:43:bc:e9:49:11:a5: 8f:05:54:f7:0d:3d:b8:42:8e:a1:9b:55:8e:6e:c6:70:93:88: 7c:c6:bf:cd:75:e2:c1:10:0b:37:38:58:25:f4:3b:29:6c:a6: 3c:99:c1:7f:f4:0b:e6:37:22:79:5f:f0:b4:a5:75:d0:f4:dc: 16:e7:ca:f6:cd:b2:7b:40:14:b9:cb:e5:36:4e:4a:e9:e8:80: 57:9c:82:c5:64:3e:45:3d:21:12:a9:46:18:15:f0:ba:18:11: 65:a6:95:aa:e1:c1:79:2d:56:26:73:31:07:8f:bf:47:12:de: 32:d9:df:cf:d6:b8:34:ca:b0:e9:80:98:88:d0:64:1c:41:c2: 1d:06:34:55:39:c3:68:94:c4:be:5f:51:d8:fd:3e:08:58:2e: 19:a0:ab:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEU/60TCMUadWGWYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjVmYTQxM2MtZGE3ZS00NDA3LWI3ZTYtMWJiYmJiNjAxNDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFHydNHaBPifgiXktSDivBZ6VxkSrpc4FWSb zG+kywyKiySrMrB791956y9UO5ExZc9S+XBbSZwRUDIHPKhwwzZcdWh6/jiRZI3s pa0npgEcFLqvALG3I/8iu7niZD469R7wbl2bt9eAq6zhcxdsRzNFBvz088qJ/DDq fngnbFlGfzk9VA+d9WzY92mCs7tQfxJDAB+EVMiZPfxosNQ5kQEJFecrJwmsGZ2z IMcSEP78Ap4N2wq6B8TSWeIng4fipB4D+pIn3sbEnwoPQ42l3UCjg21DbLNKM0so agKq/NjHqdUFSfNYtV2IOBHnfWvo6Ia7B/MJbrZpH8sSb4293wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIiMxycbUjAyISEAfdIJrJd1uDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzFmNWEyNmMtN2EzZC0z NTc3LWEyMmMtYWQ3ODZlODFiMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMKE5IjohMCx1XV5xNOxQ2qkx1QD2LK2Ia/rQnwbuTdYgXtHvaJcIkY o+DtDLFPVOhr2X7HGXRm4kMznWODFz5oUGY+K9eou6MZvl4yNtCAW23fc4KUwBL8 jXTJlwIPIyY+XSKDeEO86UkRpY8FVPcNPbhCjqGbVY5uxnCTiHzGv8114sEQCzc4 WCX0OylspjyZwX/0C+Y3Inlf8LSlddD03BbnyvbNsntAFLnL5TZOSunogFecgsVk PkU9IRKpRhgV8LoYEWWmlarhwXktViZzMQePv0cS3jLZ38/WuDTKsOmAmIjQZBxB wh0GNFU5w2iUxL5fUdj9PghYLhmgq0s= -----END CERTIFICATE-----Generated at Sat Jul 26 11:09:13 2025 by rpki-client