$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8d717a4-4083-320b-8aa8-321b109f0559.roa File: c8d717a4-4083-320b-8aa8-321b109f0559.roa (raw, json) Hash identifier: LtIGtYfzMkdA+Ec7UknZxeKWxyx/KUtvyebk3ZTh3X4= Subject key identifier: 9C:93:53:7F:01:E3:CA:1A:09:57:EE:0C:9E:42:5B:17:D9:BA:FF:51 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84115D2D31FECE5D67614160 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8d717a4-4083-320b-8aa8-321b109f0559.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 184.21.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:5d:2d:31:fe:ce:5d:67:61:41:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=8687c919-ee9b-4f6e-ae27-4a0c75851991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a7:9e:da:ba:c2:0b:fe:90:89:24:73:e2:16: ef:fe:80:65:48:9c:69:fb:cf:e8:a9:97:c5:a4:15: cd:a7:cf:97:68:b9:3c:c7:7a:d4:c8:62:80:a0:63: 73:da:6c:05:12:83:62:2a:15:12:32:f0:e8:f2:3b: 89:36:e7:05:be:a4:64:3c:73:ec:ba:47:26:55:00: e5:d4:e4:4e:b2:06:14:bf:21:ed:98:4c:01:20:20: 6c:1e:f9:93:d8:0e:59:69:5f:6d:7b:ae:1d:6e:fc: 67:bd:0a:c4:a1:ee:12:70:f8:c9:7b:6c:7a:ab:a8: 1f:fd:0f:ac:16:59:70:1f:b1:ee:5b:02:2e:17:c7: fc:55:cb:2d:a1:21:d6:ee:02:25:e8:72:90:20:f8: f3:eb:92:3c:f0:ce:75:4c:9e:b5:98:7e:6b:fe:d0: 1a:b3:69:bd:9c:b9:14:f5:8b:0e:6c:97:0b:8b:d4: 5f:1b:cb:98:c3:41:4e:22:13:be:d1:f3:18:64:c9: 6b:50:ce:1e:d4:7a:e0:24:e6:ca:97:0e:1f:31:ac: 7e:88:74:fb:a3:60:15:0a:eb:51:8e:46:6a:15:18: 65:49:64:3e:e9:bf:42:7c:df:e2:43:ca:02:5c:66: d1:de:ed:f9:fd:f9:e4:98:f0:80:fb:a5:8e:00:a0: c8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:93:53:7F:01:E3:CA:1A:09:57:EE:0C:9E:42:5B:17:D9:BA:FF:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8d717a4-4083-320b-8aa8-321b109f0559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:33:93:01:23:cd:3c:c4:2e:53:fc:7f:a1:a6:ba:2c:64:0e: 0d:4a:4b:2b:a1:ac:9a:a0:85:88:24:48:ef:be:0d:dd:13:47: 9c:02:02:25:0f:09:15:8d:9a:bb:08:0e:7d:99:8e:93:63:95: 6e:6c:78:0c:11:81:de:bc:ed:0d:e2:76:f5:74:04:61:a7:17: 9a:1d:43:47:80:ec:5f:ca:25:d8:17:27:f5:5e:8d:7d:01:fa: 8e:68:ec:48:a8:ae:ad:bf:01:94:5a:3d:e7:47:63:a4:33:30: 30:31:c6:0c:ed:be:7a:81:31:07:bc:ed:f2:0d:0d:88:51:4f: 80:bc:e0:66:ba:88:79:47:ab:7b:50:dc:b6:c0:a3:6d:5a:88: 9b:da:4f:2c:c4:6c:61:fd:e8:f0:60:41:8e:2a:39:d4:34:07: 3f:c7:ac:d5:b3:42:6a:20:d3:7f:4e:80:6a:df:e2:a7:9d:c9: ed:90:50:d4:8a:3f:6a:b3:52:86:55:6a:eb:c9:d9:0a:65:a9: 19:8c:83:94:98:84:39:04:63:60:3d:ba:90:db:f1:f1:33:5e: 8a:a1:f9:6c:d4:3f:c0:81:4d:25:d9:90:bb:9b:5d:71:cc:41: 88:39:bc:6b:cf:18:36:25:17:7f:f7:bc:e4:17:46:08:52:d1: cc:7d:35:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEV0tMf7OXWdhQWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODY4N2M5MTktZWU5Yi00ZjZlLWFlMjctNGEwYzc1ODUxOTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKee2rrCC/6QiSRz4hbv/oBlSJxp+8/oqZfF pBXNp8+XaLk8x3rUyGKAoGNz2mwFEoNiKhUSMvDo8juJNucFvqRkPHPsukcmVQDl 1OROsgYUvyHtmEwBICBsHvmT2A5ZaV9te64dbvxnvQrEoe4ScPjJe2x6q6gf/Q+s FllwH7HuWwIuF8f8VcstoSHW7gIl6HKQIPjz65I88M51TJ61mH5r/tAas2m9nLkU 9YsObJcLi9RfG8uYw0FOIhO+0fMYZMlrUM4e1HrgJObKlw4fMax+iHT7o2AVCutR jkZqFRhlSWQ+6b9CfN/iQ8oCXGbR3u35/fnkmPCA+6WOAKDIMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyTU38B48oaCVfuDJ5CWxfZuv9RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzhkNzE3YTQtNDA4My0z MjBiLThhYTgtMzIxYjEwOWYwNTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUzkwEjzTzELlP8f6GmuixkDg1KSyuhrJqghYgkSO++Dd0TR5wCAiUP CRWNmrsIDn2ZjpNjlW5seAwRgd687Q3idvV0BGGnF5odQ0eA7F/KJdgXJ/VejX0B +o5o7Eiorq2/AZRaPedHY6QzMDAxxgztvnqBMQe87fINDYhRT4C84Ga6iHlHq3tQ 3LbAo21aiJvaTyzEbGH96PBgQY4qOdQ0Bz/HrNWzQmog039OgGrf4qedye2QUNSK P2qzUoZVauvJ2QplqRmMg5SYhDkEY2A9upDb8fEzXoqh+WzUP8CBTSXZkLubXXHM QYg5vGvPGDYlF3/3vOQXRghS0cx9NXM= -----END CERTIFICATE-----Generated at Sat Jul 26 00:09:10 2025 by rpki-client