$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3623923-43d1-3859-aa9c-58474b07061e.roa File: f3623923-43d1-3859-aa9c-58474b07061e.roa (raw, json) Hash identifier: BM3BH5AQEv7HQDBNQhYYdPsVjhLVehmhnV/e/BT6JU0= Subject key identifier: 93:B6:03:A2:4B:DD:F6:3C:07:BE:CF:91:41:A5:1F:3B:B5:3C:4B:A8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84115781785FEA9090643B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3623923-43d1-3859-aa9c-58474b07061e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 184.21.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:57:81:78:5f:ea:90:90:64:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=cd1209bd-ab53-4c4e-a433-ad719addcb1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f9:d0:b2:e0:5f:09:4c:ad:cf:23:c0:05:e0: 38:75:ad:67:a4:12:0d:58:53:a2:36:8f:00:01:44: 23:2e:1d:c6:c3:da:ac:ce:0a:36:87:ed:bd:ad:72: bf:a6:82:8b:be:61:56:c6:9f:39:17:88:8c:92:a1: 1e:be:6a:77:5e:77:e5:c6:a1:fc:11:a7:8c:d7:3c: 36:ec:76:ae:93:9e:82:47:fd:e8:ad:32:be:38:0e: 58:85:af:f8:74:6e:93:1e:b0:da:38:06:af:fb:c2: d6:6f:79:62:98:28:0f:6d:28:d8:42:82:95:49:b7: 6e:e2:33:79:fb:8f:7a:d7:42:aa:00:ed:58:c6:a3: fa:63:81:91:ff:31:7b:9d:b1:06:cb:b7:dd:b5:84: ca:89:2a:38:c3:36:98:59:fb:1f:91:60:bc:53:84: da:78:65:e7:c6:81:21:8c:3e:07:64:ae:33:5d:59: b7:e0:8d:aa:e7:a2:d5:52:f8:a8:43:1c:e6:14:c0: f5:7a:44:c8:0f:36:fc:32:64:84:81:8c:df:27:22: bd:f4:98:29:1a:30:6a:2c:f5:07:2d:e2:ef:83:89: c3:7d:10:3d:14:70:e0:1a:f6:bf:c2:36:a4:62:88: 4f:d4:09:d0:38:36:5a:7a:c9:cb:d8:cd:a4:43:f1: 7f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B6:03:A2:4B:DD:F6:3C:07:BE:CF:91:41:A5:1F:3B:B5:3C:4B:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3623923-43d1-3859-aa9c-58474b07061e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:84:44:24:31:2b:cf:a2:8d:7a:1d:e5:9d:e3:0f:41:84:b0: 46:ea:3e:df:e1:cd:1c:da:d3:1d:ab:b2:d9:52:4c:d2:a3:64: 15:48:00:93:ce:31:c9:17:61:91:20:50:1c:64:8a:5e:96:ba: 92:f8:7c:b8:5d:d0:35:bf:1f:d8:b6:a5:12:ce:f6:bf:fc:c8: c2:54:53:7c:f8:45:9e:26:cc:7e:74:1c:e8:65:2e:81:ef:e9: 60:27:1f:30:bb:ab:58:9e:b1:f3:b9:b4:43:04:41:f9:9a:bb: b2:38:4d:1d:e3:33:8d:ba:37:52:d2:44:69:10:48:bb:52:1a: 26:1f:78:4e:dc:49:8b:f1:ad:ad:72:4a:4b:d9:69:12:38:57: 87:0b:17:d9:7f:35:37:0e:a1:9b:e0:f6:8f:72:52:05:d3:11: ea:9f:03:68:8a:a8:38:0a:92:1b:89:4f:c6:cb:73:1e:d3:40: 25:2d:ca:ed:15:a7:a2:06:7c:ef:3d:7c:ad:f1:5f:80:21:9e: 41:80:83:58:81:df:f2:1e:a2:e9:2b:3e:d4:25:2a:5f:43:39: 1a:7e:7c:ca:8f:75:34:9e:c1:73:0e:df:7f:b8:bd:27:13:82: 17:ce:e1:be:e1:95:f9:eb:35:ed:25:06:47:a4:40:80:25:ad: f9:13:92:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEVeBeF/qkJBkOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Y2QxMjA5YmQtYWI1My00YzRlLWE0MzMtYWQ3MTlhZGRjYjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PnQsuBfCUytzyPABeA4da1npBINWFOiNo8A AUQjLh3Gw9qszgo2h+29rXK/poKLvmFWxp85F4iMkqEevmp3XnflxqH8EaeM1zw2 7Hauk56CR/3orTK+OA5Yha/4dG6THrDaOAav+8LWb3limCgPbSjYQoKVSbdu4jN5 +49610KqAO1YxqP6Y4GR/zF7nbEGy7fdtYTKiSo4wzaYWfsfkWC8U4TaeGXnxoEh jD4HZK4zXVm34I2q56LVUvioQxzmFMD1ekTIDzb8MmSEgYzfJyK99JgpGjBqLPUH LeLvg4nDfRA9FHDgGva/wjakYohP1AnQODZaesnL2M2kQ/F/kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJO2A6JL3fY8B77PkUGlHzu1PEuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjM2MjM5MjMtNDNkMS0z ODU5LWFhOWMtNTg0NzRiMDcwNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaERCQxK8+ijXod5Z3jD0GEsEbqPt/hzRza0x2rstlSTNKjZBVIAJPO MckXYZEgUBxkil6WupL4fLhd0DW/H9i2pRLO9r/8yMJUU3z4RZ4mzH50HOhlLoHv 6WAnHzC7q1iesfO5tEMEQfmau7I4TR3jM426N1LSRGkQSLtSGiYfeE7cSYvxra1y SkvZaRI4V4cLF9l/NTcOoZvg9o9yUgXTEeqfA2iKqDgKkhuJT8bLcx7TQCUtyu0V p6IGfO89fK3xX4AhnkGAg1iB3/IeoukrPtQlKl9DORp+fMqPdTSewXMO33+4vScT ghfO4b7hlfnrNe0lBkekQIAlrfkTkpk= -----END CERTIFICATE-----Generated at Sat Jul 26 11:40:15 2025 by rpki-client