$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b20849d-7deb-343b-a92f-51032655f0a5.roa File: 2b20849d-7deb-343b-a92f-51032655f0a5.roa (raw, json) Hash identifier: kKdkW4F/qwT5TUlv5uzG8dqYFgOLoGuOIfEsJI/J6Jg= Subject key identifier: C1:2F:9B:32:8C:98:D6:42:BD:C0:E8:F0:E4:60:44:2A:4D:E1:06:65 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8410FAC176340446A51EC980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b20849d-7deb-343b-a92f-51032655f0a5.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 40306 IP address blocks: 184.20.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:fa:c1:76:34:04:46:a5:1e:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=d324ac36-1018-4423-92a5-5fde74da3c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5f:1f:07:2e:4b:bf:d3:4b:49:d4:7b:23:5f: fc:b4:4a:ee:1e:76:cb:e7:c3:bf:6d:85:98:d0:2a: 66:51:02:55:b0:86:b1:70:d5:94:6d:cd:da:09:fe: 3a:e6:11:a8:f0:09:f0:21:9b:c2:e0:80:34:bf:61: d5:bb:4c:22:01:75:11:98:ad:56:b2:be:c8:ee:bd: 07:fd:cd:f9:89:a9:e2:21:70:9d:71:e7:c9:a3:18: 7a:3c:da:fa:07:5f:2a:b0:92:74:54:91:f2:13:29: 7b:c2:cb:9f:63:b3:4d:f5:ac:60:c9:f8:67:4c:de: 5d:bd:75:75:b8:c6:ca:81:92:1c:7a:bc:57:4b:e0: 8f:bc:95:86:57:c1:1c:37:7a:15:af:de:4b:36:4e: e5:61:9a:c9:86:93:dd:e9:98:a7:a3:63:4b:64:73: e3:7c:44:62:19:40:3d:e6:e5:38:a9:b2:ba:18:da: 68:6c:27:df:80:32:6d:85:02:20:df:f9:c3:23:9f: ba:bb:b7:cd:6a:c5:08:ca:ac:21:22:44:4d:27:2d: 57:2a:6f:ac:60:72:8c:24:f0:6d:20:b6:34:cf:3b: 15:84:25:e0:11:4f:51:b7:95:b0:ca:fb:56:64:d7: e8:d5:54:6e:83:17:1c:03:fa:27:1a:d8:7e:22:59: fe:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2F:9B:32:8C:98:D6:42:BD:C0:E8:F0:E4:60:44:2A:4D:E1:06:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b20849d-7deb-343b-a92f-51032655f0a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:b3:95:b9:77:1e:ed:60:31:5f:f2:3a:ef:74:70:f7:21:0f: 58:dc:27:34:9a:00:4c:9d:bb:40:c2:7b:e7:d8:c5:7c:bc:e3: 97:a9:43:de:09:1b:4f:b0:87:59:cc:4c:46:b3:d4:12:b7:49: 33:a7:cd:e6:d8:20:31:4d:9c:1d:2d:79:7e:d1:29:39:1b:8d: a3:35:26:53:51:ce:b2:23:5b:d3:e3:0c:72:df:53:0a:6e:67: d4:a2:b6:6e:2c:71:80:24:7c:db:d1:0e:3e:6e:0e:90:bc:08: 4a:5a:8a:e2:e1:46:80:31:f9:09:e4:dd:fe:af:05:90:5b:21: 6e:fd:26:f7:b9:1d:30:25:8a:c6:80:dd:48:45:9a:fb:05:11: f0:4b:6b:33:14:07:61:e9:6a:aa:f7:a0:ca:15:d2:00:8c:00: 9a:f6:16:7f:c6:2e:bd:87:67:d9:63:d2:0d:91:a0:08:e7:09: d2:fc:5b:a4:f9:46:22:73:50:1e:6a:4e:f6:36:2b:09:44:2c: b2:8b:aa:7a:94:38:76:96:38:da:93:16:2d:b5:f1:02:cd:a5: 16:47:6d:39:df:62:6e:8d:d1:43:0b:50:f9:34:22:ba:0c:11: c9:dd:3b:0e:4a:59:04:ff:c8:99:b3:31:52:fa:87:31:4e:f0: a2:6f:34:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEPrBdjQERqUeyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDMyNGFjMzYtMTAxOC00NDIzLTkyYTUtNWZkZTc0ZGEzYzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg18fBy5Lv9NLSdR7I1/8tEruHnbL58O/bYWY 0CpmUQJVsIaxcNWUbc3aCf465hGo8AnwIZvC4IA0v2HVu0wiAXURmK1Wsr7I7r0H /c35ianiIXCdcefJoxh6PNr6B18qsJJ0VJHyEyl7wsufY7NN9axgyfhnTN5dvXV1 uMbKgZIcerxXS+CPvJWGV8EcN3oVr95LNk7lYZrJhpPd6Zino2NLZHPjfERiGUA9 5uU4qbK6GNpobCffgDJthQIg3/nDI5+6u7fNasUIyqwhIkRNJy1XKm+sYHKMJPBt ILY0zzsVhCXgEU9Rt5WwyvtWZNfo1VRugxccA/onGth+Iln+tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEvmzKMmNZCvcDo8ORgRCpN4QZlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmIyMDg0OWQtN2RlYi0z NDNiLWE5MmYtNTEwMzI2NTVmMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALizlbl3Hu1gMV/yOu90cPchD1jcJzSaAEydu0DCe+fYxXy845epQ94J G0+wh1nMTEaz1BK3STOnzebYIDFNnB0teX7RKTkbjaM1JlNRzrIjW9PjDHLfUwpu Z9Sitm4scYAkfNvRDj5uDpC8CEpaiuLhRoAx+Qnk3f6vBZBbIW79Jve5HTAlisaA 3UhFmvsFEfBLazMUB2Hpaqr3oMoV0gCMAJr2Fn/GLr2HZ9lj0g2RoAjnCdL8W6T5 RiJzUB5qTvY2KwlELLKLqnqUOHaWONqTFi218QLNpRZHbTnfYm6N0UMLUPk0IroM EcndOw5KWQT/yJmzMVL6hzFO8KJvNC0= -----END CERTIFICATE-----Generated at Wed Aug 6 18:47:21 2025 by rpki-client