$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85c6a687-0218-3be1-a801-fcc7c4cc76a7.roa File: 85c6a687-0218-3be1-a801-fcc7c4cc76a7.roa (raw, json) Hash identifier: TUgPPJ0klMtBVWT5vrlWgrjOn3RwJAgIiSY3s7l/to0= Subject key identifier: EC:DB:0B:29:9F:4A:8C:79:C9:DA:02:F8:B5:2F:AE:8F:94:04:D5:6C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84119843736564C646641340 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85c6a687-0218-3be1-a801-fcc7c4cc76a7.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 40306 IP address blocks: 184.63.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:98:43:73:65:64:c6:46:64:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ee1c22b5-f909-4555-98e3-da338ef42ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:37:a8:72:14:41:36:af:7b:e9:fa:5d:7e:8e: 53:cf:08:2f:19:06:d7:8e:77:ae:90:70:c5:90:69: 10:85:f0:c0:18:73:8e:bf:ad:3e:9f:54:7f:62:9f: d2:ab:55:e5:20:2b:57:24:d1:86:12:e0:d3:6c:73: 39:99:4c:df:0f:07:26:1b:62:5b:71:bd:06:ec:df: bf:26:b0:db:ca:d3:59:8f:78:54:d6:ee:e8:52:1f: 85:bf:96:6e:05:f0:ec:74:66:ab:82:fd:e6:6e:ec: 96:f6:d9:35:ac:81:02:86:e5:1b:d8:05:39:c6:5e: d4:de:dc:47:31:10:81:13:a3:37:30:da:35:5e:65: bd:25:f9:3f:06:ea:00:41:af:3f:22:7e:8f:0b:29: 15:7c:5b:86:52:01:1e:15:e4:2f:c2:c9:b6:eb:be: 48:ed:f2:36:85:33:34:74:de:51:bb:a9:5e:de:53: 98:56:7a:6b:91:11:bc:78:f8:34:9a:92:34:37:18: ca:85:e7:c5:4d:34:76:53:78:e4:9a:21:21:8b:45: ca:5b:bc:e5:3a:17:85:e9:c7:73:10:a2:31:78:82: 30:e1:56:85:f5:62:bb:7f:75:3d:8a:dd:e4:ff:bd: 13:da:33:40:50:91:35:b8:7a:4e:30:be:8d:91:cd: c3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DB:0B:29:9F:4A:8C:79:C9:DA:02:F8:B5:2F:AE:8F:94:04:D5:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85c6a687-0218-3be1-a801-fcc7c4cc76a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.63.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:bc:a6:3d:3c:07:86:4a:ab:06:d2:c4:e2:7a:59:4a:20:8a: 58:85:d7:10:52:50:3a:83:fe:68:3a:19:d1:b4:96:76:bc:52: ff:f9:aa:4f:31:03:b8:26:ef:34:f1:90:d0:2a:fc:17:61:7c: 34:a4:7e:9e:04:5c:40:d5:d8:1c:fc:6c:5f:4b:ec:78:7f:3a: 51:7f:a1:61:9d:c5:0a:76:66:6f:44:8a:e4:64:6e:e7:bf:1c: b0:2a:e7:d8:67:91:34:33:58:82:d2:e9:78:51:c8:06:5c:aa: f9:28:86:4a:98:04:97:32:cc:16:92:13:ab:fe:e9:af:d1:62: a5:32:74:f1:26:a0:12:1e:5d:20:8a:e6:4e:ef:6f:5e:d0:b0: f8:47:90:d6:79:e6:7b:a1:18:b5:e2:df:5a:8a:2f:dc:f8:7e: 7b:0f:17:42:06:f1:70:f8:e3:55:12:61:e1:23:1c:3c:a7:b0: 78:c8:40:26:bd:5e:32:98:58:7b:19:fd:8e:99:78:34:0d:b2: 2a:99:d2:8e:87:9d:39:7a:ae:ea:ac:ea:66:e1:8b:cf:7d:c1: a5:70:7e:68:b5:26:ef:ff:43:0f:21:cd:50:0b:65:05:a9:99: 47:86:1e:c7:31:50:1e:d2:34:ec:03:03:33:8b:99:54:22:b0: 3e:31:a4:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZhDc2VkxkZkE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZWUxYzIyYjUtZjkwOS00NTU1LTk4ZTMtZGEzMzhlZjQyY2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljeochRBNq976fpdfo5TzwgvGQbXjneukHDF kGkQhfDAGHOOv60+n1R/Yp/Sq1XlICtXJNGGEuDTbHM5mUzfDwcmG2Jbcb0G7N+/ JrDbytNZj3hU1u7oUh+Fv5ZuBfDsdGargv3mbuyW9tk1rIEChuUb2AU5xl7U3txH MRCBE6M3MNo1XmW9Jfk/BuoAQa8/In6PCykVfFuGUgEeFeQvwsm2675I7fI2hTM0 dN5Ru6le3lOYVnprkRG8ePg0mpI0NxjKhefFTTR2U3jkmiEhi0XKW7zlOheF6cdz EKIxeIIw4VaF9WK7f3U9it3k/70T2jNAUJE1uHpOML6Nkc3DbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzbCymfSox5ydoC+LUvro+UBNVsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODVjNmE2ODctMDIxOC0z YmUxLWE4MDEtZmNjN2M0Y2M3NmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuD8sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADO8pj08B4ZKqwbSxOJ6WUogiliF1xBSUDqD/mg6GdG0lna8Uv/5qk8x A7gm7zTxkNAq/BdhfDSkfp4EXEDV2Bz8bF9L7Hh/OlF/oWGdxQp2Zm9EiuRkbue/ HLAq59hnkTQzWILS6XhRyAZcqvkohkqYBJcyzBaSE6v+6a/RYqUydPEmoBIeXSCK 5k7vb17QsPhHkNZ55nuhGLXi31qKL9z4fnsPF0IG8XD441USYeEjHDynsHjIQCa9 XjKYWHsZ/Y6ZeDQNsiqZ0o6HnTl6ruqs6mbhi899waVwfmi1Ju//Qw8hzVALZQWp mUeGHscxUB7SNOwDAzOLmVQisD4xpMU= -----END CERTIFICATE-----Generated at Wed Aug 6 16:03:55 2025 by rpki-client