$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0948cc72-315a-3ad7-bf7f-71d3dd1f1e66.roa File: 0948cc72-315a-3ad7-bf7f-71d3dd1f1e66.roa (raw, json) Hash identifier: 35gTn1uEdkIFp91bF7QYQU/nb/td3sPUtwl5D+nZVsI= Subject key identifier: BD:1D:36:8D:96:B6:1F:31:57:25:1C:10:FE:6C:12:45:54:63:60:48 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB55C01F5013297A7F0F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0948cc72-315a-3ad7-bf7f-71d3dd1f1e66.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.63.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:55:c0:1f:50:13:29:7a:7f:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c05ba4da-94b3-4eb4-971d-b6f9d4421b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:46:3e:1c:c7:9d:b6:a1:a6:12:04:d1:30:11: a8:65:e6:34:47:08:29:38:25:cf:72:58:02:b5:bd: 16:71:29:22:ec:f4:d4:76:3e:ab:ec:f8:8f:74:ae: 81:4f:93:1a:7b:c9:06:04:47:0f:43:00:5a:1b:ae: 07:cb:96:15:cf:df:9f:6d:e0:c4:9b:34:de:94:8a: 3c:b5:42:08:80:e5:68:73:36:2b:03:ab:ca:f7:36: 19:0d:2a:11:a1:8b:de:92:7b:fd:94:ff:24:21:a8: 30:19:8a:f3:5b:5b:ac:74:f5:08:41:02:6a:69:72: 9c:57:2c:cb:73:15:7c:d4:59:af:91:e1:70:fb:8d: 18:a1:e3:cb:4d:26:3a:d3:0e:48:78:ce:de:a2:30: 2e:1a:8f:17:3d:92:7c:62:56:f2:ee:f9:e0:e6:34: 26:9f:3b:6c:74:a1:8e:8e:11:4b:1d:a5:5c:8e:35: 97:88:22:fa:f3:5f:98:78:28:a8:c8:cd:58:8a:df: 34:99:11:3f:e0:a5:0a:0b:eb:0c:55:56:fc:7f:5e: 39:3f:f4:91:93:73:77:d1:d6:df:ae:bd:cf:97:ce: af:27:92:fd:58:5b:32:16:3f:68:3c:e7:9d:18:9e: 9a:39:a3:9c:4d:71:8a:07:1a:92:b0:22:e7:1c:63: b5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1D:36:8D:96:B6:1F:31:57:25:1C:10:FE:6C:12:45:54:63:60:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0948cc72-315a-3ad7-bf7f-71d3dd1f1e66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.63.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:53:f2:49:bb:0a:6d:2d:c0:4b:20:74:1b:72:42:fb:6d:5e: eb:33:f4:e3:a1:fb:ad:95:44:c8:1d:2a:20:2d:40:55:65:40: cc:dd:89:22:a9:ec:89:b7:4f:75:67:b7:09:6c:d0:6b:43:7c: 46:84:70:0e:a9:b1:4e:39:8e:c4:7a:a2:82:e8:c5:16:4a:15: 09:27:99:1e:9e:4d:e8:30:2b:61:60:e5:e8:49:86:3a:16:b6: 2c:3a:35:ef:0c:56:33:28:43:ec:4d:c9:7c:b1:2f:9b:ad:ce: 14:19:5a:32:c3:83:2e:b2:78:0f:66:66:13:66:18:7b:72:64: f0:5d:e7:54:26:ec:60:7f:2d:d9:25:5d:9b:b1:24:0d:57:f8: 70:d9:de:ee:75:46:5b:95:73:4e:68:6d:5b:83:d4:cf:02:91: 29:ab:02:04:93:98:a4:1c:c6:85:88:7b:17:d9:3e:68:56:c1: a4:1d:a1:30:d7:a2:be:7b:22:c6:2e:6d:e8:3e:6c:fb:38:25: ad:9b:59:f1:11:fb:7d:79:c7:e5:db:19:ea:20:91:12:21:7e: 87:3f:3f:89:fa:d6:d1:00:d4:a5:73:02:ec:e0:60:19:0f:4b: 80:7e:8c:3d:82:c4:d1:ff:d5:98:e6:11:c0:4c:50:9c:76:08: dd:fc:89:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1XAH1ATKXp/DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzA1YmE0ZGEtOTRiMy00ZWI0LTk3MWQtYjZmOWQ0NDIxYjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0Y+HMedtqGmEgTRMBGoZeY0RwgpOCXPclgC tb0WcSki7PTUdj6r7PiPdK6BT5Mae8kGBEcPQwBaG64Hy5YVz9+fbeDEmzTelIo8 tUIIgOVoczYrA6vK9zYZDSoRoYveknv9lP8kIagwGYrzW1usdPUIQQJqaXKcVyzL cxV81FmvkeFw+40YoePLTSY60w5IeM7eojAuGo8XPZJ8Ylby7vng5jQmnztsdKGO jhFLHaVcjjWXiCL681+YeCioyM1Yit80mRE/4KUKC+sMVVb8f145P/SRk3N30dbf rr3Pl86vJ5L9WFsyFj9oPOedGJ6aOaOcTXGKBxqSsCLnHGO1+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0dNo2Wth8xVyUcEP5sEkVUY2BIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDk0OGNjNzItMzE1YS0z YWQ3LWJmN2YtNzFkM2RkMWYxZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVT8km7Cm0twEsgdBtyQvttXusz9OOh+62VRMgdKiAtQFVlQMzdiSKp 7Im3T3Vntwls0GtDfEaEcA6psU45jsR6ooLoxRZKFQknmR6eTegwK2Fg5ehJhjoW tiw6Ne8MVjMoQ+xNyXyxL5utzhQZWjLDgy6yeA9mZhNmGHtyZPBd51Qm7GB/Ldkl XZuxJA1X+HDZ3u51RluVc05obVuD1M8CkSmrAgSTmKQcxoWIexfZPmhWwaQdoTDX or57IsYubeg+bPs4Ja2bWfER+315x+XbGeogkRIhfoc/P4n61tEA1KVzAuzgYBkP S4B+jD2CxNH/1ZjmEcBMUJx2CN38iZQ= -----END CERTIFICATE-----Generated at Mon Apr 28 02:17:04 2025 by rpki-client