$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a2159d0-619a-3378-87d9-a49babf5d690.roa File: 0a2159d0-619a-3378-87d9-a49babf5d690.roa (raw, json) Hash identifier: KLcmn9XcRcKPs0YTHvzj3T8GBCfdRi1ROMgD1mZzK7o= Subject key identifier: 8C:AB:35:9D:0C:39:63:1E:EB:EC:97:B7:4F:C1:E0:5E:0A:E8:91:11 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9F485B5417C47E4ECE80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a2159d0-619a-3378-87d9-a49babf5d690.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.20.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:9f:48:5b:54:17:c4:7e:4e:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f50ef7ee-61b8-4124-b37a-426276a230b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7a:1b:7f:3c:59:04:e9:4c:f6:78:24:ec:ca: ca:dd:bb:5f:bd:c4:96:45:8d:94:66:e5:b8:b8:0c: 7b:56:f0:40:13:8c:08:de:b8:9b:e8:45:60:5c:38: d8:c3:c3:0a:43:70:70:72:f1:98:78:96:f2:a0:7a: dc:df:a3:0f:93:64:dd:5b:5c:7f:89:36:e0:70:22: d2:60:03:2b:58:bf:a2:f5:2f:e2:79:03:09:bf:4f: ac:6c:68:77:bc:57:f0:62:1c:b0:15:a0:41:83:20: b5:7c:02:00:f2:9c:02:be:d0:72:da:66:dd:3e:be: 6c:73:de:d7:75:57:6f:9e:3b:eb:54:9d:60:53:7c: e8:c1:0e:af:86:91:cb:06:b5:83:fa:80:51:52:29: 3e:34:bb:d6:21:ca:a2:91:8c:7a:1b:64:4c:23:dc: 54:94:39:cf:c2:59:93:ee:3c:d2:37:7c:07:cc:74: e8:e3:6b:cc:2f:38:ee:29:a2:8b:37:89:be:18:2f: bf:d0:bc:48:e8:e0:6a:1b:2b:c7:47:b7:6e:a0:7d: 8a:d3:dc:84:29:27:ac:82:65:80:e5:2e:99:db:13: ca:24:64:06:0f:c7:b2:66:7e:9d:c9:e5:8d:7c:f2: 85:f2:a9:7f:c9:77:b9:bd:35:58:4d:c1:32:bc:b2: 79:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AB:35:9D:0C:39:63:1E:EB:EC:97:B7:4F:C1:E0:5E:0A:E8:91:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a2159d0-619a-3378-87d9-a49babf5d690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:56:43:12:9e:c2:e0:e0:c1:04:29:5f:b7:4b:00:38:7b:7f: 2d:d8:63:e7:28:80:b3:e8:c4:b2:70:e3:1e:5a:cb:87:32:61: 59:76:e2:8e:9e:59:69:b6:b7:3c:9b:b5:7c:72:b8:fa:50:37: 2f:7b:92:37:bb:ec:d6:b5:70:80:d8:40:5c:d1:12:b9:81:88: 1b:f7:eb:ce:19:f2:ef:a6:13:ff:25:f4:73:2d:50:9f:f3:af: 0e:04:ad:47:09:c3:f9:bd:34:b4:06:5a:d3:28:b9:ee:97:7d: 31:ee:b3:0a:3e:3a:c4:88:88:91:e6:54:8b:b7:f6:6e:05:6c: 6e:1a:fe:b5:59:4b:ce:48:61:10:8d:b7:23:ab:d9:7a:cc:8a: 12:7e:ff:01:b3:4e:e6:45:b7:be:9f:0e:8a:60:06:a8:1b:62: 2d:33:19:06:b1:30:30:89:25:05:2a:ec:9d:7e:d0:fc:66:c3: 09:a8:eb:4b:38:37:ff:51:ba:3c:36:8c:09:4a:cd:4e:6a:65: 0e:e0:71:c2:f2:b0:36:64:90:f1:d7:e1:53:c2:09:49:cd:a5: e6:c7:5e:e7:f2:7a:8e:44:c0:87:02:93:59:76:6d:6a:0d:a6: 91:99:1e:1f:92:69:91:45:63:0d:da:c4:8a:46:75:0f:08:96: 35:53:1e:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkup9IW1QXxH5OzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjUwZWY3ZWUtNjFiOC00MTI0LWIzN2EtNDI2Mjc2YTIzMGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3obfzxZBOlM9ngk7MrK3btfvcSWRY2UZuW4 uAx7VvBAE4wI3rib6EVgXDjYw8MKQ3BwcvGYeJbyoHrc36MPk2TdW1x/iTbgcCLS YAMrWL+i9S/ieQMJv0+sbGh3vFfwYhywFaBBgyC1fAIA8pwCvtBy2mbdPr5sc97X dVdvnjvrVJ1gU3zowQ6vhpHLBrWD+oBRUik+NLvWIcqikYx6G2RMI9xUlDnPwlmT 7jzSN3wHzHTo42vMLzjuKaKLN4m+GC+/0LxI6OBqGyvHR7duoH2K09yEKSesgmWA 5S6Z2xPKJGQGD8eyZn6dyeWNfPKF8ql/yXe5vTVYTcEyvLJ5IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyrNZ0MOWMe6+yXt0/B4F4K6JERMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGEyMTU5ZDAtNjE5YS0z Mzc4LTg3ZDktYTQ5YmFiZjVkNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRWQxKewuDgwQQpX7dLADh7fy3YY+cogLPoxLJw4x5ay4cyYVl24o6e WWm2tzybtXxyuPpQNy97kje77Na1cIDYQFzRErmBiBv3684Z8u+mE/8l9HMtUJ/z rw4ErUcJw/m9NLQGWtMoue6XfTHuswo+OsSIiJHmVIu39m4FbG4a/rVZS85IYRCN tyOr2XrMihJ+/wGzTuZFt76fDopgBqgbYi0zGQaxMDCJJQUq7J1+0Pxmwwmo60s4 N/9Rujw2jAlKzU5qZQ7gccLysDZkkPHX4VPCCUnNpebHXufyeo5EwIcCk1l2bWoN ppGZHh+SaZFFYw3axIpGdQ8IljVTHgI= -----END CERTIFICATE-----Generated at Sun Apr 27 16:35:00 2025 by rpki-client