$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fa1dd27-05ba-3ce5-9800-24e264fda965.roa File: 0fa1dd27-05ba-3ce5-9800-24e264fda965.roa (raw, json) Hash identifier: kEHNaHCJAJ364zTNydoNRfTvzxjesuQH+VC3BqJuzAU= Subject key identifier: E9:58:A1:30:05:18:0F:5C:97:50:6B:82:15:F2:E3:7B:24:ED:8E:0C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB4857002733B74B0AC580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fa1dd27-05ba-3ce5-9800-24e264fda965.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:48:57:00:27:33:b7:4b:0a:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c388ba00-9f67-45a3-b794-2daaa8326c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:f8:2b:ce:af:0f:eb:54:50:b1:59:03:fa: 25:39:8a:b3:05:96:00:7c:bd:df:74:74:b1:3c:a3: e9:1f:d5:09:a7:29:5c:8e:f8:03:81:c3:45:d1:8f: fe:75:e3:b4:93:66:a2:eb:94:3e:bf:f5:ed:84:bf: 20:00:41:4b:6b:5a:de:d9:cb:32:ba:6c:71:85:54: ec:64:2b:09:b1:9f:86:70:7b:66:b8:7a:ae:0b:5b: e2:77:dd:55:f9:a1:12:28:f3:c5:43:dd:c2:3e:dd: a3:dc:0e:fc:fd:78:c8:64:47:05:89:72:a4:46:87: b3:35:db:f8:7e:bf:c7:71:f1:67:b0:0f:61:c0:69: a7:85:79:f4:cb:9d:19:e5:c2:b1:31:9b:10:74:80: 84:39:d2:60:f3:9d:6f:18:0c:1f:89:fe:21:90:0f: e8:7f:55:11:32:0c:69:e0:36:32:eb:ca:93:e6:73: b2:b6:b2:39:d1:06:3c:5c:7c:38:ce:33:fc:de:3f: 49:30:0f:ac:a0:75:38:57:da:d2:af:ed:c8:40:c7: a1:b1:0e:3a:ee:62:6e:23:1c:d8:61:96:de:93:b8: 4a:4f:a9:1b:ae:83:b7:c7:e9:57:8c:64:90:87:50: a5:3a:c0:08:e5:68:3e:91:19:6f:16:74:84:bf:49: 98:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:58:A1:30:05:18:0F:5C:97:50:6B:82:15:F2:E3:7B:24:ED:8E:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fa1dd27-05ba-3ce5-9800-24e264fda965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:64:58:be:bc:9d:e3:b1:e9:91:b5:ad:3e:19:e3:0d:b5:ac: 13:aa:9f:cc:3c:d6:e9:84:62:cb:4c:65:8e:9a:12:5e:c2:03: 34:fc:1d:70:83:bf:ce:70:90:34:fc:65:7f:59:ac:2b:b8:5c: a7:1f:1c:ec:47:9d:ac:2f:e2:30:2b:8b:ff:0c:7c:f6:9a:ae: 8c:49:7c:f9:73:bf:15:8b:18:76:4d:59:95:63:1e:52:30:27: 2b:a7:7d:77:25:76:cc:1b:fe:70:94:b9:04:ca:fc:50:03:5a: 54:af:ed:d1:f7:30:1b:36:7a:07:9a:49:f0:a1:cb:3f:49:b8: ae:98:70:36:d9:c3:3c:53:53:9e:46:d9:d6:ad:3a:50:68:49: 65:b2:b3:b2:b3:0e:8e:de:45:1c:ff:c7:dc:22:df:9a:e6:5d: ce:ba:24:96:ab:d4:fc:80:5b:a4:96:56:42:56:1a:9a:ff:65: 18:f6:e8:53:5e:61:c7:76:a9:c1:18:8d:b9:b9:67:bb:57:c7: d0:81:0e:48:b7:39:9e:8c:a4:46:dc:14:e7:be:63:ed:d9:c8: f5:77:5c:d5:41:84:d6:dd:14:84:0a:f3:04:64:64:66:c4:f6: f4:ba:67:df:c7:75:3d:ca:02:9f:08:f6:a7:2a:42:38:aa:5d: eb:7a:c6:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku0hXACczt0sKxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzM4OGJhMDAtOWY2Ny00NWEzLWI3OTQtMmRhYWE4MzI2YzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGD4K86vD+tUULFZA/olOYqzBZYAfL3fdHSx PKPpH9UJpylcjvgDgcNF0Y/+deO0k2ai65Q+v/XthL8gAEFLa1re2csyumxxhVTs ZCsJsZ+GcHtmuHquC1vid91V+aESKPPFQ93CPt2j3A78/XjIZEcFiXKkRoezNdv4 fr/HcfFnsA9hwGmnhXn0y50Z5cKxMZsQdICEOdJg851vGAwfif4hkA/of1URMgxp 4DYy68qT5nOytrI50QY8XHw4zjP83j9JMA+soHU4V9rSr+3IQMehsQ467mJuIxzY YZbek7hKT6kbroO3x+lXjGSQh1ClOsAI5Wg+kRlvFnSEv0mYxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlYoTAFGA9cl1BrghXy43sk7Y4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGZhMWRkMjctMDViYS0z Y2U1LTk4MDAtMjRlMjY0ZmRhOTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANZkWL68neOx6ZG1rT4Z4w21rBOqn8w81umEYstMZY6aEl7CAzT8HXCD v85wkDT8ZX9ZrCu4XKcfHOxHnawv4jAri/8MfPaaroxJfPlzvxWLGHZNWZVjHlIw JyunfXcldswb/nCUuQTK/FADWlSv7dH3MBs2egeaSfChyz9JuK6YcDbZwzxTU55G 2datOlBoSWWys7KzDo7eRRz/x9wi35rmXc66JJar1PyAW6SWVkJWGpr/ZRj26FNe Ycd2qcEYjbm5Z7tXx9CBDki3OZ6MpEbcFOe+Y+3ZyPV3XNVBhNbdFIQK8wRkZGbE 9vS6Z9/HdT3KAp8I9qcqQjiqXet6xlI= -----END CERTIFICATE-----Generated at Sun Apr 27 17:54:15 2025 by rpki-client