$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e742d3f-3ea8-36b0-9c4e-c9d6df449087.roa File: 1e742d3f-3ea8-36b0-9c4e-c9d6df449087.roa (raw, json) Hash identifier: 8m2h/GBLXEqQLku5zCdSArMa1GErYQXVV1ncUqRD7Z8= Subject key identifier: 0C:1F:3C:95:07:F8:45:FA:00:F2:93:98:77:CC:5B:47:31:DE:3B:AF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB445661E248672B3B1C00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e742d3f-3ea8-36b0-9c4e-c9d6df449087.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.20.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:44:56:61:e2:48:67:2b:3b:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ddb3794e-f5f6-401b-aaa2-c045eeda51ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cf:08:77:15:68:a3:7c:d7:c0:bf:00:2d:4a: 47:43:18:66:dd:b6:1f:e4:46:b1:df:53:90:d7:a6: 3f:94:37:25:00:31:b5:2c:07:c7:a9:02:e5:f7:f3: 4e:51:98:1b:13:c0:cc:b5:79:8a:d0:d6:48:f1:e2: 35:2d:81:90:ed:1a:cf:5c:eb:bd:78:26:cb:ca:ba: 09:c4:49:90:b3:52:93:9e:fc:94:73:5b:19:0e:f7: 4b:7d:72:ed:f9:5b:33:cd:1f:ea:ee:6a:14:15:9f: a9:36:0d:d1:b4:b1:07:83:4f:d7:39:94:20:ab:31: c7:5f:b0:ea:a1:c7:aa:a4:68:59:54:c8:2e:40:42: 10:f4:35:5a:ed:f9:3a:32:c5:cd:f1:04:96:d7:6e: 68:bb:99:87:ae:c1:9f:7a:1f:11:c0:4d:9d:cf:d5: 73:5e:a6:7f:b1:e4:3e:8a:b9:57:ec:d2:9c:e5:63: d4:1b:09:d0:37:d3:24:b2:c6:6f:d9:63:a0:1f:31: 5f:36:2d:06:e1:ee:8f:58:1c:9e:a5:53:0c:d9:6f: d2:00:0b:df:56:79:40:00:97:cf:8a:78:c6:a2:4c: 12:da:ab:6e:05:d0:40:7d:a6:c2:59:31:07:97:3f: 91:cf:40:66:ca:86:6b:dc:8f:fa:bb:9c:39:0d:5a: 97:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1F:3C:95:07:F8:45:FA:00:F2:93:98:77:CC:5B:47:31:DE:3B:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e742d3f-3ea8-36b0-9c4e-c9d6df449087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:fa:88:32:45:6d:da:32:db:e8:66:19:63:4b:96:48:5b:bf: 24:0f:5d:54:dd:71:f4:12:19:cb:5c:25:30:4f:89:13:48:29: f1:72:fa:0f:b9:9b:8b:68:c6:a8:7e:72:b4:fb:47:a3:1c:ba: 97:31:cd:76:61:3c:12:6a:96:b4:88:8d:22:f1:b9:84:4a:82: 44:cc:c2:4e:77:e0:b9:d3:61:66:fc:eb:1a:ed:da:83:8b:bd: 9c:77:cd:0e:b9:0c:e4:59:9f:8e:ba:fe:a0:21:65:7a:68:e5: c8:2e:79:a4:de:52:c3:a2:76:fc:43:ee:32:24:c3:51:37:a4: 74:ae:e0:5f:1a:52:87:32:66:c1:34:44:41:5b:09:32:c3:e2: ea:de:f6:f0:af:5f:da:1f:aa:c0:fe:d2:29:c2:84:31:5f:c0: 47:1a:f4:b3:d7:3b:c0:63:99:78:7d:eb:9e:78:4f:5b:15:96: 98:d5:a8:a5:26:af:6e:71:4b:d5:90:18:2d:4e:0f:22:36:52: fb:ff:8e:9b:1e:7d:25:42:36:8c:35:45:f5:88:3d:a0:ff:81: e5:46:ea:ba:a6:24:32:57:e8:30:c6:dc:48:5d:6d:9b:87:69: 94:a9:00:62:59:59:e8:72:5c:38:1c:5e:a0:27:ec:c2:a5:bd: 54:fc:5b:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku0RWYeJIZys7HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZGRiMzc5NGUtZjVmNi00MDFiLWFhYTItYzA0NWVlZGE1MWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM8IdxVoo3zXwL8ALUpHQxhm3bYf5Eax31OQ 16Y/lDclADG1LAfHqQLl9/NOUZgbE8DMtXmK0NZI8eI1LYGQ7RrPXOu9eCbLyroJ xEmQs1KTnvyUc1sZDvdLfXLt+VszzR/q7moUFZ+pNg3RtLEHg0/XOZQgqzHHX7Dq oceqpGhZVMguQEIQ9DVa7fk6MsXN8QSW125ou5mHrsGfeh8RwE2dz9VzXqZ/seQ+ irlX7NKc5WPUGwnQN9MkssZv2WOgHzFfNi0G4e6PWByepVMM2W/SAAvfVnlAAJfP injGokwS2qtuBdBAfabCWTEHlz+Rz0BmyoZr3I/6u5w5DVqX7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwfPJUH+EX6APKTmHfMW0cx3juvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWU3NDJkM2YtM2VhOC0z NmIwLTljNGUtYzlkNmRmNDQ5MDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL6iDJFbdoy2+hmGWNLlkhbvyQPXVTdcfQSGctcJTBPiRNIKfFy+g+5 m4toxqh+crT7R6McupcxzXZhPBJqlrSIjSLxuYRKgkTMwk534LnTYWb86xrt2oOL vZx3zQ65DORZn466/qAhZXpo5cgueaTeUsOidvxD7jIkw1E3pHSu4F8aUocyZsE0 REFbCTLD4ure9vCvX9ofqsD+0inChDFfwEca9LPXO8BjmXh96554T1sVlpjVqKUm r25xS9WQGC1ODyI2Uvv/jpsefSVCNow1RfWIPaD/geVG6rqmJDJX6DDG3EhdbZuH aZSpAGJZWehyXDgcXqAn7MKlvVT8W84= -----END CERTIFICATE-----Generated at Mon Apr 28 00:37:44 2025 by rpki-client