$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33de9bf9-81a1-3356-b476-7ddf45e46bf3.roa File: 33de9bf9-81a1-3356-b476-7ddf45e46bf3.roa (raw, json) Hash identifier: Bhr1JorglVJDxexr9FQd+gs5nMs1Vwl4Z7nJhzk6P+Q= Subject key identifier: A3:50:09:20:CA:BA:8D:1E:20:B4:95:B5:A8:5E:61:4D:F5:C7:D6:BF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB42E883B1147CD70F8400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33de9bf9-81a1-3356-b476-7ddf45e46bf3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.20.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:42:e8:83:b1:14:7c:d7:0f:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5a07d53e-eef6-46af-8825-28ad644825d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c1:1f:b0:a8:6f:ea:6f:cd:b6:46:07:e3:72: 8b:91:14:dc:76:7b:88:01:f8:14:a1:af:58:55:3e: 71:58:12:1f:64:85:cf:f9:9f:c8:f3:fb:18:e9:4f: 52:29:31:6e:27:7f:2f:98:3b:34:f0:fd:8f:59:69: fc:a5:f6:b6:aa:65:12:77:9f:6e:02:30:d3:c8:92: 93:76:4f:0d:49:1f:b3:ba:be:aa:31:db:55:50:dc: 6b:a6:5c:20:43:00:ab:28:1b:24:f8:3c:6e:56:8c: 78:2d:d0:2f:0d:82:e6:2a:3c:57:4b:0a:2c:db:43: f2:69:7b:2e:2d:40:89:ce:c7:42:f6:30:05:2f:9b: 9e:ea:b4:43:7b:5c:cb:7d:17:df:5c:b7:11:5a:f2: a2:a2:cd:7b:05:44:59:57:ed:b2:14:41:cc:2a:8f: 3c:8d:63:7f:25:93:5b:60:86:24:ce:35:e3:be:75: b2:d5:17:47:da:c6:a7:b2:1b:e7:16:30:cd:59:d1: e4:4b:6a:68:f0:e4:84:e7:00:c2:4e:74:f7:b5:6f: 10:6f:a8:c8:8b:23:96:da:fe:f3:5d:ff:49:aa:07: 9e:f3:da:b7:ba:af:2d:8d:06:8b:cd:b3:07:d1:0c: 33:a6:44:f3:4a:4e:68:72:20:47:12:81:4b:e4:58: a3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:50:09:20:CA:BA:8D:1E:20:B4:95:B5:A8:5E:61:4D:F5:C7:D6:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33de9bf9-81a1-3356-b476-7ddf45e46bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:70:d6:a0:a2:98:12:15:b2:18:d3:11:7a:63:2d:c2:45:16: 23:ad:ba:09:ac:29:bf:20:1e:cd:ba:2d:a2:a6:46:7b:35:f5: e6:90:9d:fa:ea:82:ca:2f:19:3a:67:f0:46:f6:04:10:a8:28: 92:3f:f0:77:93:c0:17:ca:e2:e1:d6:85:99:4c:f7:cc:48:3b: 4e:8a:51:3b:ec:5c:2a:1d:9b:88:9b:23:56:ec:8d:95:2f:e3: 6f:4a:5a:7e:ee:26:b7:58:26:58:cf:5f:db:c0:15:3e:c5:19: b6:a6:fa:cf:0b:47:cf:23:32:ed:4c:03:4c:97:ff:1e:6f:f5: de:5a:a6:43:a7:df:e2:bd:af:64:15:d4:ba:7b:f7:eb:9d:0e: 3c:cd:45:26:6b:10:57:5e:1e:35:78:33:d9:26:1b:73:cc:16: a8:0d:84:df:c2:c2:98:6e:6e:0e:25:89:f3:be:04:57:f0:e8: b5:12:e4:b2:c9:82:91:4f:94:a4:02:65:84:09:ac:c5:52:91: b5:45:24:f9:12:83:ab:40:71:d5:f0:6c:92:e1:eb:4b:36:8d: 08:b5:e9:81:0f:c9:59:fc:f7:d5:90:91:8a:14:d1:5f:5a:c1: b5:02:fc:bd:91:2e:65:19:2c:f4:a7:14:4b:dd:f4:92:8a:7e: fb:a8:35:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku0Log7EUfNcPhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NWEwN2Q1M2UtZWVmNi00NmFmLTg4MjUtMjhhZDY0NDgyNWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsEfsKhv6m/NtkYH43KLkRTcdnuIAfgUoa9Y VT5xWBIfZIXP+Z/I8/sY6U9SKTFuJ38vmDs08P2PWWn8pfa2qmUSd59uAjDTyJKT dk8NSR+zur6qMdtVUNxrplwgQwCrKBsk+DxuVox4LdAvDYLmKjxXSwos20PyaXsu LUCJzsdC9jAFL5ue6rRDe1zLfRffXLcRWvKios17BURZV+2yFEHMKo88jWN/JZNb YIYkzjXjvnWy1RdH2sanshvnFjDNWdHkS2po8OSE5wDCTnT3tW8Qb6jIiyOW2v7z Xf9Jqgee89q3uq8tjQaLzbMH0QwzpkTzSk5ociBHEoFL5FijbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNQCSDKuo0eILSVtaheYU31x9a/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzNkZTliZjktODFhMS0z MzU2LWI0NzYtN2RkZjQ1ZTQ2YmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBS+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpw1qCimBIVshjTEXpjLcJFFiOtugmsKb8gHs26LaKmRns19eaQnfrq gsovGTpn8Eb2BBCoKJI/8HeTwBfK4uHWhZlM98xIO06KUTvsXCodm4ibI1bsjZUv 429KWn7uJrdYJljPX9vAFT7FGbam+s8LR88jMu1MA0yX/x5v9d5apkOn3+K9r2QV 1Lp79+udDjzNRSZrEFdeHjV4M9kmG3PMFqgNhN/Cwphubg4lifO+BFfw6LUS5LLJ gpFPlKQCZYQJrMVSkbVFJPkSg6tAcdXwbJLh60s2jQi16YEPyVn899WQkYoU0V9a wbUC/L2RLmUZLPSnFEvd9JKKfvuoNQo= -----END CERTIFICATE-----Generated at Sun Apr 27 01:59:16 2025 by rpki-client