$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/381326b5-14d9-3adb-95ad-7ad2cb09c154.roa File: 381326b5-14d9-3adb-95ad-7ad2cb09c154.roa (raw, json) Hash identifier: Q5qeZzLNXgUpvurc8ik8lDIwUtquFiAxNhwYsnPYuvg= Subject key identifier: 2A:46:E0:5A:F8:02:1B:DC:F9:43:3F:39:C4:90:43:5E:C1:D9:C3:16 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAA3B54E23BC7AAC1E95A8 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/381326b5-14d9-3adb-95ad-7ad2cb09c154.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:a3:b5:4e:23:bc:7a:ac:1e:95:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4d07ee44-11b1-445d-bec9-24bfda31ab47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:01:f8:fd:12:cf:fa:51:05:ab:96:d0:9f: 31:5d:a9:25:d5:22:f7:a9:30:3e:99:ef:56:d8:5b: e1:7b:b3:d8:8e:08:0b:fe:dc:91:68:59:64:33:2a: ae:71:92:4e:6a:fa:96:7f:6c:b8:85:3d:95:66:85: c6:54:ea:ca:aa:0f:4f:bb:d0:1e:f6:8c:75:e3:47: 6d:1f:40:5b:8f:46:e4:fd:9a:ae:18:8a:40:a5:cc: a9:f5:c8:57:dd:7d:aa:01:1f:19:e4:1f:10:c3:36: ff:19:1d:97:97:6c:dc:09:33:b7:1b:12:6b:de:cf: ad:26:01:b7:a2:08:85:4c:76:eb:ee:1a:21:93:f2: 2a:af:f5:5c:3d:05:e8:88:f8:e4:50:09:60:8e:ff: e7:4e:36:42:4c:4f:88:a2:91:a8:44:33:bc:e8:d9: 7a:28:eb:dd:f7:d3:55:d7:a4:d5:44:b5:4e:52:3e: a6:a9:90:89:46:bc:86:5b:03:02:f8:c5:a0:67:d9: ef:66:d2:9e:26:3a:0f:e9:26:94:fd:3b:46:6d:6f: c7:db:59:e5:b8:86:b8:20:b3:c5:12:9b:1a:a2:2d: 02:05:b8:f4:e8:f0:e8:84:54:68:6d:a5:8e:3d:cd: e1:4e:2f:31:a3:7b:23:13:14:ac:17:4d:1c:e3:c1: 11:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:46:E0:5A:F8:02:1B:DC:F9:43:3F:39:C4:90:43:5E:C1:D9:C3:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/381326b5-14d9-3adb-95ad-7ad2cb09c154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:0c:a9:cd:cd:49:08:0d:36:7b:a9:ea:d9:e7:7c:d7:dc:25: 16:1d:5a:78:78:af:ad:1a:e8:63:a6:1a:99:4c:01:2b:bd:0b: 0d:cd:45:45:9a:d6:3d:34:5d:50:6a:01:5c:0d:32:1a:a2:c1: 88:39:c9:cd:0b:8f:16:fa:44:27:4f:a5:7b:95:91:aa:ce:d7: c4:5b:0f:71:7b:91:ba:17:19:97:22:0b:21:da:dc:ab:9b:8e: e3:e1:ce:df:a6:15:f7:ac:d3:ca:6a:67:34:4b:1f:3d:19:39: 8a:5e:e1:a1:48:6e:f4:10:7c:0c:3a:d7:77:31:a9:d1:15:5e: 5d:1a:6f:26:73:73:c0:43:df:b0:c1:61:02:1c:0f:6d:a7:7a: 27:47:d1:51:f4:e2:3d:e3:1f:f5:61:97:81:41:72:17:e0:7d: 07:a2:3b:c9:da:f0:ac:21:ca:60:15:bc:10:1f:24:84:e5:db: a1:ec:af:3a:80:83:45:ab:b7:94:97:62:64:70:2e:7f:a4:e4: 99:d1:49:87:18:f4:10:8c:46:7e:f2:e1:41:49:fb:e8:25:6c: 34:c1:25:e5:98:6a:47:ad:7e:1d:2c:7c:85:46:22:55:5c:90: 2d:19:3a:98:c0:7b:22:a8:d1:61:42:24:2d:04:92:d4:ac:0a: d0:df:c8:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuqO1TiO8eqwelagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NGQwN2VlNDQtMTFiMS00NDVkLWJlYzktMjRiZmRhMzFhYjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ4B+P0Sz/pRBauW0J8xXakl1SL3qTA+me9W 2Fvhe7PYjggL/tyRaFlkMyqucZJOavqWf2y4hT2VZoXGVOrKqg9Pu9Ae9ox140dt H0Bbj0bk/ZquGIpApcyp9chX3X2qAR8Z5B8Qwzb/GR2Xl2zcCTO3GxJr3s+tJgG3 ogiFTHbr7hohk/Iqr/VcPQXoiPjkUAlgjv/nTjZCTE+IopGoRDO86Nl6KOvd99NV 16TVRLVOUj6mqZCJRryGWwMC+MWgZ9nvZtKeJjoP6SaU/TtGbW/H21nluIa4ILPF Epsaoi0CBbj06PDohFRobaWOPc3hTi8xo3sjExSsF00c48ERRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpG4Fr4Ahvc+UM/OcSQQ17B2cMWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzgxMzI2YjUtMTRkOS0z YWRiLTk1YWQtN2FkMmNiMDljMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkMqc3NSQgNNnup6tnnfNfcJRYdWnh4r60a6GOmGplMASu9Cw3NRUWa 1j00XVBqAVwNMhqiwYg5yc0Ljxb6RCdPpXuVkarO18RbD3F7kboXGZciCyHa3Kub juPhzt+mFfes08pqZzRLHz0ZOYpe4aFIbvQQfAw613cxqdEVXl0abyZzc8BD37DB YQIcD22neidH0VH04j3jH/Vhl4FBchfgfQeiO8na8KwhymAVvBAfJITl26HsrzqA g0Wrt5SXYmRwLn+k5JnRSYcY9BCMRn7y4UFJ++glbDTBJeWYaketfh0sfIVGIlVc kC0ZOpjAeyKo0WFCJC0EktSsCtDfyAI= -----END CERTIFICATE-----Generated at Sun Apr 27 16:32:32 2025 by rpki-client