$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/396acead-b429-301e-b7bb-7850cf3d7619.roa File: 396acead-b429-301e-b7bb-7850cf3d7619.roa (raw, json) Hash identifier: r6lJczdEhVurbzRfK2ARPz+DvPXKaZXhjvhuLqflVYc= Subject key identifier: E1:3F:18:5C:D1:F6:72:0B:B1:52:81:3F:36:50:96:6E:E0:17:D8:91 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9B380EE1357669B75580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/396acead-b429-301e-b7bb-7850cf3d7619.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.20.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:9b:38:0e:e1:35:76:69:b7:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b30e206e-9bab-4782-ac50-e5189a097736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:81:15:b4:fd:cd:4e:82:f0:32:ae:ff:0e:a9: cc:2a:60:20:0f:94:8f:7c:3f:f9:c0:15:f9:25:91: bb:36:ba:4b:d2:16:92:1f:6f:20:e3:8c:a0:13:a6: 25:4f:ed:6f:63:20:39:5e:a4:c8:13:ba:59:97:a4: 79:fd:cb:63:26:fa:e2:66:d6:d2:6c:73:a5:11:8d: 83:b3:80:5e:98:65:b3:e5:02:14:3c:04:77:b6:f3: a2:a7:90:1b:a0:99:dc:d9:5a:26:33:92:3d:18:a3: 71:f0:4f:de:f6:28:34:fb:f1:16:90:13:72:04:59: b4:97:80:eb:01:f5:e8:3d:a9:95:68:4c:da:73:0e: 92:f6:21:c8:69:7a:5f:1b:4e:ec:39:d5:a9:08:19: c4:29:4c:99:ab:c8:6e:26:8c:b5:24:be:92:19:ba: b1:77:65:07:0e:43:f0:f5:b6:a7:7c:fb:95:fd:b5: 59:be:b0:6c:34:c0:4c:e9:01:79:bb:f3:65:1e:1d: 2d:0a:83:91:c3:30:60:d5:33:92:c8:61:e3:9b:d3: 4f:2b:79:52:3f:7a:61:a2:df:cf:92:88:87:3a:be: 2f:35:8a:f4:32:bf:ad:2d:36:f4:32:9c:fa:a8:e2: 8c:2f:8f:3a:9b:27:8a:27:43:04:9d:c0:88:c1:f6: e0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3F:18:5C:D1:F6:72:0B:B1:52:81:3F:36:50:96:6E:E0:17:D8:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/396acead-b429-301e-b7bb-7850cf3d7619.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:85:43:4a:2e:9a:f2:c9:14:7a:b6:a8:92:11:5a:17:9a:22: 0e:ef:54:a7:b6:ca:fc:79:70:da:02:10:db:2c:48:eb:69:32: b6:7f:af:72:a0:39:c0:3d:7e:a8:4c:59:b4:6c:44:37:ed:3f: ba:81:ec:8f:5b:b2:d0:1d:ec:1d:d1:02:54:91:9c:b7:04:50: 96:49:86:a0:e1:cc:94:92:87:99:20:63:76:05:83:ce:c4:0c: 91:e7:ee:d3:6f:10:a6:12:eb:ea:f4:89:24:57:f7:65:78:37: 01:78:29:b9:01:bc:ae:5e:8e:bb:8b:e2:40:90:37:d2:79:4d: 71:b8:a6:19:5b:19:2f:1f:99:23:b7:32:ee:0b:dc:15:d0:54: 38:cc:2d:68:43:04:36:77:07:d5:17:a8:50:ba:51:57:06:c6: 35:24:74:55:e9:9e:a1:a1:7f:4c:c9:c6:41:45:3b:f9:e4:c6: bf:66:43:eb:94:d3:f9:14:80:45:14:54:fe:fd:ae:a4:87:a6: 2f:e4:b1:fd:02:b7:d7:a4:1a:25:45:d4:d5:52:16:15:73:21: 23:9b:34:f6:92:21:d3:de:7e:7f:6c:7b:ce:f3:38:eb:c7:3b: ae:00:9b:2f:0a:4c:47:0b:1d:c7:08:c0:5c:e8:f9:65:4e:50: 37:b5:7f:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkups4DuE1dmm3VYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjMwZTIwNmUtOWJhYi00NzgyLWFjNTAtZTUxODlhMDk3NzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4EVtP3NToLwMq7/DqnMKmAgD5SPfD/5wBX5 JZG7NrpL0haSH28g44ygE6YlT+1vYyA5XqTIE7pZl6R5/ctjJvriZtbSbHOlEY2D s4BemGWz5QIUPAR3tvOip5AboJnc2VomM5I9GKNx8E/e9ig0+/EWkBNyBFm0l4Dr AfXoPamVaEzacw6S9iHIaXpfG07sOdWpCBnEKUyZq8huJoy1JL6SGbqxd2UHDkPw 9banfPuV/bVZvrBsNMBM6QF5u/NlHh0tCoORwzBg1TOSyGHjm9NPK3lSP3phot/P koiHOr4vNYr0Mr+tLTb0Mpz6qOKML486myeKJ0MEncCIwfbgWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOE/GFzR9nILsVKBPzZQlm7gF9iRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzk2YWNlYWQtYjQyOS0z MDFlLWI3YmItNzg1MGNmM2Q3NjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCFQ0oumvLJFHq2qJIRWheaIg7vVKe2yvx5cNoCENssSOtpMrZ/r3Kg OcA9fqhMWbRsRDftP7qB7I9bstAd7B3RAlSRnLcEUJZJhqDhzJSSh5kgY3YFg87E DJHn7tNvEKYS6+r0iSRX92V4NwF4KbkBvK5ejruL4kCQN9J5TXG4phlbGS8fmSO3 Mu4L3BXQVDjMLWhDBDZ3B9UXqFC6UVcGxjUkdFXpnqGhf0zJxkFFO/nkxr9mQ+uU 0/kUgEUUVP79rqSHpi/ksf0Ct9ekGiVF1NVSFhVzISObNPaSIdPefn9se87zOOvH O64Amy8KTEcLHccIwFzo+WVOUDe1fyc= -----END CERTIFICATE-----Generated at Sun Apr 27 04:20:35 2025 by rpki-client