$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c517db0-d348-3245-9e98-70be00d950c7.roa File: 3c517db0-d348-3245-9e98-70be00d950c7.roa (raw, json) Hash identifier: FQc87oFPE4sIKnLVrMSki1rL692+ft6816iDQilfhTc= Subject key identifier: 97:38:83:5E:BB:66:4C:1A:FF:97:C6:E9:D1:78:E0:6E:11:DA:02:5F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB413B2421AA89EFC500C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c517db0-d348-3245-9e98-70be00d950c7.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.20.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:41:3b:24:21:aa:89:ef:c5:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f9a2c4a4-cb95-4346-a8ec-37fb3524306d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:30:b0:c4:50:a1:f7:b6:ff:1a:54:2f:d3:dd: 87:2a:87:1f:12:b9:ac:98:8e:a4:2f:cb:75:1e:6c: f5:d7:4f:58:e6:12:2f:75:f6:5c:6a:cb:63:54:e1: 1e:a6:7c:22:e3:30:53:0c:56:32:af:02:d9:a2:d2: 81:ad:a3:87:57:a5:c4:c9:96:0b:08:88:14:11:27: 8f:19:da:65:15:93:98:50:6c:4c:76:f0:01:09:44: ff:4b:dc:6c:a3:99:08:cf:8f:95:a8:40:81:8d:5b: 29:c0:57:63:c5:eb:0a:53:5e:07:43:87:dd:50:35: f0:50:29:5f:59:5b:02:93:69:ef:28:d4:7a:f4:1b: b1:48:b2:c5:a5:2a:ec:9a:a5:3c:55:46:77:e5:b1: 64:dd:84:48:dc:74:64:d7:ee:97:48:5e:9b:4b:6e: 66:69:19:1d:20:be:5f:c0:de:ca:2e:4e:b0:b1:98: 4f:e9:3b:cd:6e:60:a8:d1:5d:a1:c8:6b:42:6f:a7: 10:da:2c:de:24:ab:47:14:24:20:ec:d2:a5:67:44: e2:7a:dc:2b:d6:c5:80:71:1d:60:61:90:a8:04:d6: 36:36:b6:2c:96:31:bd:ad:fd:ac:34:82:94:88:22: 83:92:e3:80:10:e6:90:79:53:cb:d0:cc:da:e5:8a: 5b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:38:83:5E:BB:66:4C:1A:FF:97:C6:E9:D1:78:E0:6E:11:DA:02:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c517db0-d348-3245-9e98-70be00d950c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:9f:29:02:9a:80:47:8f:37:30:57:04:49:01:fe:01:fc:1f: 59:3a:25:c0:cd:c1:81:57:9b:ad:d7:3c:7e:1c:d9:af:1e:29: c6:b8:f3:bc:39:17:7a:e4:94:11:8d:6e:c5:c8:45:4e:90:5f: a3:94:37:ae:7c:a6:d1:a8:42:c2:5f:18:03:fc:c2:4a:a8:1b: 21:34:a3:39:f8:01:0d:19:88:a6:6f:27:a1:63:ec:d6:20:0b: 8c:8e:36:fb:3e:e5:dd:e4:86:89:23:a3:2f:80:c1:25:c4:8d: 83:94:67:09:f1:ae:b3:1b:69:7a:0f:36:fc:fa:cf:db:7f:34: b1:b5:55:9d:0f:39:5c:99:27:58:62:29:a7:2c:76:97:0f:3c: 14:5d:21:31:61:0f:b7:d5:eb:4e:16:da:d0:89:9e:41:ab:eb: 9b:98:c5:88:b6:4f:51:1c:bd:8f:ff:cc:14:e1:cb:1f:59:c7: 76:eb:ce:fd:6f:7e:32:87:da:00:25:72:b2:c7:51:80:6c:70: 65:29:cc:5e:ee:6e:ce:c1:d9:a1:49:73:31:b3:f7:f6:c1:80: 4b:e2:18:fd:7f:05:d8:50:e4:4f:79:86:dd:a9:ab:81:ed:a8: 55:ee:87:42:93:d0:98:26:1e:cd:46:9a:7c:52:b4:cb:32:ea: 3d:14:b3:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku0E7JCGqie/FAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjlhMmM0YTQtY2I5NS00MzQ2LWE4ZWMtMzdmYjM1MjQzMDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDCwxFCh97b/GlQv092HKocfErmsmI6kL8t1 Hmz1109Y5hIvdfZcastjVOEepnwi4zBTDFYyrwLZotKBraOHV6XEyZYLCIgUESeP GdplFZOYUGxMdvABCUT/S9xso5kIz4+VqECBjVspwFdjxesKU14HQ4fdUDXwUClf WVsCk2nvKNR69BuxSLLFpSrsmqU8VUZ35bFk3YRI3HRk1+6XSF6bS25maRkdIL5f wN7KLk6wsZhP6TvNbmCo0V2hyGtCb6cQ2izeJKtHFCQg7NKlZ0Tietwr1sWAcR1g YZCoBNY2NrYsljG9rf2sNIKUiCKDkuOAEOaQeVPL0Mza5YpbtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJc4g167Zkwa/5fG6dF44G4R2gJfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2M1MTdkYjAtZDM0OC0z MjQ1LTllOTgtNzBiZTAwZDk1MGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBR+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmfKQKagEePNzBXBEkB/gH8H1k6JcDNwYFXm63XPH4c2a8eKca487w5 F3rklBGNbsXIRU6QX6OUN658ptGoQsJfGAP8wkqoGyE0ozn4AQ0ZiKZvJ6Fj7NYg C4yONvs+5d3khokjoy+AwSXEjYOUZwnxrrMbaXoPNvz6z9t/NLG1VZ0POVyZJ1hi KacsdpcPPBRdITFhD7fV604W2tCJnkGr65uYxYi2T1EcvY//zBThyx9Zx3brzv1v fjKH2gAlcrLHUYBscGUpzF7ubs7B2aFJczGz9/bBgEviGP1/BdhQ5E95ht2pq4Ht qFXuh0KT0JgmHs1GmnxStMsy6j0Usyg= -----END CERTIFICATE-----Generated at Sun Apr 27 03:54:38 2025 by rpki-client