$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/436b11f8-fdb7-34dc-8c07-5c5b785f6335.roa File: 436b11f8-fdb7-34dc-8c07-5c5b785f6335.roa (raw, json) Hash identifier: h6gxdJl9e0oH6yKX5oaLr8Oayj5Y1eKyofNoH2g3o9o= Subject key identifier: 9D:E7:D5:4E:20:86:0D:C6:6F:18:AA:A1:8C:F5:4C:E3:B7:0B:FA:18 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAA20BC7F5FFB8C0100480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/436b11f8-fdb7-34dc-8c07-5c5b785f6335.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:a2:0b:c7:f5:ff:b8:c0:10:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d6f00e2f-c0e0-4609-8315-28fdec98c458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2f:44:07:9f:f4:18:84:e0:23:5f:76:af:dd: 17:31:ce:6e:83:ab:8c:ac:50:e4:2e:89:00:d5:5a: 4b:1c:96:14:36:16:f0:4a:4f:c2:de:ec:6f:5c:d0: e9:89:81:02:bb:7e:69:cc:54:0a:42:27:8e:5f:5d: e5:f1:8b:86:a4:d8:65:ff:90:fb:5e:58:17:6b:d9: 1b:4d:b8:33:04:60:ae:f4:6e:1f:c3:51:d7:3c:9a: a2:cb:3c:71:c9:87:61:b3:54:9b:9c:72:25:37:e1: 81:d9:4e:a0:75:b6:bd:fc:8a:14:a2:23:8a:06:f3: 9f:c5:42:3b:32:71:92:d5:b9:a7:7f:06:ea:08:36: 9a:f6:81:e1:fc:cf:9c:33:f4:80:81:f5:d6:ab:91: d5:73:7c:ae:08:ba:12:77:8f:43:74:2d:62:31:73: 32:cd:94:ae:02:1b:91:6b:06:43:db:15:2e:7c:1c: a3:7e:e0:8c:21:6b:62:83:63:7d:0e:25:01:c4:cf: 5b:ec:95:e1:79:9d:32:a7:19:a0:ff:04:47:bb:3c: d9:90:1b:94:0d:02:da:11:c7:f4:79:f2:1e:1b:27: 0b:d9:67:06:03:b8:dd:7b:c1:7b:ad:18:4e:e6:7d: 60:11:f6:0c:8b:9b:ee:eb:b2:22:7b:7d:86:3c:0e: db:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E7:D5:4E:20:86:0D:C6:6F:18:AA:A1:8C:F5:4C:E3:B7:0B:FA:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/436b11f8-fdb7-34dc-8c07-5c5b785f6335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:62:a1:fd:1c:3c:20:32:00:e5:1e:3a:58:7c:26:b0:46:cf: 48:a2:65:3c:40:9f:97:a2:6e:c9:2a:5c:b6:2a:14:88:be:49: 76:fb:0f:66:66:76:aa:5e:64:52:55:23:61:5e:ab:ca:f1:2c: f7:1b:b6:6f:bc:2c:09:e9:54:99:18:2c:20:98:66:bd:e1:0b: 70:e2:bd:d2:18:6d:5e:a2:a3:7a:b8:51:23:ac:18:55:6f:99: 8a:9a:d1:28:34:51:e7:88:5c:bd:0a:8a:fd:6e:7d:29:fc:39: d9:b6:7e:a0:2a:f5:1f:bd:3e:50:29:5f:3f:42:d2:4e:d6:8f: a7:69:7f:35:53:18:9a:8b:54:0a:3f:91:3f:93:36:7d:b6:9f: 14:7f:a0:c8:13:01:a9:e1:2a:a2:07:9e:e4:ce:91:53:56:9b: 28:bd:8e:43:f3:3d:4b:c6:7a:c5:24:f2:22:f8:99:33:29:15: 60:43:ce:26:79:ff:04:9b:89:68:7e:31:df:e1:08:f1:23:f4: f2:95:31:46:3b:4e:86:88:a7:c4:08:03:d0:e0:69:e0:fd:a1: 5b:53:28:8e:8f:c8:50:aa:5b:78:56:e7:57:29:e2:42:a5:83: b1:03:0d:6d:03:7f:91:e1:89:ad:0d:d1:f5:ef:c7:6b:a5:47: a7:d3:bd:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuqILx/X/uMAQBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDZmMDBlMmYtYzBlMC00NjA5LTgzMTUtMjhmZGVjOThjNDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi9EB5/0GITgI192r90XMc5ug6uMrFDkLokA 1VpLHJYUNhbwSk/C3uxvXNDpiYECu35pzFQKQieOX13l8YuGpNhl/5D7XlgXa9kb TbgzBGCu9G4fw1HXPJqiyzxxyYdhs1SbnHIlN+GB2U6gdba9/IoUoiOKBvOfxUI7 MnGS1bmnfwbqCDaa9oHh/M+cM/SAgfXWq5HVc3yuCLoSd49DdC1iMXMyzZSuAhuR awZD2xUufByjfuCMIWtig2N9DiUBxM9b7JXheZ0ypxmg/wRHuzzZkBuUDQLaEcf0 efIeGycL2WcGA7jde8F7rRhO5n1gEfYMi5vu67Iie32GPA7bnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3n1U4ghg3GbxiqoYz1TOO3C/oYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDM2YjExZjgtZmRiNy0z NGRjLThjMDctNWM1Yjc4NWY2MzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1iof0cPCAyAOUeOlh8JrBGz0iiZTxAn5eibskqXLYqFIi+SXb7D2Zm dqpeZFJVI2Feq8rxLPcbtm+8LAnpVJkYLCCYZr3hC3DivdIYbV6io3q4USOsGFVv mYqa0Sg0UeeIXL0Kiv1ufSn8Odm2fqAq9R+9PlApXz9C0k7Wj6dpfzVTGJqLVAo/ kT+TNn22nxR/oMgTAanhKqIHnuTOkVNWmyi9jkPzPUvGesUk8iL4mTMpFWBDziZ5 /wSbiWh+Md/hCPEj9PKVMUY7ToaIp8QIA9DgaeD9oVtTKI6PyFCqW3hW51cp4kKl g7EDDW0Df5Hhia0N0fXvx2ulR6fTveI= -----END CERTIFICATE-----Generated at Sun Apr 27 08:34:43 2025 by rpki-client