$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4fc07ac7-cd9c-3eeb-a1a9-e2121ca56e34.roa File: 4fc07ac7-cd9c-3eeb-a1a9-e2121ca56e34.roa (raw, json) Hash identifier: xSpRpIxA2L1kmg/VmqrW5VXBkV/FQ67PXKWVKzAGYqQ= Subject key identifier: 3A:0E:0E:F7:4F:91:78:4A:89:AA:5E:4B:7B:99:C9:45:D2:03:3F:1A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB43EDC80874263D6D2A40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4fc07ac7-cd9c-3eeb-a1a9-e2121ca56e34.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.20.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:43:ed:c8:08:74:26:3d:6d:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=df1a74ef-819b-4849-85ef-13f6772c1598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:58:98:a6:84:78:a1:d4:7b:66:c5:32:2c:be: 04:67:db:65:9a:34:d4:0f:04:b9:b9:ae:88:80:cf: 37:13:36:dc:0a:dc:88:32:16:84:ba:f3:6f:08:19: 8c:2a:49:d5:a7:1a:e7:8c:6a:a8:2b:f3:8a:e5:7d: fd:99:ed:2b:f5:b3:1c:71:1c:55:f2:95:20:5d:a2: 4c:1f:3c:ad:5d:10:2d:e0:91:e0:3c:5e:04:0c:cc: 31:c0:c9:ad:5b:65:ea:c4:4b:90:97:e2:a7:57:f6: 52:02:df:61:6f:dd:57:d4:13:b2:fb:ed:75:8c:86: 59:2c:8c:bc:d0:e4:6d:53:70:01:37:35:08:19:c9: fe:e5:c9:01:db:6d:e8:52:00:24:ad:a9:94:fe:68: 1f:d7:e9:5f:99:2a:42:c7:23:06:1f:3c:57:86:ae: 98:b8:74:60:d6:d1:77:ba:4e:42:57:d8:11:06:dd: ea:f6:f5:39:60:e4:82:16:41:21:5a:28:f1:b3:d8: bf:0d:6b:d9:6d:ca:9f:b7:52:a4:9c:63:63:68:20: e8:65:a6:2a:b9:6a:14:8c:ca:30:8c:b9:81:87:d2: ea:e7:23:7c:16:52:90:6f:0a:2f:48:0d:42:56:cc: 96:95:ce:8d:ac:aa:98:27:7f:02:96:a3:39:09:45: 39:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0E:0E:F7:4F:91:78:4A:89:AA:5E:4B:7B:99:C9:45:D2:03:3F:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4fc07ac7-cd9c-3eeb-a1a9-e2121ca56e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:da:10:8c:6b:c8:6a:2f:47:e4:5b:11:67:06:33:b7:b8:0b: 8d:1d:05:5b:27:5b:6f:d5:3c:bf:0b:cd:cc:79:08:f5:66:0e: ef:a7:c4:95:c9:ab:00:db:4d:ba:42:69:75:10:49:b5:14:d7: f0:d9:26:18:83:e8:97:d3:2d:d7:ad:9b:ca:9c:d4:24:19:e6: 24:ac:91:69:8e:cd:26:e4:77:3f:8d:8d:00:ad:f1:94:9d:43: cb:a1:2c:27:63:06:a7:4b:e2:47:80:72:47:3c:ca:05:80:2f: 98:3e:01:6e:01:69:c5:8a:8b:f7:b2:f7:07:13:f0:b7:70:05: 0c:ca:69:4c:df:28:d0:82:79:9c:f1:82:11:c3:bd:fd:b2:13: 7d:ad:1f:20:d3:8f:d3:d2:f4:5c:61:ef:ba:65:be:fe:ee:ab: d4:1e:04:0c:53:ab:cd:8d:d6:1d:97:be:dd:3a:55:73:44:47: 35:5c:07:84:b5:43:bc:3a:84:33:0b:83:1e:42:84:63:57:2e: 59:ba:44:35:26:ae:08:84:74:f2:cd:31:eb:2a:99:a5:ad:5f: 1c:ce:2d:fe:ec:34:64:8f:52:e1:c5:63:00:c0:3e:78:9f:8d: c1:d8:0d:e5:c0:86:bb:d1:8a:3d:57:b6:38:01:05:fb:8a:cb: 40:0f:c0:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku0PtyAh0Jj1tKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZGYxYTc0ZWYtODE5Yi00ODQ5LTg1ZWYtMTNmNjc3MmMxNTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmliYpoR4odR7ZsUyLL4EZ9tlmjTUDwS5ua6I gM83EzbcCtyIMhaEuvNvCBmMKknVpxrnjGqoK/OK5X39me0r9bMccRxV8pUgXaJM HzytXRAt4JHgPF4EDMwxwMmtW2XqxEuQl+KnV/ZSAt9hb91X1BOy++11jIZZLIy8 0ORtU3ABNzUIGcn+5ckB223oUgAkramU/mgf1+lfmSpCxyMGHzxXhq6YuHRg1tF3 uk5CV9gRBt3q9vU5YOSCFkEhWijxs9i/DWvZbcqft1KknGNjaCDoZaYquWoUjMow jLmBh9Lq5yN8FlKQbwovSA1CVsyWlc6NrKqYJ38ClqM5CUU5EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoODvdPkXhKiapeS3uZyUXSAz8aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGZjMDdhYzctY2Q5Yy0z ZWViLWExYTktZTIxMjFjYTU2ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLaEIxryGovR+RbEWcGM7e4C40dBVsnW2/VPL8Lzcx5CPVmDu+nxJXJ qwDbTbpCaXUQSbUU1/DZJhiD6JfTLdetm8qc1CQZ5iSskWmOzSbkdz+NjQCt8ZSd Q8uhLCdjBqdL4keAckc8ygWAL5g+AW4BacWKi/ey9wcT8LdwBQzKaUzfKNCCeZzx ghHDvf2yE32tHyDTj9PS9Fxh77plvv7uq9QeBAxTq82N1h2Xvt06VXNERzVcB4S1 Q7w6hDMLgx5ChGNXLlm6RDUmrgiEdPLNMesqmaWtXxzOLf7sNGSPUuHFYwDAPnif jcHYDeXAhrvRij1XtjgBBfuKy0APwN8= -----END CERTIFICATE-----Generated at Mon Apr 28 06:09:37 2025 by rpki-client