$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/503acf1a-b74d-33d9-afd1-0a45f222dd98.roa File: 503acf1a-b74d-33d9-afd1-0a45f222dd98.roa (raw, json) Hash identifier: eBPl9GZzElzMAkn/P3vNUp5fOaidZsb7ZufmtFNBWYQ= Subject key identifier: 2C:C1:94:29:E2:45:0B:96:04:CC:F2:BA:08:AD:EF:4E:61:F4:6B:63 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAB468E40A4F854BA03B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/503acf1a-b74d-33d9-afd1-0a45f222dd98.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.63.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:b4:68:e4:0a:4f:85:4b:a0:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3f9bc64a-6273-4ee1-8e86-13d6573035a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:54:8c:3c:e0:a9:21:5d:fe:c2:f0:b6:0f:08: 1b:19:db:f6:33:a3:ca:d0:4e:86:27:d6:ab:86:a1: 46:b1:9d:ff:80:6b:d1:7d:aa:34:ad:fc:eb:9a:60: db:c4:98:82:c7:9a:ab:fc:4a:dd:07:93:e9:a7:ec: b2:3f:e6:bf:68:92:0c:fa:bc:77:ef:43:c3:ae:4c: 1d:8c:0c:5d:03:6d:a9:a8:aa:a0:50:91:a3:a3:54: 71:e8:6e:ad:5f:bd:0e:ce:e8:ad:cb:75:b8:21:18: 73:1c:41:fe:e3:19:ac:45:ab:bc:67:0d:f5:00:c6: 73:78:3a:44:b9:60:04:b2:af:7d:a9:2b:6b:0e:4c: 6e:a3:7a:b0:d1:b0:16:89:ce:18:83:84:d5:c6:12: fd:db:63:49:95:24:fb:d5:ec:2e:cb:1f:00:b7:12: dc:77:89:cc:57:fa:45:f3:9a:2b:e4:9b:38:28:28: 93:7e:14:e3:56:f7:ec:7b:43:e2:2e:b1:02:a6:14: 78:43:79:8d:86:2f:cd:b0:d4:38:f6:d9:8c:b3:f2: ed:0e:92:77:d5:9d:3c:b4:1e:87:6c:6d:0b:02:a9: d1:51:b8:de:1f:31:78:18:22:b7:07:58:3c:ec:67: 21:a6:93:a7:14:ab:84:e1:3c:e6:3c:96:b1:10:4d: 30:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C1:94:29:E2:45:0B:96:04:CC:F2:BA:08:AD:EF:4E:61:F4:6B:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/503acf1a-b74d-33d9-afd1-0a45f222dd98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.63.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:1e:62:19:fb:f9:d5:db:30:85:0b:99:fc:aa:ab:24:94:04: b9:3f:85:83:38:20:37:76:eb:0a:a8:e5:b8:22:c6:54:75:2a: 66:ae:69:77:e8:a1:9f:fe:15:66:17:06:17:f2:17:18:11:8c: 40:0a:e7:01:41:b6:c5:42:1e:29:7f:2c:e9:6f:f7:91:b2:fd: 8c:04:47:a3:a0:37:14:a2:a3:87:15:9e:7d:0b:86:f3:09:be: fd:b1:fc:33:d2:f0:e7:64:29:ee:79:e2:c5:85:06:2a:26:14: 86:37:3c:d9:23:a1:3f:2b:b9:d6:da:7c:52:93:ca:8b:58:44: 0e:76:50:8b:a2:27:ca:62:fd:c0:34:ce:b7:2f:5e:c4:8d:57: 49:45:0f:b2:79:c7:9f:61:cb:4a:d8:69:6c:a3:33:5a:4f:88: fb:f4:cf:14:69:00:72:19:c3:3b:76:16:0a:ce:d5:06:98:30: 12:09:31:ce:23:0e:ce:84:33:f1:8f:23:2b:57:18:46:9e:bc: 18:93:66:74:85:b1:05:71:f2:3f:59:dc:e8:5e:d5:eb:83:71: 03:30:83:04:72:f5:dd:71:b2:2b:ab:94:31:00:ba:c5:65:8c: f5:71:4c:ae:b4:81:38:b5:1b:e6:67:34:4c:99:89:7f:2b:dd: d9:29:95:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurRo5ApPhUugOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2Y5YmM2NGEtNjI3My00ZWUxLThlODYtMTNkNjU3MzAzNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFSMPOCpIV3+wvC2DwgbGdv2M6PK0E6GJ9ar hqFGsZ3/gGvRfao0rfzrmmDbxJiCx5qr/ErdB5Ppp+yyP+a/aJIM+rx370PDrkwd jAxdA22pqKqgUJGjo1Rx6G6tX70Ozuity3W4IRhzHEH+4xmsRau8Zw31AMZzeDpE uWAEsq99qStrDkxuo3qw0bAWic4Yg4TVxhL922NJlST71ewuyx8AtxLcd4nMV/pF 85or5Js4KCiTfhTjVvfse0PiLrECphR4Q3mNhi/NsNQ49tmMs/LtDpJ31Z08tB6H bG0LAqnRUbjeHzF4GCK3B1g87GchppOnFKuE4TzmPJaxEE0wrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzBlCniRQuWBMzyugit705h9GtjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTAzYWNmMWEtYjc0ZC0z M2Q5LWFmZDEtMGE0NWYyMjJkZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD/pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMeYhn7+dXbMIULmfyqqySUBLk/hYM4IDd26wqo5bgixlR1KmauaXfo oZ/+FWYXBhfyFxgRjEAK5wFBtsVCHil/LOlv95Gy/YwER6OgNxSio4cVnn0LhvMJ vv2x/DPS8OdkKe554sWFBiomFIY3PNkjoT8rudbafFKTyotYRA52UIuiJ8pi/cA0 zrcvXsSNV0lFD7J5x59hy0rYaWyjM1pPiPv0zxRpAHIZwzt2FgrO1QaYMBIJMc4j Ds6EM/GPIytXGEaevBiTZnSFsQVx8j9Z3Ohe1euDcQMwgwRy9d1xsiurlDEAusVl jPVxTK60gTi1G+ZnNEyZiX8r3dkplZ8= -----END CERTIFICATE-----Generated at Sun Apr 27 01:21:36 2025 by rpki-client