$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5553cf49-c4f7-33ca-9ced-89a3c937a153.roa File: 5553cf49-c4f7-33ca-9ced-89a3c937a153.roa (raw, json) Hash identifier: OBZYLAt92vtDFPdCBjCwaJgD56M0K1dB9JjydbDQGn8= Subject key identifier: 43:AD:F5:A0:C4:9D:55:B3:DF:C7:3F:F3:4D:89:54:45:D2:54:C3:40 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAA6E27428CA1D0F41F6AA Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5553cf49-c4f7-33ca-9ced-89a3c937a153.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:a6:e2:74:28:ca:1d:0f:41:f6:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=322a497e-dd9a-4a95-a1b0-f066b7548fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:82:ef:4b:81:6e:75:1b:f4:09:0d:89:89:b3: 33:ca:35:e3:41:60:5a:8e:5d:c8:80:78:9b:36:18: 2e:5d:f3:07:77:ee:ee:28:66:d0:f3:65:1a:49:ef: d9:2e:d9:b2:91:00:d8:f9:2b:9d:13:ca:0e:58:ed: f8:47:76:71:d6:5c:8d:b8:19:20:53:8f:36:71:94: ca:7a:c4:b4:42:7f:0f:a2:b8:1f:35:fd:7b:5e:87: 36:88:fd:fe:2f:1b:8e:64:0f:ed:2f:3c:89:8f:20: 2d:83:85:f7:09:e0:93:34:02:cd:73:29:7d:9c:04: 62:fd:2e:0e:ec:f0:a3:3a:17:80:b7:cb:18:da:69: ad:5f:10:2a:a4:8f:48:ec:cf:22:7a:71:5e:e2:01: dc:4e:74:05:06:c9:42:ea:6d:72:6e:41:ff:dd:82: ea:8d:5d:a7:dd:92:c4:bc:02:af:c7:1c:c3:65:ec: 56:cc:a2:be:63:63:c7:52:9a:86:89:ad:84:f8:3f: d0:9f:de:fd:8b:65:95:4f:06:b2:22:c3:b2:53:8f: 21:6f:e3:67:2c:7a:c2:5e:d7:86:39:ca:08:4f:06: db:05:ba:19:32:66:94:59:74:2a:30:d1:60:d8:ea: c7:36:70:fc:99:16:20:ac:f9:8a:eb:de:bd:10:47: c7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AD:F5:A0:C4:9D:55:B3:DF:C7:3F:F3:4D:89:54:45:D2:54:C3:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5553cf49-c4f7-33ca-9ced-89a3c937a153.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:bf:55:a3:e2:8a:80:2f:07:73:93:f8:0b:cd:9c:57:5d:fe: 3b:b1:ef:bb:42:87:cc:17:50:5f:0f:03:52:8b:63:e9:a6:a7: 8e:9b:2f:92:e7:59:de:a0:8d:32:e1:0c:f5:71:26:5c:3b:7c: 7c:9d:bc:5f:cf:a6:10:64:e5:d2:e2:aa:e2:d0:0b:ff:31:50: e1:0f:1b:68:66:e9:3d:04:16:8e:7b:fb:78:24:61:e6:d2:57: f1:79:a7:8c:35:d0:2f:26:57:9a:91:d5:60:c0:07:90:71:fd: ef:3c:f3:ee:44:31:77:78:fa:d8:3c:8b:e3:58:3d:90:42:60: 64:04:92:9b:e7:dc:5a:1a:e8:aa:4d:17:b7:01:6a:31:58:28: bc:57:7d:b2:c9:6e:1d:63:83:84:eb:b0:61:e4:ed:df:70:7d: d5:e4:92:3d:5c:70:bf:7e:13:5b:86:42:9d:be:89:93:68:30: d0:ef:28:b1:11:42:31:d8:4f:6a:bf:13:7f:52:04:6e:e4:1b: bb:1b:b1:75:c3:00:68:27:e1:7c:ce:72:aa:be:d3:e9:0a:81: 8e:1d:90:ef:56:54:d4:75:91:83:41:df:50:d7:8e:a4:34:05: 0d:43:5e:4d:98:84:64:76:ec:7a:9e:59:02:98:ec:a5:85:9c: 64:84:f9:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuqbidCjKHQ9B9qowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzIyYTQ5N2UtZGQ5YS00YTk1LWExYjAtZjA2NmI3NTQ4ZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYLvS4FudRv0CQ2JibMzyjXjQWBajl3IgHib NhguXfMHd+7uKGbQ82UaSe/ZLtmykQDY+SudE8oOWO34R3Zx1lyNuBkgU482cZTK esS0Qn8PorgfNf17Xoc2iP3+LxuOZA/tLzyJjyAtg4X3CeCTNALNcyl9nARi/S4O 7PCjOheAt8sY2mmtXxAqpI9I7M8ienFe4gHcTnQFBslC6m1ybkH/3YLqjV2n3ZLE vAKvxxzDZexWzKK+Y2PHUpqGia2E+D/Qn979i2WVTwayIsOyU48hb+NnLHrCXteG OcoITwbbBboZMmaUWXQqMNFg2OrHNnD8mRYgrPmK6969EEfHyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOt9aDEnVWz38c/802JVEXSVMNAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTU1M2NmNDktYzRmNy0z M2NhLTljZWQtODlhM2M5MzdhMTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKu/VaPiioAvB3OT+AvNnFdd/jux77tCh8wXUF8PA1KLY+mmp46bL5Ln Wd6gjTLhDPVxJlw7fHydvF/PphBk5dLiquLQC/8xUOEPG2hm6T0EFo57+3gkYebS V/F5p4w10C8mV5qR1WDAB5Bx/e888+5EMXd4+tg8i+NYPZBCYGQEkpvn3Foa6KpN F7cBajFYKLxXfbLJbh1jg4TrsGHk7d9wfdXkkj1ccL9+E1uGQp2+iZNoMNDvKLER QjHYT2q/E39SBG7kG7sbsXXDAGgn4XzOcqq+0+kKgY4dkO9WVNR1kYNB31DXjqQ0 BQ1DXk2YhGR27HqeWQKY7KWFnGSE+Qk= -----END CERTIFICATE-----Generated at Sun Apr 27 04:02:25 2025 by rpki-client