$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5c84f47c-c3b4-354a-a98c-f36ea9b20d17.roa File: 5c84f47c-c3b4-354a-a98c-f36ea9b20d17.roa (raw, json) Hash identifier: rgdWQJSIlWPPJLfhhzmR1q+rXhz+ARHVism46NaQ1Fo= Subject key identifier: 54:EF:64:33:5A:E9:CB:E2:64:96:30:C4:06:5C:E4:CC:5F:4B:45:62 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAA61848EE7205F7A53F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5c84f47c-c3b4-354a-a98c-f36ea9b20d17.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:a6:18:48:ee:72:05:f7:a5:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=44f121e1-81d2-4614-8617-0991132272e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3e:fd:7c:93:85:88:47:48:bb:63:02:2c:38: c9:22:fd:59:66:c2:f3:a7:d9:d7:d2:76:e4:03:a7: 90:be:d7:77:3f:ca:f2:2b:82:b8:cd:12:ae:46:97: 3b:0c:14:20:b7:64:69:2a:06:af:e2:76:4f:4a:7e: 54:03:19:81:80:07:75:74:4d:46:1c:6e:91:7f:75: 4f:cf:58:aa:7e:61:f9:37:d7:fb:67:bd:15:cb:d5: 90:b8:cc:55:13:6d:3e:b1:9d:8d:60:e1:9b:84:2b: cc:50:91:08:4d:e9:c5:8a:13:02:03:9e:3a:d6:11: 5e:2c:f4:be:d0:95:74:1c:bf:e6:4f:d6:c8:f4:01: 86:5e:4a:a3:0e:e6:8f:cf:13:a6:90:96:04:fe:64: a7:d4:1b:4a:4e:3a:61:ff:0a:25:fc:b0:d4:2f:b5: 65:c5:00:a2:10:be:6d:c1:a2:0c:52:f4:62:51:2a: 48:22:6f:11:1d:69:b2:1b:f1:40:d0:6b:d2:86:40: e2:77:02:f8:57:2a:68:03:be:b1:2f:ce:69:d1:79: c7:af:ed:5b:55:20:f7:93:6b:03:9d:26:63:7a:1e: cf:05:6b:f5:6c:ef:48:6d:bd:fc:ef:d7:2b:dd:74: f9:76:53:88:bd:90:ef:9f:8d:11:dc:fc:e9:4a:24: 7f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EF:64:33:5A:E9:CB:E2:64:96:30:C4:06:5C:E4:CC:5F:4B:45:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5c84f47c-c3b4-354a-a98c-f36ea9b20d17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:55:f9:83:2c:3f:4b:c9:27:56:87:51:93:ed:f3:5a:d4:a5: 5c:d6:a5:24:98:e7:b5:2a:06:b3:26:4c:0a:3c:23:5d:8e:a6: a3:db:23:7a:5e:53:c6:10:e8:2a:4a:59:1d:3c:d6:a8:72:98: bf:b4:10:97:93:c7:69:da:1e:e3:72:60:0e:83:44:8f:3c:9d: 9e:80:8c:0d:0a:64:bb:ac:11:20:9a:da:58:63:cd:3d:de:3a: 72:d9:a8:0f:22:ec:9c:13:6b:a5:cd:e1:39:31:91:16:85:eb: f4:80:cd:49:74:62:8c:bc:3b:f3:f8:73:2e:33:06:73:13:19: 18:c6:53:46:96:04:bc:d7:ef:7c:28:5f:a8:88:92:69:82:e1: f9:8e:7d:01:05:84:51:32:14:c4:55:dc:e4:5d:7b:06:51:ed: 94:7c:67:8d:53:4e:4a:4b:2c:b3:9f:bf:01:68:b0:ac:d0:9d: bc:a8:66:a4:43:3d:3c:17:34:ca:be:8c:96:fa:8e:a8:e2:b0: 4e:02:b8:09:dd:31:3c:e9:62:0e:a3:35:a6:b6:d3:1d:e1:81: 91:82:55:12:48:84:f2:51:0a:88:38:50:c9:6e:aa:cc:48:42: 2c:76:b4:11:a3:f8:50:5d:7b:00:83:17:9f:f5:31:b6:88:bf: 16:65:c7:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuqYYSO5yBfelP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDRmMTIxZTEtODFkMi00NjE0LTg2MTctMDk5MTEzMjI3MmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz79fJOFiEdIu2MCLDjJIv1ZZsLzp9nX0nbk A6eQvtd3P8ryK4K4zRKuRpc7DBQgt2RpKgav4nZPSn5UAxmBgAd1dE1GHG6Rf3VP z1iqfmH5N9f7Z70Vy9WQuMxVE20+sZ2NYOGbhCvMUJEITenFihMCA5461hFeLPS+ 0JV0HL/mT9bI9AGGXkqjDuaPzxOmkJYE/mSn1BtKTjph/wol/LDUL7VlxQCiEL5t waIMUvRiUSpIIm8RHWmyG/FA0GvShkDidwL4VypoA76xL85p0XnHr+1bVSD3k2sD nSZjeh7PBWv1bO9Ibb3879cr3XT5dlOIvZDvn40R3PzpSiR/4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTvZDNa6cviZJYwxAZc5MxfS0ViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWM4NGY0N2MtYzNiNC0z NTRhLWE5OGMtZjM2ZWE5YjIwZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhV+YMsP0vJJ1aHUZPt81rUpVzWpSSY57UqBrMmTAo8I12OpqPbI3pe U8YQ6CpKWR081qhymL+0EJeTx2naHuNyYA6DRI88nZ6AjA0KZLusESCa2lhjzT3e OnLZqA8i7JwTa6XN4TkxkRaF6/SAzUl0Yoy8O/P4cy4zBnMTGRjGU0aWBLzX73wo X6iIkmmC4fmOfQEFhFEyFMRV3ORdewZR7ZR8Z41TTkpLLLOfvwFosKzQnbyoZqRD PTwXNMq+jJb6jqjisE4CuAndMTzpYg6jNaa20x3hgZGCVRJIhPJRCog4UMluqsxI Qix2tBGj+FBdewCDF5/1MbaIvxZlx6k= -----END CERTIFICATE-----Generated at Sat Apr 26 23:44:04 2025 by rpki-client