$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69f9de7f-49ed-3af4-ad28-e7aa5a1782c0.roa File: 69f9de7f-49ed-3af4-ad28-e7aa5a1782c0.roa (raw, json) Hash identifier: +ylpuXX7IqY3uQNO9GwxTWCEDHYKEsCHJk5b6KsuRr4= Subject key identifier: 77:98:D6:8D:CF:9B:1D:97:C6:7A:B5:63:12:85:BC:8F:C9:E2:B2:5B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3EF1AA18A89E888F1E40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69f9de7f-49ed-3af4-ad28-e7aa5a1782c0.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.20.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3e:f1:aa:18:a8:9e:88:8f:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8e302179-a295-40a2-bfa5-0e1f1a2a1545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:c7:e0:e2:86:94:2e:65:25:bf:be:1b:1d:54: 5b:1a:9b:74:8c:d1:3c:86:9e:4a:7a:85:d8:e1:06: f4:1c:ce:81:46:0e:6f:d1:5d:67:1d:94:f5:aa:12: e7:a7:e6:e0:68:d0:2e:85:6e:6a:e4:55:6e:b2:b4: e2:23:cb:e0:4a:9f:29:e2:c5:99:ed:8a:7b:38:99: d9:de:52:0e:0b:30:3c:4a:56:86:e7:e2:4b:42:a5: b1:cc:2f:d8:0e:3b:f4:d7:78:b4:ea:ee:36:48:31: 39:1c:07:b0:59:91:14:ec:d1:e0:d2:53:a2:1f:06: f0:81:5b:9b:9d:ba:e0:e2:18:6b:c9:6c:fa:2a:eb: 52:c4:11:e6:b6:31:fa:aa:c7:07:a6:90:e8:0b:55: d1:ea:cc:ab:66:77:4c:87:5e:a6:2f:24:c4:20:c2: 18:34:6a:04:10:79:14:57:a1:72:05:a0:86:ab:60: 8b:44:70:72:ca:26:4a:28:9a:c3:42:95:fc:61:e0: af:1f:f5:0c:94:95:d8:9c:61:40:ed:4a:62:f7:16: b3:46:c9:fa:2f:24:2c:be:40:dc:b9:58:8d:90:fd: 0b:76:dc:e3:a0:3d:84:b8:a7:79:9e:d5:83:e3:e2: c7:72:5d:d7:90:d5:c9:ca:ab:aa:33:06:a2:96:ef: 24:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:98:D6:8D:CF:9B:1D:97:C6:7A:B5:63:12:85:BC:8F:C9:E2:B2:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69f9de7f-49ed-3af4-ad28-e7aa5a1782c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:50:81:0c:9d:31:ea:10:82:17:26:0a:f3:f7:93:24:e0:2e: e0:0d:ec:02:94:b3:b2:8b:64:8c:45:05:6d:d4:34:6a:45:7c: 41:ca:7a:25:66:ca:52:d9:d0:16:06:3b:d2:c6:a3:9b:fe:fd: 0c:3a:59:79:86:a7:c5:af:99:05:de:8e:4b:98:03:b5:13:2f: 05:52:30:2b:7e:fd:37:a8:25:90:3b:cc:13:b4:87:8b:82:26: ee:58:76:3c:51:49:e4:ff:28:fc:d7:fc:59:76:a8:0f:c0:93: 2b:01:71:c7:64:bf:54:4d:a1:6a:51:de:32:4d:31:cc:44:ef: 2b:a2:a6:ed:7f:8b:85:9d:0b:06:57:02:da:39:34:66:48:46: 0a:20:68:1c:47:35:8c:29:f8:3c:dd:94:71:39:93:70:df:c5: 52:ca:7d:0d:5d:74:4d:d8:7b:d7:ce:c7:82:eb:5b:88:fc:49: d9:72:f9:1b:1f:a8:3e:4c:fe:aa:09:7f:84:c0:61:50:f6:8f: 7c:9f:46:36:b3:e2:2d:b8:5c:b2:91:f4:ec:4a:76:69:81:93: 1a:4d:16:9e:a8:d3:15:c6:34:d8:44:63:be:26:b0:c2:89:ab: 1e:a3:ee:42:eb:d4:c8:93:6c:80:52:cd:2f:ba:34:a0:e2:c2: 55:c9:02:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuz7xqhionoiPHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGUzMDIxNzktYTI5NS00MGEyLWJmYTUtMGUxZjFhMmExNTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+cfg4oaULmUlv74bHVRbGpt0jNE8hp5KeoXY 4Qb0HM6BRg5v0V1nHZT1qhLnp+bgaNAuhW5q5FVusrTiI8vgSp8p4sWZ7Yp7OJnZ 3lIOCzA8SlaG5+JLQqWxzC/YDjv013i06u42SDE5HAewWZEU7NHg0lOiHwbwgVub nbrg4hhryWz6KutSxBHmtjH6qscHppDoC1XR6syrZndMh16mLyTEIMIYNGoEEHkU V6FyBaCGq2CLRHByyiZKKJrDQpX8YeCvH/UMlJXYnGFA7Upi9xazRsn6LyQsvkDc uViNkP0LdtzjoD2EuKd5ntWD4+LHcl3XkNXJyquqMwailu8kEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeY1o3Pmx2Xxnq1YxKFvI/J4rJbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjlmOWRlN2YtNDllZC0z YWY0LWFkMjgtZTdhYTVhMTc4MmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFQgQydMeoQghcmCvP3kyTgLuAN7AKUs7KLZIxFBW3UNGpFfEHKeiVm ylLZ0BYGO9LGo5v+/Qw6WXmGp8WvmQXejkuYA7UTLwVSMCt+/TeoJZA7zBO0h4uC Ju5YdjxRSeT/KPzX/Fl2qA/AkysBccdkv1RNoWpR3jJNMcxE7yuipu1/i4WdCwZX Ato5NGZIRgogaBxHNYwp+DzdlHE5k3DfxVLKfQ1ddE3Ye9fOx4LrW4j8Sdly+Rsf qD5M/qoJf4TAYVD2j3yfRjaz4i24XLKR9OxKdmmBkxpNFp6o0xXGNNhEY74msMKJ qx6j7kLr1MiTbIBSzS+6NKDiwlXJAkw= -----END CERTIFICATE-----Generated at Mon Apr 28 15:26:10 2025 by rpki-client