$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6caf933e-426b-304e-b351-7170e3d8554a.roa File: 6caf933e-426b-304e-b351-7170e3d8554a.roa (raw, json) Hash identifier: JJUh2Edv/f5V7k5QcF+fcpAQ3feKL0lv0syEawS5ClM= Subject key identifier: 22:85:AE:BD:E6:BB:E7:AB:A8:E1:A7:0F:94:BF:DE:F5:39:AF:83:E7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9F2A8000358C29D45610 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6caf933e-426b-304e-b351-7170e3d8554a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.20.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:9f:2a:80:00:35:8c:29:d4:56:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=102d2907-b211-4f99-afbc-a98d63e21c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:38:55:48:81:8b:fc:b8:03:5f:83:25:0c:ed: 2a:21:3b:07:ad:c9:93:02:b8:5c:82:84:b5:f5:02: 92:fe:bc:69:d1:02:81:dc:3e:ca:05:68:59:bc:ee: 82:29:3a:8a:fa:ad:30:b3:af:ab:af:6a:04:fb:fc: 60:a2:cb:09:88:ad:38:37:8d:ec:29:b2:40:1d:e3: cb:ca:a2:a2:21:f5:3b:79:81:89:c4:27:45:92:ea: 10:63:d8:b5:2d:25:59:bc:c1:be:5e:7b:67:36:d8: db:71:8c:35:c1:d2:76:7c:f7:2d:a0:88:3d:05:ff: a0:e3:f3:0b:85:f6:9e:52:d0:a9:87:72:d5:06:8c: 2a:c3:94:3b:e9:6a:ae:45:8e:bd:51:84:cc:e9:e6: ca:3f:2c:c5:a7:3a:44:b7:e1:b3:24:e3:fd:bf:73: e9:e7:6e:d2:ba:61:ac:ac:da:f7:a9:f2:c0:ac:3b: a9:b6:5a:f3:7d:81:36:d0:5b:9a:a3:49:02:24:c5: 3d:a6:ed:af:17:a2:d4:63:47:e7:09:19:e6:bd:89: f5:14:31:84:53:06:91:7a:80:fe:37:af:d4:4b:f4: 08:ee:de:f7:e6:8f:01:a0:aa:0f:34:6c:e6:87:80: 4d:e9:fd:85:a1:27:22:24:29:99:de:af:58:a4:ba: 1c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:85:AE:BD:E6:BB:E7:AB:A8:E1:A7:0F:94:BF:DE:F5:39:AF:83:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6caf933e-426b-304e-b351-7170e3d8554a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:68:52:f8:28:d2:48:1d:c6:b6:18:be:bb:f0:d7:b0:82:cc: 7a:39:ff:47:8a:15:11:12:40:0a:08:aa:3f:3e:4d:23:a4:69: 3f:97:91:19:25:41:3d:bc:89:f0:b7:f2:a3:31:cb:5e:47:b2: 45:c9:5f:3c:5f:7b:6f:c3:aa:3c:f3:d8:72:1a:75:66:9c:13: 3f:77:ec:84:5c:46:05:98:5d:04:15:a1:64:cb:12:4c:87:b5: e2:16:d9:64:b2:0f:d8:51:a0:66:e2:25:1d:a0:75:3e:01:4e: e7:0b:39:8d:82:83:80:f6:4e:8b:04:1e:25:45:59:6b:ce:c7: da:6d:11:9c:44:49:34:e5:43:47:24:27:57:6e:eb:1a:38:a8: f2:40:68:6e:7b:83:5a:cd:bc:55:28:b5:34:a8:21:46:4d:2f: b8:87:fe:2e:a9:54:a3:7d:3d:90:fe:ad:2d:86:08:8f:65:8e: 90:b4:70:58:9d:d0:e4:90:ee:b4:ef:04:2a:bc:52:81:c9:8d: 07:f8:be:43:09:35:b2:ea:a6:d0:81:8d:b2:dc:71:73:4c:aa: 69:e3:5e:03:02:0f:12:3c:ad:1e:a6:d7:a4:0d:dd:f1:1c:e5: e6:34:22:fe:cd:62:a4:75:13:3d:74:ab:f4:d7:64:40:a7:6a: b4:06:cf:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkup8qgAA1jCnUVhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTAyZDI5MDctYjIxMS00Zjk5LWFmYmMtYTk4ZDYzZTIxYzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszhVSIGL/LgDX4MlDO0qITsHrcmTArhcgoS1 9QKS/rxp0QKB3D7KBWhZvO6CKTqK+q0ws6+rr2oE+/xgossJiK04N43sKbJAHePL yqKiIfU7eYGJxCdFkuoQY9i1LSVZvMG+XntnNtjbcYw1wdJ2fPctoIg9Bf+g4/ML hfaeUtCph3LVBowqw5Q76WquRY69UYTM6ebKPyzFpzpEt+GzJOP9v3Pp527SumGs rNr3qfLArDuptlrzfYE20Fuao0kCJMU9pu2vF6LUY0fnCRnmvYn1FDGEUwaReoD+ N6/US/QI7t735o8BoKoPNGzmh4BN6f2FoSciJCmZ3q9YpLocLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKFrr3mu+erqOGnD5S/3vU5r4PnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmNhZjkzM2UtNDI2Yi0z MDRlLWIzNTEtNzE3MGUzZDg1NTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhoUvgo0kgdxrYYvrvw17CCzHo5/0eKFRESQAoIqj8+TSOkaT+XkRkl QT28ifC38qMxy15HskXJXzxfe2/Dqjzz2HIadWacEz937IRcRgWYXQQVoWTLEkyH teIW2WSyD9hRoGbiJR2gdT4BTucLOY2Cg4D2TosEHiVFWWvOx9ptEZxESTTlQ0ck J1du6xo4qPJAaG57g1rNvFUotTSoIUZNL7iH/i6pVKN9PZD+rS2GCI9ljpC0cFid 0OSQ7rTvBCq8UoHJjQf4vkMJNbLqptCBjbLccXNMqmnjXgMCDxI8rR6m16QN3fEc 5eY0Iv7NYqR1Ez10q/TXZECnarQGz/c= -----END CERTIFICATE-----Generated at Sun Apr 27 16:35:19 2025 by rpki-client