$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/711c64c7-4a14-3bc0-895c-fc4d4aee5ee1.roa File: 711c64c7-4a14-3bc0-895c-fc4d4aee5ee1.roa (raw, json) Hash identifier: 26hrHxTA2P4Z4p8HsBK7UtvOUFvCexyq+6nnVfoogTc= Subject key identifier: 61:91:4F:6D:79:98:52:6F:86:C3:D7:F6:77:70:0F:05:AC:D0:EB:DB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAA487A8C90D553078AF80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/711c64c7-4a14-3bc0-895c-fc4d4aee5ee1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:a4:87:a8:c9:0d:55:30:78:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2f46b79b-e3cc-452e-8192-7d5f054d808e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:2f:76:2f:47:83:a6:86:15:5f:3b:1e:4d: d6:cc:43:a4:1c:58:cd:83:e8:d7:31:f3:58:b4:f0: a9:56:98:08:03:5b:72:69:50:f2:a0:19:b7:a4:1a: 02:31:c2:a2:2d:16:3c:21:a0:01:42:25:43:15:eb: 44:9c:d4:bd:38:00:9c:ed:a2:c3:9d:2c:05:a6:d1: 58:4b:f7:8c:38:13:a9:c8:ae:32:d3:9a:eb:4e:85: 26:52:f8:75:eb:54:79:c4:9c:31:cf:de:ef:6d:6e: c5:6e:43:c3:78:16:1d:dd:1f:b0:f2:bd:66:c5:1b: a6:9d:8c:f0:a3:58:37:22:24:0e:ca:8b:f0:87:87: d5:1e:7c:18:5a:73:c0:4e:d6:20:51:96:07:9b:79: b6:88:2f:07:49:c9:45:47:8d:a3:f3:67:31:28:f2: ba:9f:ad:0e:31:c1:6e:03:2b:d3:03:09:4c:3d:fb: 2c:78:6b:cb:08:d8:83:b7:fe:40:66:39:81:41:d6: 68:0b:62:4e:7d:5e:d7:09:ca:68:3f:aa:46:9e:38: d3:25:54:24:bc:34:de:90:6d:11:b5:93:bf:c0:f0: 46:5d:5c:c5:b5:11:22:8f:4f:e1:b5:cb:52:85:c3: ac:2e:3b:0a:3a:29:95:58:9a:88:98:3e:9b:ca:03: 9e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:91:4F:6D:79:98:52:6F:86:C3:D7:F6:77:70:0F:05:AC:D0:EB:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/711c64c7-4a14-3bc0-895c-fc4d4aee5ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:5d:c0:cf:1a:30:dc:68:4e:a7:b0:87:1a:a9:76:47:d1:af: 98:c6:e8:8d:e0:24:72:4a:2a:23:82:b2:15:f9:e5:81:25:89: 4c:5c:53:0c:f5:0c:13:db:bd:92:64:59:dd:4a:a0:ee:04:fb: 9f:dc:ed:77:8b:84:bc:2b:08:17:6f:d8:45:68:90:30:ca:46: 6b:3b:9d:50:62:eb:05:fd:9e:f9:c1:be:94:8c:ad:15:a1:70: a4:0c:e9:e1:54:5a:5c:72:96:59:35:86:84:f9:8a:98:ee:cd: d6:da:bf:d3:38:6e:84:31:30:16:68:9c:84:a0:88:ef:72:2f: 5f:8a:f3:f9:47:99:5d:4a:fb:9b:9b:0e:23:e6:60:11:e4:14: 16:3c:20:a5:4d:fb:67:dc:62:49:73:7d:7f:73:55:ed:82:32: 10:6b:dd:fb:62:63:06:dc:78:e0:9f:2c:c4:15:ef:fb:53:0d: 23:45:a1:d0:00:52:58:c9:7d:14:d9:a4:c1:23:45:e7:00:77: 2d:de:62:af:14:ef:77:14:ab:dc:d8:22:bc:99:ec:60:3d:cd: cc:33:be:6a:27:49:8d:c0:ea:cb:97:ef:38:47:44:00:b1:ca: 4d:1e:2e:30:09:c0:40:c5:98:44:65:d4:47:06:24:4d:e4:1f: 1f:8b:50:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuqSHqMkNVTB4r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmY0NmI3OWItZTNjYy00NTJlLTgxOTItN2Q1ZjA1NGQ4MDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGYvdi9Hg6aGFV87Hk3WzEOkHFjNg+jXMfNY tPCpVpgIA1tyaVDyoBm3pBoCMcKiLRY8IaABQiVDFetEnNS9OACc7aLDnSwFptFY S/eMOBOpyK4y05rrToUmUvh161R5xJwxz97vbW7FbkPDeBYd3R+w8r1mxRumnYzw o1g3IiQOyovwh4fVHnwYWnPATtYgUZYHm3m2iC8HSclFR42j82cxKPK6n60OMcFu AyvTAwlMPfsseGvLCNiDt/5AZjmBQdZoC2JOfV7XCcpoP6pGnjjTJVQkvDTekG0R tZO/wPBGXVzFtREij0/htctShcOsLjsKOimVWJqImD6bygOeewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGRT215mFJvhsPX9ndwDwWs0OvbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzExYzY0YzctNGExNC0z YmMwLTg5NWMtZmM0ZDRhZWU1ZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9dwM8aMNxoTqewhxqpdkfRr5jG6I3gJHJKKiOCshX55YEliUxcUwz1 DBPbvZJkWd1KoO4E+5/c7XeLhLwrCBdv2EVokDDKRms7nVBi6wX9nvnBvpSMrRWh cKQM6eFUWlxyllk1hoT5ipjuzdbav9M4boQxMBZonISgiO9yL1+K8/lHmV1K+5ub DiPmYBHkFBY8IKVN+2fcYklzfX9zVe2CMhBr3ftiYwbceOCfLMQV7/tTDSNFodAA UljJfRTZpMEjRecAdy3eYq8U73cUq9zYIryZ7GA9zcwzvmonSY3A6suX7zhHRACx yk0eLjAJwEDFmERl1EcGJE3kHx+LUGA= -----END CERTIFICATE-----Generated at Sun Apr 27 12:54:04 2025 by rpki-client