$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74da1442-5851-32fb-b1f0-a4872489e5c4.roa File: 74da1442-5851-32fb-b1f0-a4872489e5c4.roa (raw, json) Hash identifier: oeSBVPt/JKzyw93vDAw4C88XSpcqbBI5Km9Zj3XHQYQ= Subject key identifier: 82:C7:D2:9F:61:65:59:85:57:F5:48:2A:2B:B2:AF:38:DF:72:83:5A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB491AB265D5EE0A750F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74da1442-5851-32fb-b1f0-a4872489e5c4.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:49:1a:b2:65:d5:ee:0a:75:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2c937407-794d-48ba-a4ec-60fe95bb3b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:90:74:4a:04:60:6c:39:5d:37:9f:1e:8a:7a: 28:b8:e0:d4:de:d2:53:59:3a:69:6a:3e:4d:27:86: e9:4f:ad:ab:e8:98:f7:39:dc:b0:c1:a3:2f:c5:e8: 09:33:2b:64:e4:f2:80:47:d7:58:78:cd:3f:b1:1d: 4a:5d:32:e6:5a:55:ac:8b:34:31:06:e7:24:69:57: 9a:a3:8d:fc:7f:43:89:86:76:02:02:0d:12:74:64: e2:8b:68:9b:5b:cb:2e:74:8d:c6:2b:ee:b3:88:39: 20:b0:13:35:66:fe:eb:e4:58:55:62:cd:73:a8:41: 6a:ba:5a:59:7b:ac:64:bd:bf:50:60:d9:b5:70:85: 10:f8:c6:d7:2c:16:9d:4c:88:6f:99:4e:26:a2:46: 3f:af:ba:73:87:ae:0e:a1:4c:3a:a1:f9:09:86:37: 2e:62:57:31:16:f1:2f:11:78:be:6b:20:c5:9c:a6: 69:10:43:24:61:9b:04:ce:f9:81:2a:db:43:85:dc: bb:83:1d:49:63:96:b7:f2:f8:0b:9c:bc:fe:01:db: 08:54:80:77:26:c4:93:94:28:33:8d:9c:cc:b3:89: 7a:35:ca:62:e1:64:6e:44:7b:16:ee:ba:36:a8:e4: 57:7d:a9:88:df:2b:bd:12:62:b3:36:c7:6c:22:8e: dc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C7:D2:9F:61:65:59:85:57:F5:48:2A:2B:B2:AF:38:DF:72:83:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74da1442-5851-32fb-b1f0-a4872489e5c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:18:6b:37:29:df:a8:8e:23:71:5a:71:72:b6:85:70:12:14: 47:b3:bb:c3:d3:62:82:bc:46:4a:ef:86:51:e8:8b:61:bc:c4: 66:df:9f:34:7e:10:2d:58:a9:e5:93:78:5b:1c:5a:c0:20:be: 05:2f:ba:9e:58:af:88:12:7c:43:29:47:63:6b:3c:cd:ec:48: d7:bd:90:62:c0:2e:5f:a4:1c:a7:d9:ff:9b:63:22:09:16:d5: fa:cf:2a:39:6f:39:a3:19:14:8a:a2:ef:7a:91:41:ee:65:b9: 3f:3d:c9:89:4d:86:48:2b:47:22:53:2a:16:a8:cf:8a:a8:a0: 57:fb:29:5d:2a:42:6d:44:99:40:28:66:ba:4c:9f:7f:81:7e: 31:de:39:23:29:ba:eb:fe:9d:6f:f6:f7:a1:32:9d:48:c4:e2: cf:3b:79:fe:6f:c2:4e:bf:79:58:15:22:12:c9:5b:ef:36:b3: 98:98:c2:0d:c1:b5:21:20:ff:a9:2e:01:07:1a:f5:28:6f:aa: 45:b1:db:05:9f:f0:6a:c7:2b:f7:81:10:99:72:24:ad:af:15: a7:2a:a2:70:9c:6c:ee:f9:0e:81:10:be:0f:9a:c5:c6:4a:4e: 6e:ea:0c:5d:85:86:5b:e2:c4:13:d2:13:db:1d:97:59:ba:d9: d3:dd:d3:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku0kasmXV7gp1DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmM5Mzc0MDctNzk0ZC00OGJhLWE0ZWMtNjBmZTk1YmIzYjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJB0SgRgbDldN58einoouODU3tJTWTppaj5N J4bpT62r6Jj3OdywwaMvxegJMytk5PKAR9dYeM0/sR1KXTLmWlWsizQxBuckaVea o438f0OJhnYCAg0SdGTii2ibW8sudI3GK+6ziDkgsBM1Zv7r5FhVYs1zqEFqulpZ e6xkvb9QYNm1cIUQ+MbXLBadTIhvmU4mokY/r7pzh64OoUw6ofkJhjcuYlcxFvEv EXi+ayDFnKZpEEMkYZsEzvmBKttDhdy7gx1JY5a38vgLnLz+AdsIVIB3JsSTlCgz jZzMs4l6Ncpi4WRuRHsW7ro2qORXfamI3yu9EmKzNsdsIo7cuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILH0p9hZVmFV/VIKiuyrzjfcoNaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzRkYTE0NDItNTg1MS0z MmZiLWIxZjAtYTQ4NzI0ODllNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBW9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0Yazcp36iOI3FacXK2hXASFEezu8PTYoK8RkrvhlHoi2G8xGbfnzR+ EC1YqeWTeFscWsAgvgUvup5Yr4gSfEMpR2NrPM3sSNe9kGLALl+kHKfZ/5tjIgkW 1frPKjlvOaMZFIqi73qRQe5luT89yYlNhkgrRyJTKhaoz4qooFf7KV0qQm1EmUAo ZrpMn3+BfjHeOSMpuuv+nW/296EynUjE4s87ef5vwk6/eVgVIhLJW+82s5iYwg3B tSEg/6kuAQca9ShvqkWx2wWf8GrHK/eBEJlyJK2vFacqonCcbO75DoEQvg+axcZK Tm7qDF2FhlvixBPSE9sdl1m62dPd0xQ= -----END CERTIFICATE-----Generated at Sun Apr 27 16:34:40 2025 by rpki-client