$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f7b1408-84ff-37ca-8b92-a380aefab40a.roa File: 7f7b1408-84ff-37ca-8b92-a380aefab40a.roa (raw, json) Hash identifier: D8e5xCQISalJbT0Q0WjIf14KSiqpo+eu7fz9jxowyL8= Subject key identifier: 11:9B:26:1D:95:F8:39:E4:34:04:13:C6:36:73:BE:7A:17:C8:1E:62 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAA75A44855268D34395A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f7b1408-84ff-37ca-8b92-a380aefab40a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:a7:5a:44:85:52:68:d3:43:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=cf4677e1-7869-4ade-8323-852215f1631b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5b:b4:7b:43:9b:40:0c:a4:41:69:0f:c5:fa: 56:c1:74:e9:75:39:cd:ec:c9:d2:a2:21:5e:48:d9: 85:de:8f:14:d7:28:cc:f8:02:d8:e4:00:71:81:0a: 46:5b:16:6d:e8:24:b3:74:13:54:a4:27:c5:39:c8: 52:f9:55:c1:2a:48:10:eb:35:f6:6a:49:2e:e5:2d: c9:e2:cd:bd:00:c2:1c:81:01:07:9a:a5:97:9f:11: 83:eb:b8:97:eb:c3:96:52:a0:ea:a1:8d:e9:69:a8: 49:b6:e1:ed:a8:2a:f8:86:cc:d1:fc:11:62:5c:9f: 4d:1a:3b:a3:fa:67:66:e8:45:41:9d:48:fd:02:be: cb:7f:bb:ce:4a:15:b4:b1:03:34:a2:26:c0:05:35: 35:c5:07:7c:d2:75:67:cf:c9:8a:7b:91:55:e3:3f: d1:b8:ea:8a:9f:71:c9:e3:b6:c5:b8:9e:74:16:b8: 8b:e1:26:00:ff:60:61:28:14:ef:2d:e7:59:e6:6a: 45:3d:53:61:10:7a:c5:49:70:a6:52:f8:45:d9:d9: 11:69:95:91:db:93:bb:1c:06:a6:28:40:0f:ea:10: 8d:9c:83:e3:5f:73:46:ca:b5:3d:d4:62:0d:50:8c: f9:e1:63:cc:a4:e3:2a:b7:db:25:3a:95:aa:27:92: b5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9B:26:1D:95:F8:39:E4:34:04:13:C6:36:73:BE:7A:17:C8:1E:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f7b1408-84ff-37ca-8b92-a380aefab40a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f4:2b:31:32:6c:d3:93:13:ee:16:70:56:ea:84:d7:0c:7b: 98:2a:cd:db:c0:d2:95:31:f9:7b:25:0b:3d:ce:36:dd:d9:fc: 1f:35:d8:09:60:07:e4:c2:c3:3a:8f:24:74:31:13:54:07:72: 0b:c4:86:3c:39:9c:75:12:94:c6:14:2a:df:59:eb:2b:01:df: a7:9b:57:35:58:bd:78:93:14:35:13:4d:64:21:98:1f:c6:ce: c0:be:e2:9b:8b:2d:a1:81:c9:2c:dd:d2:81:67:8c:99:cf:ec: 1e:d6:7d:9c:b5:24:1e:d0:3c:df:0e:eb:8f:93:42:2f:5d:c4: 3f:e4:3e:63:0a:85:ed:d4:8f:61:31:ff:a2:85:00:53:80:e1: ae:5c:87:da:cd:e0:09:8a:3b:fd:e0:f0:6b:1b:5e:e7:03:bd: 33:03:08:f4:56:fe:a7:5d:ac:0e:19:45:ff:2e:ae:45:84:38: 52:37:f4:2f:5d:1f:63:e8:8c:ac:c2:91:55:95:ca:96:dc:82: 5e:13:1f:82:8d:e5:54:8f:06:67:15:3d:ce:5d:ae:a9:d9:dd: 08:42:60:e5:f8:32:15:88:99:18:3a:94:d5:a8:71:5c:3b:df: ab:88:da:98:09:70:64:69:b7:67:c7:c6:57:f2:0c:42:c4:1e: 01:cb:a4:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuqdaRIVSaNNDlaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2Y0Njc3ZTEtNzg2OS00YWRlLTgzMjMtODUyMjE1ZjE2MzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31u0e0ObQAykQWkPxfpWwXTpdTnN7MnSoiFe SNmF3o8U1yjM+ALY5ABxgQpGWxZt6CSzdBNUpCfFOchS+VXBKkgQ6zX2akku5S3J 4s29AMIcgQEHmqWXnxGD67iX68OWUqDqoY3paahJtuHtqCr4hszR/BFiXJ9NGjuj +mdm6EVBnUj9Ar7Lf7vOShW0sQM0oibABTU1xQd80nVnz8mKe5FV4z/RuOqKn3HJ 47bFuJ50FriL4SYA/2BhKBTvLedZ5mpFPVNhEHrFSXCmUvhF2dkRaZWR25O7HAam KEAP6hCNnIPjX3NGyrU91GINUIz54WPMpOMqt9slOpWqJ5K1KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGbJh2V+DnkNAQTxjZzvnoXyB5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2Y3YjE0MDgtODRmZi0z N2NhLThiOTItYTM4MGFlZmFiNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBX/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAL0KzEybNOTE+4WcFbqhNcMe5gqzdvA0pUx+XslCz3ONt3Z/B812Alg B+TCwzqPJHQxE1QHcgvEhjw5nHUSlMYUKt9Z6ysB36ebVzVYvXiTFDUTTWQhmB/G zsC+4puLLaGBySzd0oFnjJnP7B7WfZy1JB7QPN8O64+TQi9dxD/kPmMKhe3Uj2Ex /6KFAFOA4a5ch9rN4AmKO/3g8GsbXucDvTMDCPRW/qddrA4ZRf8urkWEOFI39C9d H2PojKzCkVWVypbcgl4TH4KN5VSPBmcVPc5drqnZ3QhCYOX4MhWImRg6lNWocVw7 36uI2pgJcGRpt2fHxlfyDELEHgHLpCk= -----END CERTIFICATE-----Generated at Sun Apr 27 04:00:12 2025 by rpki-client