$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/846c487d-fa11-31f6-b99a-a3ffff0a0369.roa File: 846c487d-fa11-31f6-b99a-a3ffff0a0369.roa (raw, json) Hash identifier: olSjr5A70CXjSLwJMcn6uxbHqm8yZePABZHInQzEz+4= Subject key identifier: 86:9F:04:30:8D:02:F8:57:81:45:55:70:27:07:08:EE:F0:89:C3:81 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB54100A07E8E6CF8DF400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/846c487d-fa11-31f6-b99a-a3ffff0a0369.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.63.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:54:10:0a:07:e8:e6:cf:8d:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8172ac28-f7dd-417e-8e5c-e05d13107a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e1:8a:fe:87:d1:4d:05:eb:b2:f7:36:45:1d: 1e:f2:0a:38:71:88:de:a8:20:98:67:78:1c:c7:81: c4:29:c3:5d:c2:29:40:56:34:34:1d:a3:8b:f0:d4: 0a:b1:ba:a0:fe:e8:c3:61:72:96:b3:04:c5:c1:4c: 21:26:06:da:39:e0:e0:a5:c6:4b:ed:fb:29:3e:ec: f3:cb:2e:ba:31:a5:38:5d:aa:3d:10:f4:49:50:f3: 67:e5:83:12:84:66:1c:0a:6c:67:88:14:9a:53:15: f9:6e:3b:b5:0f:ae:83:bf:78:cb:0d:6f:49:c3:b6: 8e:6a:b6:b8:07:08:91:29:ec:8b:e1:d2:3e:05:62: 1b:82:be:9c:18:7b:78:f1:08:b4:54:61:50:d2:9c: 62:12:d5:11:e8:55:48:60:d3:cf:3b:f5:ea:a4:62: 2c:48:ae:8a:ac:b3:4e:69:41:20:4a:d8:63:29:67: 9e:ae:6c:5a:3d:b6:cd:17:d8:5e:3b:d6:85:b8:81: 81:6b:a8:61:b8:09:45:b4:52:54:a3:a2:26:91:ba: cb:13:44:d8:33:89:6c:d5:1d:b6:0e:6d:e0:d4:66: 10:8d:74:3f:1d:b1:d5:9d:42:c6:34:a6:d4:c4:95: 02:3d:20:ee:57:12:0d:27:cc:22:a0:1c:26:68:7c: 1d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9F:04:30:8D:02:F8:57:81:45:55:70:27:07:08:EE:F0:89:C3:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/846c487d-fa11-31f6-b99a-a3ffff0a0369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.63.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:34:27:bc:16:2c:2a:54:50:e5:be:53:b4:5c:b1:31:d2:ee: e4:ab:66:6a:05:76:73:c3:38:f5:8f:8c:ef:04:f6:9b:30:bc: cb:6a:59:95:d1:f7:80:cb:07:58:10:20:eb:ad:7e:0c:10:07: dd:a1:83:30:fc:ce:a2:ba:5d:9b:86:c3:b0:56:79:19:6a:f6: a4:5a:2a:0f:49:06:72:ba:cd:a1:f4:37:cf:59:66:4d:4a:49: a2:c9:83:be:68:98:76:31:65:f3:09:75:6f:4d:73:bb:e1:53: 0b:91:ed:84:cd:e6:be:3b:19:49:e0:b0:db:99:bc:d5:ab:7b: f5:8d:b6:81:c6:51:49:5e:44:58:46:32:6a:fb:56:55:4e:d2: 4d:cc:1f:2e:9e:ba:0a:9c:95:d7:27:b4:61:d8:45:43:c9:cf: ca:3a:b6:e1:e4:24:98:47:34:41:da:de:74:48:76:02:dd:f6: a1:6b:7a:4a:fa:41:be:4e:55:16:a5:e2:ca:f7:fa:73:9b:ca: 10:d3:32:b7:db:30:ef:cb:a0:3f:8c:92:d3:31:7a:5e:b7:0b: 44:f5:8a:38:64:53:b0:d4:79:e0:3c:6f:ce:08:ed:19:99:17: 74:ed:a2:7c:84:ac:61:71:a1:56:84:79:03:aa:27:a2:0d:69: 7c:4a:13:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1QQCgfo5s+N9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODE3MmFjMjgtZjdkZC00MTdlLThlNWMtZTA1ZDEzMTA3YTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+GK/ofRTQXrsvc2RR0e8go4cYjeqCCYZ3gc x4HEKcNdwilAVjQ0HaOL8NQKsbqg/ujDYXKWswTFwUwhJgbaOeDgpcZL7fspPuzz yy66MaU4Xao9EPRJUPNn5YMShGYcCmxniBSaUxX5bju1D66Dv3jLDW9Jw7aOara4 BwiRKeyL4dI+BWIbgr6cGHt48Qi0VGFQ0pxiEtUR6FVIYNPPO/XqpGIsSK6KrLNO aUEgSthjKWeermxaPbbNF9heO9aFuIGBa6hhuAlFtFJUo6ImkbrLE0TYM4ls1R22 Dm3g1GYQjXQ/HbHVnULGNKbUxJUCPSDuVxINJ8wioBwmaHwdJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIafBDCNAvhXgUVVcCcHCO7wicOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODQ2YzQ4N2QtZmExMS0z MWY2LWI5OWEtYTNmZmZmMGEwMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD+bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ0J7wWLCpUUOW+U7RcsTHS7uSrZmoFdnPDOPWPjO8E9pswvMtqWZXR 94DLB1gQIOutfgwQB92hgzD8zqK6XZuGw7BWeRlq9qRaKg9JBnK6zaH0N89ZZk1K SaLJg75omHYxZfMJdW9Nc7vhUwuR7YTN5r47GUngsNuZvNWre/WNtoHGUUleRFhG Mmr7VlVO0k3MHy6eugqcldcntGHYRUPJz8o6tuHkJJhHNEHa3nRIdgLd9qFrekr6 Qb5OVRal4sr3+nObyhDTMrfbMO/LoD+MktMxel63C0T1ijhkU7DUeeA8b84I7RmZ F3TtonyErGFxoVaEeQOqJ6INaXxKE94= -----END CERTIFICATE-----Generated at Sun Apr 27 10:13:21 2025 by rpki-client