$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85c6a687-0218-3be1-a801-fcc7c4cc76a7.roa File: 85c6a687-0218-3be1-a801-fcc7c4cc76a7.roa (raw, json) Hash identifier: E9I2+9w2GWP/cRynuUFGNnV22W+ZwmUg9VCv0AcrGFE= Subject key identifier: BD:FB:D8:33:6E:CC:0F:1C:98:86:4B:0F:9D:D8:43:B6:5A:6F:8B:37 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BADA896A52624721E7B000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85c6a687-0218-3be1-a801-fcc7c4cc76a7.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 40306 IP address blocks: 184.63.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:da:89:6a:52:62:47:21:e7:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=83c246d1-5df8-447d-ae77-c3e3a0fe7409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a2:74:63:65:3f:48:a1:00:73:11:15:b2:03: 34:cb:b4:59:60:2f:fb:df:5c:b3:3c:ab:1e:3a:68: d7:b2:51:a6:8e:ae:92:73:18:97:64:07:9f:f7:b2: 0a:7d:db:f2:33:06:e0:85:98:77:e2:6b:47:9d:18: 95:f4:6b:25:fb:9a:69:9c:bc:6f:a8:b9:ed:42:54: 57:71:73:cb:75:03:5b:fa:0f:c4:05:05:41:56:0a: e2:c2:7a:75:b0:88:ed:a9:d5:81:eb:d6:97:98:b4: bd:a0:e2:a4:df:23:c6:9a:f7:6e:5d:fb:a9:4b:b5: c9:40:b0:1b:16:0e:2c:a8:82:7f:e3:7e:cb:40:3f: 28:52:f7:53:dd:61:06:a4:91:62:ec:24:87:dc:f0: 15:e9:a3:21:e1:e5:d9:46:48:10:0e:31:86:1a:75: 69:c0:88:7c:73:b7:17:9c:b7:c8:37:44:aa:a4:65: bc:07:cb:e1:cf:ac:5e:c0:11:9a:b0:73:f6:fc:ca: 10:cb:c7:dd:25:90:6e:9e:40:3c:0e:c4:e4:31:04: 0a:24:6b:4c:ed:3d:00:9a:de:3a:66:1f:1b:1c:2c: a5:b6:75:d1:d4:ea:42:db:b2:23:20:0b:a1:ca:01: 7c:15:8b:25:46:b9:94:5f:3d:cf:c1:c7:88:7d:f2: 8a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FB:D8:33:6E:CC:0F:1C:98:86:4B:0F:9D:D8:43:B6:5A:6F:8B:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85c6a687-0218-3be1-a801-fcc7c4cc76a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.63.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:10:ce:a8:f4:26:78:5b:33:a8:58:fb:4c:25:e7:29:5a:59: fa:7f:48:2c:ae:0e:d5:1f:4e:05:7d:19:39:c4:f1:dc:be:3e: ab:95:ff:54:a9:63:68:a6:15:5b:f1:d3:64:e2:ff:3b:39:a3: 75:af:93:18:ba:a9:1a:12:95:b5:f8:77:e8:de:70:81:e7:14: df:7a:3c:bc:35:78:c9:a6:f5:d7:e6:c3:be:db:6a:06:5d:8f: 28:27:d4:31:03:c7:9d:15:d4:aa:ba:88:77:d0:38:5c:be:45: 36:58:e5:da:10:84:1c:61:81:c3:cd:ea:77:38:48:30:89:73: 35:71:52:e8:74:93:e8:03:d7:72:7b:ae:b8:f1:5b:14:3c:c2: db:99:16:2f:f8:f9:b7:4f:97:97:62:70:91:87:27:8b:06:ee: e7:54:dc:45:06:f8:68:59:1c:47:00:b8:98:18:70:f8:16:ad: 6a:f2:c3:a2:14:ef:d5:54:0d:87:eb:2f:c7:47:07:8a:ef:31: b5:c3:79:12:3d:30:a6:27:cc:58:f1:50:13:22:ff:3c:b2:73: b7:1c:ba:09:91:a6:d0:42:dd:9f:0f:c4:e0:e6:ba:cd:7d:df: 8e:0c:2b:74:3f:20:37:20:c5:ba:ed:cb:24:a4:b2:88:f8:5d: 82:de:23:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutqJalJiRyHnsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODNjMjQ2ZDEtNWRmOC00NDdkLWFlNzctYzNlM2EwZmU3NDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6J0Y2U/SKEAcxEVsgM0y7RZYC/731yzPKse OmjXslGmjq6ScxiXZAef97IKfdvyMwbghZh34mtHnRiV9Gsl+5ppnLxvqLntQlRX cXPLdQNb+g/EBQVBVgriwnp1sIjtqdWB69aXmLS9oOKk3yPGmvduXfupS7XJQLAb Fg4sqIJ/437LQD8oUvdT3WEGpJFi7CSH3PAV6aMh4eXZRkgQDjGGGnVpwIh8c7cX nLfIN0SqpGW8B8vhz6xewBGasHP2/MoQy8fdJZBunkA8DsTkMQQKJGtM7T0Amt46 Zh8bHCyltnXR1OpC27IjIAuhygF8FYslRrmUXz3PwceIffKKswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL372DNuzA8cmIZLD53YQ7Zab4s3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODVjNmE2ODctMDIxOC0z YmUxLWE4MDEtZmNjN2M0Y2M3NmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuD8sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQQzqj0JnhbM6hY+0wl5ylaWfp/SCyuDtUfTgV9GTnE8dy+PquV/1Sp Y2imFVvx02Ti/zs5o3Wvkxi6qRoSlbX4d+jecIHnFN96PLw1eMmm9dfmw77bagZd jygn1DEDx50V1Kq6iHfQOFy+RTZY5doQhBxhgcPN6nc4SDCJczVxUuh0k+gD13J7 rrjxWxQ8wtuZFi/4+bdPl5dicJGHJ4sG7udU3EUG+GhZHEcAuJgYcPgWrWryw6IU 79VUDYfrL8dHB4rvMbXDeRI9MKYnzFjxUBMi/zyyc7ccugmRptBC3Z8PxODmus19 344MK3Q/IDcgxbrtyySksoj4XYLeI/k= -----END CERTIFICATE-----Generated at Sun Apr 27 05:38:25 2025 by rpki-client