$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa File: 85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa (raw, json) Hash identifier: lszWLB6eHV+/9faakV1MVvC+MVdOTPRtDbRjw9jua0I= Subject key identifier: 5C:20:80:0D:D5:40:B4:F5:C4:50:4C:15:11:D2:8F:84:2B:6F:A6:D9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAA50E213D9475899F3000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:a5:0e:21:3d:94:75:89:9f:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1395e572-4218-41c2-b99a-ccaf26044fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:45:d3:71:c2:ce:54:b7:15:2b:ce:df:9e:24: ee:61:60:4f:bb:3f:95:8f:96:0f:60:69:e7:c1:01: 2f:3f:bd:8e:c5:d5:38:21:c7:28:e7:1d:90:84:93: 8a:ba:84:28:4d:ce:3f:1c:a5:d3:db:e1:4b:01:5c: e9:4f:f5:2d:08:9e:33:d0:97:9a:bb:30:31:73:2b: 71:59:fe:fd:5b:a7:d1:00:79:80:76:72:d8:64:30: 82:5d:17:8f:ee:a4:fa:a6:8b:ac:09:be:32:6a:4a: db:4a:78:46:55:f3:bf:b9:e0:8f:1e:48:be:81:9c: a3:f5:a0:db:ea:2d:82:3a:e3:f5:26:83:59:54:20: 8b:56:55:90:0b:81:52:6d:42:10:9e:9a:d2:6d:79: 2a:1a:56:89:e8:b8:6b:d1:ab:01:72:82:98:54:2d: f9:ef:c4:9f:28:23:8f:fe:e2:cf:f9:b6:2a:bb:d6: 29:91:a4:71:aa:09:c8:dc:51:99:84:2d:5f:a7:23: 14:18:97:a4:89:c2:96:e2:fd:fe:75:0e:76:80:d8: 4b:36:22:4a:90:52:bc:e1:d3:c9:43:ac:e6:9b:08: d0:0e:7d:db:9b:22:4f:81:e0:c0:33:0f:c2:9e:1d: 9d:7d:b1:0f:84:6d:6c:13:d9:4f:d5:ce:b9:8b:54: c8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:20:80:0D:D5:40:B4:F5:C4:50:4C:15:11:D2:8F:84:2B:6F:A6:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:fe:6a:a7:ca:07:6a:88:bd:7e:df:a5:7c:47:24:35:f9:65: 46:7f:de:67:40:e2:f2:e2:a1:c7:68:3a:1e:8b:91:24:6d:3b: 27:5d:02:6f:84:b6:4e:7b:86:5e:84:95:60:e3:d8:7c:7a:f8: 3b:48:23:42:2b:88:51:0d:8c:c1:e7:6d:9a:13:9e:e9:db:16: d5:06:cc:ea:37:e9:4f:9c:8a:9e:2b:02:b1:6e:96:8a:af:c4: 55:6c:2e:c5:ff:bf:26:f2:07:ce:76:b8:82:7b:89:5b:4a:e6: 0a:b3:e6:c2:b7:e8:b5:03:8f:29:dc:17:f5:82:32:6e:7b:01: 40:bb:f6:0e:e5:02:55:83:ee:98:1d:e4:e4:2b:6b:6a:a2:16: 83:86:7b:5b:04:2a:2b:ea:8d:e3:42:7c:e8:2b:cd:3f:8f:d9: c1:77:7e:8f:8a:43:d7:15:86:c5:2d:75:7d:b3:a4:fd:c0:f4: 92:5b:8e:9a:87:78:10:cd:22:4a:62:d7:7b:f7:a6:fc:56:98: 99:5f:e3:4a:f0:5f:4d:51:02:db:73:eb:7f:21:92:96:5c:b5: f5:d0:8c:aa:be:cf:ea:4d:85:56:fc:43:dd:1d:2f:c8:66:5a: 8a:51:a9:d5:54:54:5b:23:25:12:ae:65:c8:99:1b:83:7b:8a: 50:98:6a:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuqUOIT2UdYmfMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTM5NWU1NzItNDIxOC00MWMyLWI5OWEtY2NhZjI2MDQ0ZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkXTccLOVLcVK87fniTuYWBPuz+Vj5YPYGnn wQEvP72OxdU4Icco5x2QhJOKuoQoTc4/HKXT2+FLAVzpT/UtCJ4z0JeauzAxcytx Wf79W6fRAHmAdnLYZDCCXReP7qT6pousCb4yakrbSnhGVfO/ueCPHki+gZyj9aDb 6i2COuP1JoNZVCCLVlWQC4FSbUIQnprSbXkqGlaJ6Lhr0asBcoKYVC3578SfKCOP /uLP+bYqu9YpkaRxqgnI3FGZhC1fpyMUGJekicKW4v3+dQ52gNhLNiJKkFK84dPJ Q6zmmwjQDn3bmyJPgeDAMw/Cnh2dfbEPhG1sE9lP1c65i1TIOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwggA3VQLT1xFBMFRHSj4Qrb6bZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODVmMDg0MzMtMTJlMy0z ZDllLWJmZGYtMGVmM2QyZTZjNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED+aqfKB2qIvX7fpXxHJDX5ZUZ/3mdA4vLiocdoOh6LkSRtOyddAm+E tk57hl6ElWDj2Hx6+DtII0IriFENjMHnbZoTnunbFtUGzOo36U+cip4rArFuloqv xFVsLsX/vybyB852uIJ7iVtK5gqz5sK36LUDjyncF/WCMm57AUC79g7lAlWD7pgd 5OQra2qiFoOGe1sEKivqjeNCfOgrzT+P2cF3fo+KQ9cVhsUtdX2zpP3A9JJbjpqH eBDNIkpi13v3pvxWmJlf40rwX01RAttz638hkpZctfXQjKq+z+pNhVb8Q90dL8hm WopRqdVUVFsjJRKuZciZG4N7ilCYavI= -----END CERTIFICATE-----Generated at Sun Apr 27 02:57:21 2025 by rpki-client