$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a8cca47-2919-30eb-85e4-9fbf1b85f1a6.roa File: 8a8cca47-2919-30eb-85e4-9fbf1b85f1a6.roa (raw, json) Hash identifier: Tba+G4phqpFIdhFX4p8ZB1Z2lfWfo0Ggi+G45uKU5oI= Subject key identifier: F5:6B:96:22:DE:6A:A9:C1:CC:DE:75:F1:49:49:68:FE:C2:DC:14:3A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAA15DC4C6C3FD9DF57D40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a8cca47-2919-30eb-85e4-9fbf1b85f1a6.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:a1:5d:c4:c6:c3:fd:9d:f5:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=49b41e51-3d8d-436c-bc4b-ad294212eedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:24:39:86:7f:1b:d2:08:7a:32:e3:0b:f5:c2: e1:9f:45:31:e7:30:08:a7:58:c2:a7:01:27:d6:c1: e2:dd:3b:f2:31:06:bb:18:86:a4:db:ab:87:fc:88: af:2c:af:85:5d:1c:ea:9a:9b:eb:70:19:be:76:cd: d7:75:46:9b:65:f3:05:db:51:c3:48:16:09:37:50: a5:4a:ef:e8:61:34:cc:18:75:7b:0a:be:7b:9c:6d: f8:ff:f8:e5:55:82:a4:3f:8c:98:48:c9:e4:0a:83: 7e:f3:0a:37:d5:eb:e4:dc:27:29:ec:ca:48:8d:f7: 0b:58:4a:d2:b7:a6:9e:f4:d0:07:d1:c5:70:4b:8f: 7e:ff:40:82:be:62:29:7c:b5:90:0b:26:0e:22:cf: 4c:bb:fc:1a:a5:82:c3:9f:39:6f:74:da:99:30:c0: 16:6f:b5:98:10:c8:3c:41:c3:20:6a:d2:8c:b1:59: 16:aa:3e:51:b0:26:84:9c:8e:df:7f:a3:d3:b5:5c: 8b:7f:24:2c:9d:11:6c:7f:b8:f0:8e:6c:65:e8:49: 5a:d4:19:f7:b8:1a:52:79:d3:1b:3a:db:43:9b:84: c9:f9:8f:85:74:9b:06:49:e7:45:84:6d:7b:0d:c9: d5:06:1f:09:e7:db:26:ea:81:c5:1a:e4:f7:23:a0: 3f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6B:96:22:DE:6A:A9:C1:CC:DE:75:F1:49:49:68:FE:C2:DC:14:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a8cca47-2919-30eb-85e4-9fbf1b85f1a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:b3:67:bd:05:fa:a2:01:36:00:69:d0:46:f6:d7:df:7c:ac: b5:2c:17:4f:e6:2d:1f:5a:25:35:d3:9c:ba:20:b2:fa:0d:38: 84:33:1e:ca:f8:c8:aa:56:77:99:73:f3:1e:84:bc:30:a5:a7: ba:15:a2:31:b1:07:7c:32:74:e7:c1:f3:35:f9:7b:9c:f9:0c: 06:cf:e0:e6:49:d1:a6:18:42:67:8e:21:b1:fa:02:31:5d:a3: e1:f7:c0:4d:7b:b4:82:74:ca:64:54:93:80:24:f6:56:9d:a9: 44:a2:92:4a:9a:2b:a8:55:9a:cb:d3:13:97:f9:b1:80:07:b9: e9:a7:f9:a2:31:cd:a8:19:1b:ea:0c:e9:99:ef:a6:71:74:ae: 28:e6:41:16:81:f4:42:fa:54:24:fc:f9:50:2c:ca:4c:0b:56: b6:71:00:94:9b:37:b2:d6:ff:0d:95:11:f6:fe:61:c2:b3:31: 74:18:d9:38:d2:98:b0:a0:b8:ba:dc:58:13:92:38:f3:43:d8: ca:89:97:2d:57:7f:79:80:9e:e8:2b:45:05:79:2e:6d:98:31: 8f:2e:01:99:e4:eb:d9:95:d9:df:10:fb:b3:6a:28:03:09:02: d4:c0:f6:76:e7:8a:ad:1e:5f:dc:40:fb:f2:c6:e5:5b:7b:d6: 54:5b:97:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuqFdxMbD/Z31fUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDliNDFlNTEtM2Q4ZC00MzZjLWJjNGItYWQyOTQyMTJlZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCQ5hn8b0gh6MuML9cLhn0Ux5zAIp1jCpwEn 1sHi3TvyMQa7GIak26uH/IivLK+FXRzqmpvrcBm+ds3XdUabZfMF21HDSBYJN1Cl Su/oYTTMGHV7Cr57nG34//jlVYKkP4yYSMnkCoN+8wo31evk3Ccp7MpIjfcLWErS t6ae9NAH0cVwS49+/0CCvmIpfLWQCyYOIs9Mu/wapYLDnzlvdNqZMMAWb7WYEMg8 QcMgatKMsVkWqj5RsCaEnI7ff6PTtVyLfyQsnRFsf7jwjmxl6Ela1Bn3uBpSedMb OttDm4TJ+Y+FdJsGSedFhG17DcnVBh8J59sm6oHFGuT3I6A/oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVrliLeaqnBzN518UlJaP7C3BQ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGE4Y2NhNDctMjkxOS0z MGViLTg1ZTQtOWZiZjFiODVmMWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBUlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6zZ70F+qIBNgBp0Eb21998rLUsF0/mLR9aJTXTnLogsvoNOIQzHsr4 yKpWd5lz8x6EvDClp7oVojGxB3wydOfB8zX5e5z5DAbP4OZJ0aYYQmeOIbH6AjFd o+H3wE17tIJ0ymRUk4Ak9ladqUSikkqaK6hVmsvTE5f5sYAHuemn+aIxzagZG+oM 6ZnvpnF0rijmQRaB9EL6VCT8+VAsykwLVrZxAJSbN7LW/w2VEfb+YcKzMXQY2TjS mLCguLrcWBOSOPND2MqJly1Xf3mAnugrRQV5Lm2YMY8uAZnk69mV2d8Q+7NqKAMJ AtTA9nbniq0eX9xA+/LG5Vt71lRbl2g= -----END CERTIFICATE-----Generated at Sun Apr 27 01:37:28 2025 by rpki-client