$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ad0c1b7-5845-3621-b18a-7156d523defc.roa File: 8ad0c1b7-5845-3621-b18a-7156d523defc.roa (raw, json) Hash identifier: ER/ZPaN+BVGNductTa1IJkYp3dWpJ2ph9dFf2yNkBh8= Subject key identifier: A0:ED:65:D6:59:4D:83:22:75:CC:AE:A1:95:56:4D:F8:3D:44:95:E0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB4934ABA4FFF3B63C4DE4 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ad0c1b7-5845-3621-b18a-7156d523defc.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:49:34:ab:a4:ff:f3:b6:3c:4d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3f6f6bf1-ea50-4eae-b172-0a18dbf4a3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fa:fb:16:7a:b3:37:c7:3b:65:2a:c3:52:56: 54:5c:a9:83:c2:19:d2:ce:22:0a:f1:7f:16:9f:4c: 3d:d5:40:29:7a:bb:98:78:45:ca:de:b7:75:4d:45: 14:4d:e4:ee:af:90:02:5c:43:4a:a8:71:c6:d5:ce: aa:92:fd:b8:f7:d5:38:f8:40:49:70:0d:ca:14:9b: 94:0f:8e:d6:1d:03:f4:e0:9c:c4:17:90:38:3d:55: 87:f2:66:11:a5:b9:fb:6d:d4:74:8c:ad:58:4f:a6: 8c:98:a0:b3:ac:64:bb:3e:3d:e4:e4:9f:42:45:ce: 9d:fc:50:ac:14:7a:6f:6c:bb:13:8b:1c:40:8a:0b: 8a:65:93:47:8c:86:d4:62:bc:4a:6f:31:20:41:89: d2:ad:1c:51:f2:b4:d2:e2:ed:60:e3:85:a9:9a:f2: 66:0b:c4:ad:69:4e:b6:66:80:97:8b:26:73:b8:1e: b9:6d:41:09:12:ed:a1:e8:e2:c4:67:9f:30:d1:76: 0a:78:d8:4f:11:c7:bc:11:b4:1c:b1:e4:16:78:dd: 33:02:06:46:28:4d:f3:bc:d2:68:c7:ce:01:e0:2e: c1:c9:02:0f:de:65:b6:6c:b9:5e:9a:40:8a:6a:ae: 5b:fe:9a:5b:9e:2b:50:74:09:d9:eb:69:42:cc:51: 6b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:ED:65:D6:59:4D:83:22:75:CC:AE:A1:95:56:4D:F8:3D:44:95:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ad0c1b7-5845-3621-b18a-7156d523defc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d8:c4:89:fa:cb:05:e8:cb:3d:c5:5b:0a:2a:ce:cf:23:1f: 5d:bc:3b:e7:b7:16:62:38:39:20:ff:b0:7c:7f:53:3e:37:24: 4d:9d:d2:8f:f1:eb:ca:7d:22:e2:fb:8c:2d:13:d6:bc:48:84: 54:c5:39:83:cb:00:49:1d:c5:f4:05:32:bb:b4:35:a5:cb:47: 90:6d:c2:9a:7f:e4:6e:1a:8b:2b:e4:42:a2:79:5e:79:11:d8: 2f:38:c4:0d:21:be:ce:83:71:ff:56:b2:93:33:80:5b:d4:0d: 90:ec:51:de:0a:79:04:8f:eb:8f:fa:96:82:13:4f:41:0a:02: 60:81:29:8e:f9:a5:51:77:06:e2:ca:a2:07:a9:09:c0:de:42: e3:84:d3:69:cb:02:27:2c:e3:89:2d:73:9c:ec:48:3c:f0:df: 06:ed:ae:a3:98:e3:61:75:a4:a5:c3:e7:bc:d0:ad:b2:f3:a5: b0:2a:7b:c0:34:e1:02:f7:79:c2:55:1d:6f:80:0c:fe:b8:3b: 1c:5a:82:fa:f6:64:9f:70:ee:1f:73:82:e3:57:57:a7:17:a2: c2:ab:a6:6c:b4:e8:86:d8:a8:95:78:47:3a:d4:9f:ee:a1:74: 1d:1c:53:4f:69:f0:2b:76:dd:8a:51:05:bd:02:80:71:9f:4a: 7b:ca:9f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku0k0q6T/87Y8TeQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2Y2ZjZiZjEtZWE1MC00ZWFlLWIxNzItMGExOGRiZjRhM2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfr7FnqzN8c7ZSrDUlZUXKmDwhnSziIK8X8W n0w91UAperuYeEXK3rd1TUUUTeTur5ACXENKqHHG1c6qkv2499U4+EBJcA3KFJuU D47WHQP04JzEF5A4PVWH8mYRpbn7bdR0jK1YT6aMmKCzrGS7Pj3k5J9CRc6d/FCs FHpvbLsTixxAiguKZZNHjIbUYrxKbzEgQYnSrRxR8rTS4u1g44WpmvJmC8StaU62 ZoCXiyZzuB65bUEJEu2h6OLEZ58w0XYKeNhPEce8EbQcseQWeN0zAgZGKE3zvNJo x84B4C7ByQIP3mW2bLlemkCKaq5b/ppbnitQdAnZ62lCzFFrAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDtZdZZTYMidcyuoZVWTfg9RJXgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGFkMGMxYjctNTg0NS0z NjIxLWIxOGEtNzE1NmQ1MjNkZWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHYxIn6ywXoyz3FWwoqzs8jH128O+e3FmI4OSD/sHx/Uz43JE2d0o/x 68p9IuL7jC0T1rxIhFTFOYPLAEkdxfQFMru0NaXLR5Btwpp/5G4aiyvkQqJ5XnkR 2C84xA0hvs6Dcf9WspMzgFvUDZDsUd4KeQSP64/6loITT0EKAmCBKY75pVF3BuLK ogepCcDeQuOE02nLAics44ktc5zsSDzw3wbtrqOY42F1pKXD57zQrbLzpbAqe8A0 4QL3ecJVHW+ADP64Oxxagvr2ZJ9w7h9zguNXV6cXosKrpmy06IbYqJV4RzrUn+6h dB0cU09p8Ct23YpRBb0CgHGfSnvKn70= -----END CERTIFICATE-----Generated at Mon Apr 28 19:59:07 2025 by rpki-client