$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98153208-a3f1-3f81-917f-2a5ea1fd245b.roa File: 98153208-a3f1-3f81-917f-2a5ea1fd245b.roa (raw, json) Hash identifier: J/txUwFg2+/lPPDNJGigBlmQi+nVTzgfICwceFXPJY8= Subject key identifier: 89:7E:D4:31:07:77:E6:9E:72:A1:C0:4E:C0:06:16:BA:3A:3C:2B:A9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAA6B2CA806B3361237280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98153208-a3f1-3f81-917f-2a5ea1fd245b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:a6:b2:ca:80:6b:33:61:23:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=82a27e6c-5a9c-496b-8341-7e30bacb6cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ea:f5:93:37:f0:6f:3e:6c:b3:61:c8:4d:28: 58:25:ed:4f:89:fa:65:a2:ab:fa:2f:a2:51:1b:a5: 10:24:11:5c:ad:cc:01:cb:19:ad:48:9b:50:7f:62: 81:17:7f:7b:6f:cf:c2:7f:30:bd:9f:46:a5:bd:d1: 2e:3f:8f:d7:6f:fc:39:e4:8c:3c:d3:73:a2:e7:72: 55:73:c9:c9:94:36:aa:28:8a:17:af:79:93:47:6a: 29:bd:d8:59:bb:3a:7d:27:a7:b7:ef:03:80:6c:41: 34:36:74:e1:ac:8e:70:f3:2c:44:4a:23:d7:4c:0a: 44:50:a4:cd:b4:27:34:7e:f1:6d:35:7b:fd:ce:5e: 4a:de:50:7b:f2:6a:ef:c6:a8:bb:f7:76:24:cf:2c: e7:cd:70:a4:f0:d6:8c:56:39:76:67:82:f8:2b:db: 9c:66:73:ee:f7:f6:99:77:59:e2:51:04:3c:4a:67: 4e:39:54:d9:26:8d:67:c0:c6:3f:63:03:3f:90:d6: ed:29:4f:5c:7e:f5:69:78:e8:bd:bf:95:8a:21:71: 2d:3f:4f:40:13:62:b6:60:c0:46:5b:1d:07:71:8f: 0a:1d:27:a5:64:f0:17:b3:24:94:13:0a:f3:66:14: 98:e0:c9:0a:c4:74:d7:ee:06:44:d9:0b:0b:a9:68: b5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7E:D4:31:07:77:E6:9E:72:A1:C0:4E:C0:06:16:BA:3A:3C:2B:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98153208-a3f1-3f81-917f-2a5ea1fd245b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:12:94:c3:10:cc:28:b7:0a:f3:b4:65:c8:35:92:e4:0e:18: bc:d9:72:b5:95:6f:73:26:6e:a4:be:28:19:06:48:c0:cd:49: be:0c:ac:ee:53:1e:1f:10:2d:3a:a4:42:9c:f3:22:a5:00:48: d9:ab:47:00:f4:aa:9a:d9:1a:5b:8d:97:b8:53:af:54:77:27: 87:ff:e7:1f:90:ab:5a:91:10:a7:72:6c:96:d4:52:d3:6f:59: 52:0a:12:cf:95:94:96:9c:41:e2:a0:43:67:19:db:95:8c:7c: 32:84:e8:46:62:c7:07:63:0f:2d:08:ae:d1:d9:d8:cb:47:3a: 95:c6:9c:a8:80:69:63:e8:e9:57:b9:59:de:3f:c0:bc:0a:fe: 43:49:df:41:ad:e5:41:e5:7e:3f:46:6f:c3:04:a5:53:a1:cd: 7f:33:57:80:f9:1e:5f:27:26:95:ff:8a:19:97:8d:bd:e1:72: 37:f8:3d:35:2e:32:29:c8:62:68:f6:b4:87:8f:64:fa:20:92: 01:08:9c:ef:22:0e:cc:e6:55:74:e8:ac:1d:50:df:25:86:77: e2:93:5e:79:14:ba:93:f3:e1:73:15:c1:11:7a:b3:8d:88:99: f3:9c:86:76:ce:85:ae:43:b3:60:38:14:ed:cd:00:e9:b6:3c: 49:ea:31:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuqayyoBrM2EjcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODJhMjdlNmMtNWE5Yy00OTZiLTgzNDEtN2UzMGJhY2I2Y2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmer1kzfwbz5ss2HITShYJe1Pifploqv6L6JR G6UQJBFcrcwByxmtSJtQf2KBF397b8/CfzC9n0alvdEuP4/Xb/w55Iw803Oi53JV c8nJlDaqKIoXr3mTR2opvdhZuzp9J6e37wOAbEE0NnThrI5w8yxESiPXTApEUKTN tCc0fvFtNXv9zl5K3lB78mrvxqi793YkzyznzXCk8NaMVjl2Z4L4K9ucZnPu9/aZ d1niUQQ8SmdOOVTZJo1nwMY/YwM/kNbtKU9cfvVpeOi9v5WKIXEtP09AE2K2YMBG Wx0HcY8KHSelZPAXsySUEwrzZhSY4MkKxHTX7gZE2QsLqWi1MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIl+1DEHd+aecqHATsAGFro6PCupMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTgxNTMyMDgtYTNmMS0z ZjgxLTkxN2YtMmE1ZWExZmQyNDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADESlMMQzCi3CvO0Zcg1kuQOGLzZcrWVb3MmbqS+KBkGSMDNSb4MrO5T Hh8QLTqkQpzzIqUASNmrRwD0qprZGluNl7hTr1R3J4f/5x+Qq1qREKdybJbUUtNv WVIKEs+VlJacQeKgQ2cZ25WMfDKE6EZixwdjDy0IrtHZ2MtHOpXGnKiAaWPo6Ve5 Wd4/wLwK/kNJ30Gt5UHlfj9Gb8MEpVOhzX8zV4D5Hl8nJpX/ihmXjb3hcjf4PTUu MinIYmj2tIePZPogkgEInO8iDszmVXTorB1Q3yWGd+KTXnkUupPz4XMVwRF6s42I mfOchnbOha5Ds2A4FO3NAOm2PEnqMaw= -----END CERTIFICATE-----Generated at Sun Apr 27 14:17:24 2025 by rpki-client