$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9cb40fd1-58a3-356f-a4cd-8db565ff4401.roa File: 9cb40fd1-58a3-356f-a4cd-8db565ff4401.roa (raw, json) Hash identifier: UwgkEfaveD9kcInrOnd/aOLAO+EhjP1twDMAR8otwVA= Subject key identifier: 3B:4A:A8:96:FE:8E:FC:67:D4:E0:C5:75:FC:52:48:59:DF:8E:23:73 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9E08851A336311097200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9cb40fd1-58a3-356f-a4cd-8db565ff4401.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.20.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:9e:08:85:1a:33:63:11:09:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3d56d503-a61e-4a30-b566-f8d94957b629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:24:2d:6b:4c:1c:68:d5:dd:95:f8:0c:ea:4e: 7b:2f:49:a0:11:2a:aa:50:8a:60:e0:62:9f:4f:4f: ec:a7:da:88:5b:f6:e3:9e:b4:86:2c:a2:3e:33:a8: 86:a3:ce:4b:41:77:d4:82:77:2a:2a:00:61:da:86: 7d:83:10:c5:65:a0:74:fc:b5:fc:84:aa:a7:7f:a8: 33:ed:d6:74:3a:cc:10:3b:1e:45:50:0e:e7:b5:b1: 57:8c:89:4b:62:a3:2d:ce:b4:8c:35:f4:58:d6:94: ca:b9:40:be:e7:b9:be:a1:7d:15:c5:51:c3:26:98: c2:bc:13:4a:f7:85:32:6a:0b:d7:f2:f8:55:04:9b: a2:bc:e8:25:12:2b:7f:11:0a:e0:c6:6d:d2:c1:51: 13:01:6e:5f:4f:25:00:5a:c9:c0:2b:95:d5:92:86: 03:a5:5c:af:17:33:7b:7e:bc:e3:6f:7a:bf:18:5d: fd:9a:98:6f:93:1b:61:14:cf:be:8a:44:89:07:d9: 99:2b:82:7e:f7:a1:89:45:77:c5:af:7e:ea:ef:88: bc:ea:fe:9a:8f:21:fe:0c:76:c2:76:08:82:15:65: 59:76:2c:ec:2d:e2:dc:d1:f2:8c:4b:04:cd:a0:18: f4:b6:e6:49:bb:af:89:c9:33:9e:de:34:72:9b:76: 88:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4A:A8:96:FE:8E:FC:67:D4:E0:C5:75:FC:52:48:59:DF:8E:23:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9cb40fd1-58a3-356f-a4cd-8db565ff4401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ec:68:56:26:bb:79:6d:fa:d0:8f:1e:40:9b:8c:8d:f6:09: 9d:6f:ae:a9:fc:8f:2f:85:7b:f2:73:1b:74:4b:f2:35:3f:ae: 1f:50:cb:16:cb:9b:e8:51:1b:65:63:7c:36:11:e4:38:7e:9a: 53:17:f7:7a:fa:46:80:86:c2:9f:36:ec:7f:7c:2b:c4:9d:92: c5:32:1c:fd:48:d9:32:9f:d5:21:68:75:8a:66:1c:8d:84:84: b7:cb:67:5c:c9:30:6a:37:c5:f2:0e:5f:bd:22:26:4b:63:5c: 8c:98:d8:81:d5:59:e2:3e:67:51:96:c5:c5:94:d3:24:6c:a9: f7:00:36:6b:16:0c:32:ed:52:e2:0e:bd:37:7d:c1:99:02:4c: 60:fc:8c:b4:1e:29:53:25:75:ef:96:02:a6:55:f7:80:6b:2a: 61:45:15:f6:6d:15:4b:ba:b3:ab:5d:6f:9f:0f:82:51:73:14: 8e:03:ff:9b:1e:8a:f3:63:7e:ea:21:6f:fe:ae:8c:e3:18:74: ff:b0:db:6f:31:a8:6b:bf:8a:9a:7c:4f:95:b6:8a:1c:db:af: a0:9b:16:db:f6:9a:8f:ff:47:31:5f:42:c6:b5:5b:f7:9b:58: 34:b4:b2:29:b3:27:f4:15:ad:e8:b1:3e:e6:86:08:82:0b:36: f1:09:13:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkup4IhRozYxEJcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2Q1NmQ1MDMtYTYxZS00YTMwLWI1NjYtZjhkOTQ5NTdiNjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySQta0wcaNXdlfgM6k57L0mgESqqUIpg4GKf T0/sp9qIW/bjnrSGLKI+M6iGo85LQXfUgncqKgBh2oZ9gxDFZaB0/LX8hKqnf6gz 7dZ0OswQOx5FUA7ntbFXjIlLYqMtzrSMNfRY1pTKuUC+57m+oX0VxVHDJpjCvBNK 94UyagvX8vhVBJuivOglEit/EQrgxm3SwVETAW5fTyUAWsnAK5XVkoYDpVyvFzN7 frzjb3q/GF39mphvkxthFM++ikSJB9mZK4J+96GJRXfFr37q74i86v6ajyH+DHbC dgiCFWVZdizsLeLc0fKMSwTNoBj0tuZJu6+JyTOe3jRym3aI1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtKqJb+jvxn1ODFdfxSSFnfjiNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWNiNDBmZDEtNThhMy0z NTZmLWE0Y2QtOGRiNTY1ZmY0NDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBSdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3saFYmu3lt+tCPHkCbjI32CZ1vrqn8jy+Fe/JzG3RL8jU/rh9QyxbL m+hRG2VjfDYR5Dh+mlMX93r6RoCGwp827H98K8SdksUyHP1I2TKf1SFodYpmHI2E hLfLZ1zJMGo3xfIOX70iJktjXIyY2IHVWeI+Z1GWxcWU0yRsqfcANmsWDDLtUuIO vTd9wZkCTGD8jLQeKVMlde+WAqZV94BrKmFFFfZtFUu6s6tdb58PglFzFI4D/5se ivNjfuohb/6ujOMYdP+w228xqGu/ipp8T5W2ihzbr6CbFtv2mo//RzFfQsa1W/eb WDS0simzJ/QVreixPuaGCIILNvEJE5M= -----END CERTIFICATE-----Generated at Sun Apr 27 05:47:18 2025 by rpki-client