$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d0b3286-f301-3af2-ab4a-dac09cc3a5f8.roa File: 9d0b3286-f301-3af2-ab4a-dac09cc3a5f8.roa (raw, json) Hash identifier: fFsbK1RROKdtPpJqQcDNlvDQkEAQjPUnkHjL+GhrY1A= Subject key identifier: 4D:2E:2D:E8:D9:BE:34:5E:66:99:6F:46:F1:F6:DF:C9:96:4F:16:73 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB4A337B19D75CDFFBA900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d0b3286-f301-3af2-ab4a-dac09cc3a5f8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:4a:33:7b:19:d7:5c:df:fb:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b39950c6-492e-45cb-aa6f-e00681938a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6f:c3:c2:38:cc:41:58:41:a8:ce:90:1f:63: 58:b1:be:c9:7c:0a:ac:e0:e0:07:43:50:bb:6a:96: 17:87:c8:4f:c3:0c:63:2e:c1:37:85:a2:f6:f1:08: 5d:f1:f7:65:aa:d2:02:86:aa:e8:cf:fa:cb:a9:6e: b6:42:a0:1b:52:b2:a7:86:4a:7b:a2:08:ea:4c:d4: 74:1c:2e:5b:04:75:0b:d0:14:be:60:ae:8f:e4:ca: 7e:b3:44:4f:ea:dc:f7:23:57:79:76:c4:d6:06:83: be:d8:fa:32:23:57:c8:c2:5a:7a:73:cd:86:92:af: d9:bd:30:0c:4b:76:6d:91:25:7d:41:8e:d0:3f:75: d2:75:6b:9f:62:8d:de:55:7d:5a:30:b4:a5:d9:2f: d3:60:16:c2:53:67:8a:2f:b7:b1:90:0e:66:98:e7: 0b:5a:f0:ec:19:48:e6:17:b7:ca:35:f8:c4:df:9d: cd:23:3a:d0:89:dc:38:62:d4:98:6a:77:59:1b:05: ee:74:36:4c:c5:f3:d3:8f:b9:e9:7e:2e:d6:9b:78: c4:21:07:8a:3b:df:69:19:e7:eb:49:09:a5:3d:c5: d7:75:7b:b0:ba:10:ab:24:9a:5e:a5:cc:f3:1f:4f: 89:d8:54:2c:52:eb:a7:77:df:aa:45:e0:fa:aa:3d: c3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2E:2D:E8:D9:BE:34:5E:66:99:6F:46:F1:F6:DF:C9:96:4F:16:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d0b3286-f301-3af2-ab4a-dac09cc3a5f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:37:95:8c:e7:e0:4f:a2:aa:5d:56:6c:eb:66:26:84:85:12: 86:c4:2a:0f:2c:01:19:e0:b6:af:e3:57:c8:be:89:6c:ec:59: 21:f0:af:30:13:57:14:ef:4e:73:53:d7:54:0d:1a:e2:b7:0e: 90:c9:56:46:c2:dd:45:f7:85:e1:b0:93:e0:0e:91:85:8f:67: 3e:78:16:a6:81:19:e1:8b:7e:40:ed:c0:93:3b:a4:5e:3f:05: 51:b0:c2:a8:27:f0:88:b7:3a:cf:57:95:4a:cd:ec:2a:75:29: fb:ba:c3:09:26:42:78:2a:61:f5:94:74:6c:e8:f8:1b:d5:80: 32:4e:2b:ec:c8:99:0e:c9:d7:e0:cc:f9:9e:61:7d:b3:d2:3a: cf:d1:a4:8b:52:7c:b3:30:92:e1:f3:7c:4f:3f:7e:d8:d8:ea: 4e:28:7b:27:5b:fc:e7:c0:1e:bd:20:3c:d0:a4:e7:2c:c5:ad: 08:08:6c:a4:d9:9f:cd:00:f6:88:98:27:5d:be:81:54:80:25: a2:50:cf:d6:dc:a2:a0:9c:3e:70:c3:bc:7b:8b:d8:82:92:eb: 15:40:8a:44:aa:b2:88:82:8d:a4:c4:23:d0:08:49:d7:20:48: 7e:5b:a6:31:6b:a4:d4:9d:da:e5:17:cc:a3:bc:c2:56:40:29: 9a:9d:2c:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku0ozexnXXN/7qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjM5OTUwYzYtNDkyZS00NWNiLWFhNmYtZTAwNjgxOTM4YTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2/DwjjMQVhBqM6QH2NYsb7JfAqs4OAHQ1C7 apYXh8hPwwxjLsE3haL28Qhd8fdlqtIChqroz/rLqW62QqAbUrKnhkp7ogjqTNR0 HC5bBHUL0BS+YK6P5Mp+s0RP6tz3I1d5dsTWBoO+2PoyI1fIwlp6c82Gkq/ZvTAM S3ZtkSV9QY7QP3XSdWufYo3eVX1aMLSl2S/TYBbCU2eKL7exkA5mmOcLWvDsGUjm F7fKNfjE353NIzrQidw4YtSYandZGwXudDZMxfPTj7npfi7Wm3jEIQeKO99pGefr SQmlPcXXdXuwuhCrJJpepczzH0+J2FQsUuund9+qReD6qj3DYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0uLejZvjReZplvRvH238mWTxZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWQwYjMyODYtZjMwMS0z YWYyLWFiNGEtZGFjMDljYzNhNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA03lYzn4E+iql1WbOtmJoSFEobEKg8sARngtq/jV8i+iWzsWSHwrzAT VxTvTnNT11QNGuK3DpDJVkbC3UX3heGwk+AOkYWPZz54FqaBGeGLfkDtwJM7pF4/ BVGwwqgn8Ii3Os9XlUrN7Cp1Kfu6wwkmQngqYfWUdGzo+BvVgDJOK+zImQ7J1+DM +Z5hfbPSOs/RpItSfLMwkuHzfE8/ftjY6k4oeydb/OfAHr0gPNCk5yzFrQgIbKTZ n80A9oiYJ12+gVSAJaJQz9bcoqCcPnDDvHuL2IKS6xVAikSqsoiCjaTEI9AISdcg SH5bpjFrpNSd2uUXzKO8wlZAKZqdLAY= -----END CERTIFICATE-----Generated at Sun Apr 27 01:17:54 2025 by rpki-client