$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3f6d5d1-32fc-3049-a1c1-cdb56db66651.roa File: a3f6d5d1-32fc-3049-a1c1-cdb56db66651.roa (raw, json) Hash identifier: Hy6Sn2oTJA2FZprHDd0JRwbEfARjzEXcPgU7lDDiJGk= Subject key identifier: 00:16:61:16:4C:93:B7:98:33:0D:A8:CD:2B:86:25:32:71:4B:9B:F8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB47ADD0ABB66BFB13CAAD Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3f6d5d1-32fc-3049-a1c1-cdb56db66651.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:47:ad:d0:ab:b6:6b:fb:13:ca:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7a8509c2-aa6f-46e0-bcc4-ce1e07357694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:51:52:ff:23:dc:6a:2c:74:95:89:e8:4c:9f: d6:52:32:61:2d:01:5e:af:0e:dc:a3:11:f0:73:bf: cd:3c:89:5f:c9:c3:c7:78:99:78:2d:75:d1:41:db: 15:38:28:da:29:68:11:dc:d5:72:13:28:44:f1:d8: 9c:c7:ef:38:3e:49:59:03:40:a6:e3:e1:9e:c6:ac: 7b:b8:b4:7f:35:8a:22:2e:46:78:77:c5:a4:ce:12: 84:59:d9:e9:02:0b:cf:45:ff:0c:ed:cc:43:41:34: 13:b3:31:d5:4f:ae:fa:46:8d:e2:81:39:c7:15:c8: c9:c4:6a:ee:b9:c2:f3:ea:8d:37:28:39:0c:43:81: 9a:d1:01:32:d6:01:d4:a6:1d:20:c7:e8:25:fb:3e: 73:ad:27:ff:7a:96:1e:67:63:95:16:65:68:bb:e2: fc:d4:03:53:ba:42:fb:ce:f7:36:d7:56:c9:ca:34: b1:88:3a:3f:d4:ec:b3:bc:4f:21:83:6a:5f:96:c7: b4:16:2e:ae:ce:5d:cf:35:c5:a3:c1:48:5a:ae:56: a3:f9:dc:66:42:12:af:57:16:91:4c:37:8f:99:3f: 82:af:82:55:7d:f1:49:1d:32:42:fd:39:72:fd:ed: 90:34:70:23:93:d4:24:90:7a:52:c3:49:01:60:e9: a8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:16:61:16:4C:93:B7:98:33:0D:A8:CD:2B:86:25:32:71:4B:9B:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3f6d5d1-32fc-3049-a1c1-cdb56db66651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:ba:80:d1:9c:f2:be:ee:ef:91:00:08:2c:af:f4:d9:99:9b: 6f:57:40:76:12:05:cf:61:14:e8:4e:25:3f:5c:7c:9f:98:37: b6:3c:6c:d2:7e:be:11:3d:08:0c:d9:a4:5c:ca:22:75:79:08: ad:fb:18:00:e5:4d:d4:a3:e6:6b:14:b1:80:04:31:2b:3a:63: 2f:34:55:d0:b5:14:b6:e6:df:56:83:63:ca:13:37:83:57:6e: d1:5f:aa:47:dd:18:5f:ca:d4:ee:75:94:a5:39:82:ec:54:46: 53:22:4d:0d:ba:8e:25:fa:19:88:8a:ee:ee:c1:35:83:58:67: 82:19:01:5c:0b:93:62:e9:f8:61:32:60:f4:42:94:49:b0:46: cc:96:42:84:9a:77:db:bd:31:b3:c9:be:cc:55:7d:b4:28:a7: f7:71:d1:0f:7e:30:94:63:ee:96:d9:fe:b5:92:4b:b0:5b:cd: dd:b9:f5:4c:5b:4b:9f:46:51:99:61:23:2d:ab:07:e8:d3:e3: c7:15:68:cd:31:f1:ad:34:ed:54:91:cb:71:24:bb:5a:b7:8e: 98:ff:d1:ae:53:4c:5f:60:49:0e:07:b9:27:92:8f:a3:69:68: 4c:fe:31:10:d5:b8:0b:4b:ff:79:51:e4:be:a9:14:df:54:5a: 87:f9:a0:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku0et0Ku2a/sTyq0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2E4NTA5YzItYWE2Zi00NmUwLWJjYzQtY2UxZTA3MzU3Njk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVFS/yPcaix0lYnoTJ/WUjJhLQFerw7coxHw c7/NPIlfycPHeJl4LXXRQdsVOCjaKWgR3NVyEyhE8dicx+84PklZA0Cm4+Gexqx7 uLR/NYoiLkZ4d8WkzhKEWdnpAgvPRf8M7cxDQTQTszHVT676Ro3igTnHFcjJxGru ucLz6o03KDkMQ4Ga0QEy1gHUph0gx+gl+z5zrSf/epYeZ2OVFmVou+L81ANTukL7 zvc211bJyjSxiDo/1OyzvE8hg2pflse0Fi6uzl3PNcWjwUharlaj+dxmQhKvVxaR TDePmT+Cr4JVffFJHTJC/Tly/e2QNHAjk9QkkHpSw0kBYOmoqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAWYRZMk7eYMw2ozSuGJTJxS5v4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTNmNmQ1ZDEtMzJmYy0z MDQ5LWExYzEtY2RiNTZkYjY2NjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBV6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANe6gNGc8r7u75EACCyv9NmZm29XQHYSBc9hFOhOJT9cfJ+YN7Y8bNJ+ vhE9CAzZpFzKInV5CK37GADlTdSj5msUsYAEMSs6Yy80VdC1FLbm31aDY8oTN4NX btFfqkfdGF/K1O51lKU5guxURlMiTQ26jiX6GYiK7u7BNYNYZ4IZAVwLk2Lp+GEy YPRClEmwRsyWQoSad9u9MbPJvsxVfbQop/dx0Q9+MJRj7pbZ/rWSS7Bbzd259Uxb S59GUZlhIy2rB+jT48cVaM0x8a007VSRy3Eku1q3jpj/0a5TTF9gSQ4HuSeSj6Np aEz+MRDVuAtL/3lR5L6pFN9UWof5oKU= -----END CERTIFICATE-----Generated at Mon Apr 28 00:01:16 2025 by rpki-client