$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a7f14175-db10-394c-9434-a278a794d88c.roa File: a7f14175-db10-394c-9434-a278a794d88c.roa (raw, json) Hash identifier: M2FlVGlonRdRIcmcbrSkwTgbxUSQtBcsu/PPe3xiAg0= Subject key identifier: D4:A1:2F:DD:40:52:0D:20:32:55:D5:57:6E:E7:0E:8A:BC:67:EB:68 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAA72E620F28693EDEC700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a7f14175-db10-394c-9434-a278a794d88c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:a7:2e:62:0f:28:69:3e:de:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=71877a7f-8e29-4500-a8d9-e3cd049ddc18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:18:fb:59:eb:05:c4:96:31:46:48:6d:fc:a1: 3d:1c:fb:51:2e:59:6a:74:fe:fb:33:fa:bb:dd:4f: ce:66:66:b8:29:59:99:2d:d9:16:f5:70:9d:38:39: 45:32:0d:12:77:d4:78:75:41:2f:50:64:26:99:91: ef:69:de:11:29:9f:44:ac:44:1d:99:4f:3d:47:15: 35:c2:cf:82:89:f9:dd:e8:ae:04:98:4e:b3:7f:3c: d0:8f:1b:5d:a3:c8:c6:f1:24:59:6b:a2:17:d2:b2: fc:c4:6c:9f:69:03:56:fd:a2:06:c4:2c:58:4d:43: 12:10:17:b3:fd:7a:79:ad:3b:b6:80:ab:63:4e:2e: d0:a3:0a:02:5e:c4:30:f2:29:9c:46:e0:dc:07:58: ae:73:19:47:f4:9a:ab:ad:5b:a3:53:c4:c0:5d:cc: ce:3d:b7:ff:18:80:08:d8:18:16:45:ad:29:ba:44: 5d:8a:00:2e:50:92:1b:ef:95:39:27:61:64:34:08: 62:2f:6d:31:29:c4:7e:83:20:ea:49:6c:fe:8e:34: e4:3d:55:59:a3:46:72:85:16:17:3f:1c:e0:89:aa: 5d:d5:5d:51:d6:d6:21:2a:11:ff:63:7c:14:80:a3: 59:81:89:04:c6:64:8a:da:b9:66:3b:62:e2:2b:cc: a2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A1:2F:DD:40:52:0D:20:32:55:D5:57:6E:E7:0E:8A:BC:67:EB:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a7f14175-db10-394c-9434-a278a794d88c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:25:2c:58:14:91:46:a9:c3:eb:c1:7d:90:af:0b:a5:04:bc: cc:00:c3:fb:b5:75:48:64:b5:42:3e:50:03:8f:d0:3b:7b:41: d9:19:f4:16:00:66:de:42:df:dc:1e:86:74:6e:e2:30:22:90: c8:a8:da:cd:ac:ca:96:14:7a:80:92:41:a1:22:7c:1b:32:da: bd:aa:e6:64:11:25:01:7c:23:8a:aa:48:9f:89:67:68:7d:27: 17:a6:e6:9c:a7:8e:29:8c:15:15:18:04:40:c2:90:82:bf:f2: 30:67:30:c4:d4:ad:98:63:39:75:bb:63:b4:50:39:80:8a:bc: ea:49:5e:9f:68:3e:0a:8a:80:1b:52:fd:54:8f:b9:1b:d5:47: 10:7f:de:2b:73:f1:58:18:52:00:f6:d7:a6:b4:b2:3a:63:43: ff:58:47:bb:ee:6f:8a:d9:09:8b:19:b9:76:1b:7c:67:c6:01: 0b:60:bc:1e:6d:2b:bf:c6:fc:63:c5:7d:e3:05:62:da:65:86: 36:00:cd:82:7f:f1:6a:eb:b2:a6:c5:3a:8c:db:48:6e:78:8b: bf:0e:e4:9e:1c:2a:d9:36:6b:18:8d:e9:bd:31:c5:d8:5e:45: c8:78:5c:37:67:62:3b:9c:93:9d:6d:3b:8a:1b:f0:74:bc:21: 9e:73:c5:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuqcuYg8oaT7exwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzE4NzdhN2YtOGUyOS00NTAwLWE4ZDktZTNjZDA0OWRkYzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxj7WesFxJYxRkht/KE9HPtRLllqdP77M/q7 3U/OZma4KVmZLdkW9XCdODlFMg0Sd9R4dUEvUGQmmZHvad4RKZ9ErEQdmU89RxU1 ws+Cifnd6K4EmE6zfzzQjxtdo8jG8SRZa6IX0rL8xGyfaQNW/aIGxCxYTUMSEBez /Xp5rTu2gKtjTi7QowoCXsQw8imcRuDcB1iucxlH9JqrrVujU8TAXczOPbf/GIAI 2BgWRa0pukRdigAuUJIb75U5J2FkNAhiL20xKcR+gyDqSWz+jjTkPVVZo0ZyhRYX Pxzgiapd1V1R1tYhKhH/Y3wUgKNZgYkExmSK2rlmO2LiK8yi8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNShL91AUg0gMlXVV27nDoq8Z+toMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTdmMTQxNzUtZGIxMC0z OTRjLTk0MzQtYTI3OGE3OTRkODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBX5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFklLFgUkUapw+vBfZCvC6UEvMwAw/u1dUhktUI+UAOP0Dt7QdkZ9BYA Zt5C39wehnRu4jAikMio2s2sypYUeoCSQaEifBsy2r2q5mQRJQF8I4qqSJ+JZ2h9 Jxem5pynjimMFRUYBEDCkIK/8jBnMMTUrZhjOXW7Y7RQOYCKvOpJXp9oPgqKgBtS /VSPuRvVRxB/3itz8VgYUgD216a0sjpjQ/9YR7vub4rZCYsZuXYbfGfGAQtgvB5t K7/G/GPFfeMFYtplhjYAzYJ/8WrrsqbFOozbSG54i78O5J4cKtk2axiN6b0xxdhe Rch4XDdnYjuck51tO4ob8HS8IZ5zxZI= -----END CERTIFICATE-----Generated at Sun Apr 27 11:19:07 2025 by rpki-client