$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af0c0f16-80ab-3856-9c12-9a0df6f28883.roa File: af0c0f16-80ab-3856-9c12-9a0df6f28883.roa (raw, json) Hash identifier: B9qwPomlMjG+QKEAn0vNn7lS6ASnG26nAnQBTOkSd8g= Subject key identifier: 7B:EB:A0:36:A4:B4:68:52:95:19:14:41:29:DD:9D:F4:04:77:71:99 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAAB7D89B8C3010CCDA380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af0c0f16-80ab-3856-9c12-9a0df6f28883.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.62.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:ab:7d:89:b8:c3:01:0c:cd:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fd3df86f-b163-4c45-8f08-5afea87c716e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:d0:e8:ba:66:e0:5b:d4:49:3a:98:15:62: 25:3d:eb:70:91:56:9f:7f:eb:82:f3:8a:7d:dc:75: dd:61:65:60:0d:09:dc:39:a0:1b:df:72:13:92:b9: 61:81:bc:34:95:76:49:93:99:1e:50:41:dd:4e:ba: 0e:3b:94:8e:c1:af:3d:e1:cb:25:4d:dc:22:3b:2f: 78:f4:98:7c:53:d2:56:6e:d0:ae:fc:7d:58:d5:4a: 33:87:11:53:96:6b:66:f0:fc:85:b0:b4:e2:f9:90: e4:55:bf:9b:7f:f1:07:81:69:30:f1:99:26:04:6e: 0c:7d:da:27:48:5f:e9:11:e9:d0:ff:d4:01:eb:7e: 1d:a7:5e:8f:7c:0b:2f:3c:36:06:3a:1c:67:30:cd: ca:0a:d3:83:92:8f:b1:a1:0f:44:79:1d:89:f5:80: 20:46:b7:90:60:59:82:9d:cc:91:2b:68:19:b9:bc: d3:84:11:7d:49:70:4e:2a:08:72:08:83:1c:48:dc: ee:bf:9c:60:ce:00:72:03:a3:bf:00:b5:d9:3a:49: 92:8c:9b:17:cb:1a:a9:f4:b6:54:8b:e4:bd:41:23: b1:ee:ac:99:2c:c9:af:79:6e:93:1f:d6:0e:ee:f5: 68:e2:f1:5d:72:e4:24:79:c5:8c:3d:de:ea:7f:77: aa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EB:A0:36:A4:B4:68:52:95:19:14:41:29:DD:9D:F4:04:77:71:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af0c0f16-80ab-3856-9c12-9a0df6f28883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.62.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:bd:84:87:8b:ae:ef:0f:df:2d:8f:a6:10:40:eb:93:86:03: b6:81:8a:d6:3b:40:17:10:d6:74:f7:5f:c0:5d:77:7f:4c:6b: fa:10:85:7d:dc:f9:5f:5a:b0:db:d4:e4:84:9b:56:35:88:08: c0:ea:8c:f4:9e:4c:78:c4:18:4a:39:8d:45:a0:0e:11:5f:a9: de:f0:16:50:80:b5:cb:6f:ba:62:bf:7a:6d:39:cc:23:e2:df: 1d:77:bc:cf:8f:5b:cf:54:51:f4:f5:c9:aa:66:3f:3e:58:a4: 9b:2a:f1:54:15:ae:03:28:07:7e:45:87:d0:be:e1:7b:8d:53: 01:c7:24:f0:0d:e5:5a:f2:d3:68:f8:b6:bb:51:fe:ca:6e:da: 81:9f:2a:c1:9a:15:83:8f:4a:93:5f:48:52:38:38:89:75:7e: ba:e4:87:8b:58:90:14:6f:9b:b1:da:30:c3:86:1f:a4:6d:cc: 97:b8:45:4f:68:c8:0a:27:be:75:40:8e:52:b1:6f:58:f4:ee: 43:9d:67:b9:dc:93:ae:67:d2:90:46:53:ef:84:65:ea:aa:7c: d1:b2:7d:79:24:d7:5c:f5:91:4c:1d:86:e3:09:d7:2b:7b:75: 19:14:73:63:39:a0:ae:3f:cb:ba:ee:b3:ac:e3:c0:2d:b3:a0: 19:39:59:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuqt9ibjDAQzNo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmQzZGY4NmYtYjE2My00YzQ1LThmMDgtNWFmZWE4N2M3MTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus7Q6Lpm4FvUSTqYFWIlPetwkVaff+uC84p9 3HXdYWVgDQncOaAb33ITkrlhgbw0lXZJk5keUEHdTroOO5SOwa894cslTdwiOy94 9Jh8U9JWbtCu/H1Y1UozhxFTlmtm8PyFsLTi+ZDkVb+bf/EHgWkw8ZkmBG4Mfdon SF/pEenQ/9QB634dp16PfAsvPDYGOhxnMM3KCtODko+xoQ9EeR2J9YAgRreQYFmC ncyRK2gZubzThBF9SXBOKghyCIMcSNzuv5xgzgByA6O/ALXZOkmSjJsXyxqp9LZU i+S9QSOx7qyZLMmveW6TH9YO7vVo4vFdcuQkecWMPd7qf3eqWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvroDaktGhSlRkUQSndnfQEd3GZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWYwYzBmMTYtODBhYi0z ODU2LTljMTItOWEwZGY2ZjI4ODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD6FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKe9hIeLru8P3y2PphBA65OGA7aBitY7QBcQ1nT3X8Bdd39Ma/oQhX3c +V9asNvU5ISbVjWICMDqjPSeTHjEGEo5jUWgDhFfqd7wFlCAtctvumK/em05zCPi 3x13vM+PW89UUfT1yapmPz5YpJsq8VQVrgMoB35Fh9C+4XuNUwHHJPAN5Vry02j4 trtR/spu2oGfKsGaFYOPSpNfSFI4OIl1frrkh4tYkBRvm7HaMMOGH6RtzJe4RU9o yAonvnVAjlKxb1j07kOdZ7nck65n0pBGU++EZeqqfNGyfXkk11z1kUwdhuMJ1yt7 dRkUc2M5oK4/y7rus6zjwC2zoBk5WV0= -----END CERTIFICATE-----Generated at Sun Apr 27 20:19:32 2025 by rpki-client