$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be4c4854-0d79-3e89-a8af-37c3d55e6ab0.roa File: be4c4854-0d79-3e89-a8af-37c3d55e6ab0.roa (raw, json) Hash identifier: bk3UCBucc9QDLsUgv+ih80oLu0ir6LDounCjeEFEV0Q= Subject key identifier: 7E:3C:D3:B5:A8:01:7B:36:67:76:61:99:7B:8C:D4:61:BD:4A:76:6E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9F6F5C84FE75DA3606C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be4c4854-0d79-3e89-a8af-37c3d55e6ab0.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.20.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:9f:6f:5c:84:fe:75:da:36:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=03dfa876-e317-4c65-bbe0-53d921648312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fd:04:60:88:08:6f:88:d4:7e:dc:be:c0:47: 3f:90:db:64:df:90:28:7f:d8:82:20:29:33:c2:f0: a0:4d:7d:b2:0e:fc:e3:83:f1:e1:ad:aa:7f:aa:19: e2:39:11:2a:d6:69:5b:bb:96:d0:91:87:5f:6d:cc: c5:8a:9f:0d:0f:f7:8f:0b:c0:73:a3:c4:5f:ca:39: 05:60:95:55:25:5e:6c:d0:a2:44:a3:cb:8e:22:59: 02:d2:07:79:79:3c:a2:ac:e8:0a:ec:50:c7:90:92: d2:ad:e1:76:22:a5:73:41:6a:e4:2d:c8:d7:48:fa: 82:7e:52:8b:db:cd:8e:5d:d8:e1:af:5d:a5:ae:8b: 0b:c7:ca:30:18:25:4d:41:a3:89:38:30:eb:2e:be: 71:a0:d2:7a:a7:e1:d0:6d:52:cd:b1:3e:ee:cd:2a: 60:22:89:88:27:02:a6:db:01:ad:92:62:fd:a9:2b: b7:96:fa:66:50:01:60:03:6d:23:5f:2d:21:0a:4c: cd:a8:c8:f4:01:11:02:37:78:ae:ae:09:de:eb:b9: bc:51:dd:ea:69:55:ea:3d:93:7a:5f:ec:9e:da:6c: 28:a6:7a:b5:7e:b5:0e:2e:65:10:ae:3f:07:71:0b: cd:1c:ba:39:29:b6:72:fe:b3:59:c1:f1:bb:c2:e3: 47:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3C:D3:B5:A8:01:7B:36:67:76:61:99:7B:8C:D4:61:BD:4A:76:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be4c4854-0d79-3e89-a8af-37c3d55e6ab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:56:50:c3:b0:26:f6:c5:6c:4a:c3:a6:c6:62:47:f2:f1:cc: 82:ea:54:6a:13:6f:1e:b9:71:73:55:35:10:a6:e5:0c:00:cd: cf:30:02:55:cb:f5:62:ce:8d:e6:02:ca:cc:80:82:d1:33:31: e7:72:b8:ba:82:4a:ed:52:90:5c:69:c2:93:03:4d:a9:ef:8c: 12:5c:3f:4f:91:c6:e1:49:98:79:3a:a1:2c:f1:e4:62:fe:79: 17:e7:43:bf:aa:91:0b:02:7b:c0:ac:e8:c6:5e:75:92:3b:12: 1d:5f:92:52:47:1a:40:e8:df:a7:2f:20:27:49:14:c5:58:d8: 4d:ee:24:13:f7:3d:79:06:c1:04:6b:45:ed:6b:03:72:0c:6a: 9e:4f:08:82:cb:96:9d:f6:59:b6:d4:b0:3c:7d:41:2a:e2:14: e8:ae:6e:10:47:38:66:00:68:8f:c4:76:1b:39:8d:21:99:05: aa:67:dc:f7:e7:87:35:57:3f:0f:23:db:24:83:6e:cb:11:b4: ef:51:e6:21:b6:68:a1:6d:70:e1:eb:c5:95:a1:c4:1a:a4:5d: 38:d3:7e:36:f0:1a:6f:83:62:09:a5:e0:91:a6:ee:43:ef:a8: cd:5a:31:b1:fa:ea:c2:74:78:60:ce:d9:09:95:d6:47:c1:82: 21:2d:9b:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkup9vXIT+ddo2BsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDNkZmE4NzYtZTMxNy00YzY1LWJiZTAtNTNkOTIxNjQ4MzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv0EYIgIb4jUfty+wEc/kNtk35Aof9iCICkz wvCgTX2yDvzjg/Hhrap/qhniOREq1mlbu5bQkYdfbczFip8ND/ePC8Bzo8RfyjkF YJVVJV5s0KJEo8uOIlkC0gd5eTyirOgK7FDHkJLSreF2IqVzQWrkLcjXSPqCflKL 282OXdjhr12lrosLx8owGCVNQaOJODDrLr5xoNJ6p+HQbVLNsT7uzSpgIomIJwKm 2wGtkmL9qSu3lvpmUAFgA20jXy0hCkzNqMj0ARECN3iurgne67m8Ud3qaVXqPZN6 X+ye2mwopnq1frUOLmUQrj8HcQvNHLo5KbZy/rNZwfG7wuNHkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4807WoAXs2Z3ZhmXuM1GG9SnZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmU0YzQ4NTQtMGQ3OS0z ZTg5LWE4YWYtMzdjM2Q1NWU2YWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMpWUMOwJvbFbErDpsZiR/LxzILqVGoTbx65cXNVNRCm5QwAzc8wAlXL 9WLOjeYCysyAgtEzMedyuLqCSu1SkFxpwpMDTanvjBJcP0+RxuFJmHk6oSzx5GL+ eRfnQ7+qkQsCe8Cs6MZedZI7Eh1fklJHGkDo36cvICdJFMVY2E3uJBP3PXkGwQRr Re1rA3IMap5PCILLlp32WbbUsDx9QSriFOiubhBHOGYAaI/Edhs5jSGZBapn3Pfn hzVXPw8j2ySDbssRtO9R5iG2aKFtcOHrxZWhxBqkXTjTfjbwGm+DYgml4JGm7kPv qM1aMbH66sJ0eGDO2QmV1kfBgiEtmw4= -----END CERTIFICATE-----Generated at Sun Apr 27 01:43:59 2025 by rpki-client