$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8f24f1d-b9c3-32c1-a839-df61360f2d0c.roa File: c8f24f1d-b9c3-32c1-a839-df61360f2d0c.roa (raw, json) Hash identifier: MgPqba5AjL6HjCcvSu+nOB/m0sBf0prTeuZi4B6i8hc= Subject key identifier: 45:80:7F:EF:88:9F:ED:48:94:8F:0C:26:EB:A1:D1:FA:D1:95:F8:90 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAA4C2386E5971DF28E680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8f24f1d-b9c3-32c1-a839-df61360f2d0c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:a4:c2:38:6e:59:71:df:28:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f0ec9508-4fcc-44f4-8618-ef75cb858635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:dd:33:18:36:4e:3c:30:67:d6:24:db:65: c3:ff:5a:ed:66:9a:bb:af:0c:1e:e8:d8:b8:10:f1: a9:80:54:30:16:d8:b9:ab:59:f8:38:fd:e2:6a:8f: b0:da:3c:49:74:8f:92:e1:b8:af:0c:7a:c4:9e:0c: bc:c1:f0:77:c8:e0:e4:e7:0a:dc:28:58:f7:83:02: fd:9b:0d:7a:50:5a:0b:8d:77:5d:bc:c6:cc:fb:cc: 3e:e1:d4:52:3e:23:34:d1:84:8f:0b:41:ae:bb:12: 27:0b:41:15:64:37:34:c6:62:4d:d3:73:bb:51:fd: 03:ae:96:a0:c0:07:41:b5:53:be:f8:eb:fd:47:fd: c0:fb:9b:71:30:d9:4a:af:10:83:f2:8f:10:6c:71: 62:e9:20:cf:45:d4:2a:e9:78:28:8c:7b:ed:1d:d4: 7e:5d:04:41:0b:1f:45:ee:73:00:4e:0f:a0:16:0d: cd:e5:80:58:8d:f5:df:5c:10:2f:aa:14:3a:6d:ff: 38:18:3a:8a:1a:ab:b7:74:f6:b3:f6:b3:70:05:45: 1d:96:65:13:3e:f9:21:5e:5c:06:2c:ee:9a:b4:72: 91:2f:11:7f:4d:b6:55:1d:fe:d4:67:57:92:19:ce: 8a:a9:a9:cf:98:ac:97:9f:7b:03:ed:3d:d2:7f:b4: 9d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:80:7F:EF:88:9F:ED:48:94:8F:0C:26:EB:A1:D1:FA:D1:95:F8:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8f24f1d-b9c3-32c1-a839-df61360f2d0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:92:b3:59:0e:c5:80:09:5b:63:8e:32:b5:1e:4e:69:2a:7c: d5:d9:7b:e8:51:ce:a1:b2:08:a1:44:62:4f:9a:66:88:66:6e: 4f:8b:2f:a1:02:3a:ec:e6:0b:38:e5:92:3d:93:c5:06:ef:af: 0f:31:66:f1:30:4b:73:f3:11:84:e0:df:46:68:c1:fa:a6:db: 89:6a:0b:52:1c:27:1c:f6:77:2c:2b:50:38:56:79:a6:4d:55: c5:a8:e9:f8:53:63:be:b4:d4:17:d5:61:7f:b5:99:dc:a6:b9: 2f:a5:5d:8a:9a:ed:c3:72:1a:55:f4:eb:81:01:3d:25:56:41: 43:86:b2:72:44:cf:2f:06:54:ee:9a:8b:6d:2f:3f:59:28:b4: 73:3b:63:66:ad:f9:8c:da:fe:c6:2f:18:82:ef:4a:13:68:ac: 55:92:b2:4f:e5:0a:39:1c:1e:aa:d8:1d:af:4d:ef:bd:8e:dd: 3c:a1:61:24:a6:b8:1e:44:f4:1a:0f:27:cf:db:00:bf:dd:8c: a4:1f:db:13:6a:7a:1b:9d:22:6d:06:e8:62:e0:0f:29:6f:ea: c8:9c:e4:bc:28:30:2c:e1:0e:fa:50:49:42:68:9d:1d:aa:e1: ca:95:c3:17:80:ef:e3:90:97:53:89:c5:f7:16:4f:c0:c4:5a: b8:2f:52:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuqTCOG5Zcd8o5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjBlYzk1MDgtNGZjYy00NGY0LTg2MTgtZWY3NWNiODU4NjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBvdMxg2TjwwZ9Yk22XD/1rtZpq7rwwe6Ni4 EPGpgFQwFti5q1n4OP3iao+w2jxJdI+S4bivDHrEngy8wfB3yODk5wrcKFj3gwL9 mw16UFoLjXddvMbM+8w+4dRSPiM00YSPC0GuuxInC0EVZDc0xmJN03O7Uf0Drpag wAdBtVO++Ov9R/3A+5txMNlKrxCD8o8QbHFi6SDPRdQq6XgojHvtHdR+XQRBCx9F 7nMATg+gFg3N5YBYjfXfXBAvqhQ6bf84GDqKGqu3dPaz9rNwBUUdlmUTPvkhXlwG LO6atHKRLxF/TbZVHf7UZ1eSGc6KqanPmKyXn3sD7T3Sf7SddwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWAf++In+1IlI8MJuuh0frRlfiQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzhmMjRmMWQtYjljMy0z MmMxLWE4MzktZGY2MTM2MGYyZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqSs1kOxYAJW2OOMrUeTmkqfNXZe+hRzqGyCKFEYk+aZohmbk+LL6EC OuzmCzjlkj2TxQbvrw8xZvEwS3PzEYTg30Zowfqm24lqC1IcJxz2dywrUDhWeaZN VcWo6fhTY7601BfVYX+1mdymuS+lXYqa7cNyGlX064EBPSVWQUOGsnJEzy8GVO6a i20vP1kotHM7Y2at+Yza/sYvGILvShNorFWSsk/lCjkcHqrYHa9N772O3TyhYSSm uB5E9BoPJ8/bAL/djKQf2xNqehudIm0G6GLgDylv6sic5LwoMCzhDvpQSUJonR2q 4cqVwxeA7+OQl1OJxfcWT8DEWrgvUro= -----END CERTIFICATE-----Generated at Sun Apr 27 12:13:23 2025 by rpki-client