$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ca188e0d-2670-31e3-af3f-65329302fedd.roa File: ca188e0d-2670-31e3-af3f-65329302fedd.roa (raw, json) Hash identifier: uHuzTFDFyZjHCMLJCYdrdg3vKfBw15/f/0/Ud0JyKP0= Subject key identifier: A0:B9:DC:69:21:2A:00:F1:92:87:5C:52:B4:2D:DF:F0:F1:D8:5C:86 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB49F7D998D0560F2EEB80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ca188e0d-2670-31e3-af3f-65329302fedd.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:49:f7:d9:98:d0:56:0f:2e:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=787de5d4-191f-4e73-b883-a16663d08f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ce:9c:0e:16:65:70:5d:de:54:67:63:a6:7f: 2d:3b:d5:03:8d:eb:6a:74:a8:5a:0f:26:75:47:b8: 30:f3:ec:c2:1d:c8:b4:e9:fc:49:4c:3a:fa:b4:56: 04:7b:9a:be:cb:83:02:fa:ac:b0:2f:1e:cb:6d:e8: 91:33:8c:cc:66:27:1c:2d:6b:9b:56:72:b1:5f:4c: a4:83:de:05:f1:5a:1d:27:ad:11:98:32:fb:a8:b7: ed:5e:0e:e8:82:bb:41:b9:e6:67:8c:d0:e8:fe:ea: 29:ed:d1:9e:a2:bf:68:6c:86:19:f4:9a:66:99:bb: 29:10:e1:37:75:fd:f2:f8:24:8e:d1:bf:ea:66:15: b5:7c:e3:98:51:fd:47:fa:c9:6c:1f:6a:e8:78:c6: c3:f7:dc:17:04:46:bd:6c:b1:49:30:4f:9d:6d:2c: 37:ed:e8:4f:ca:e9:75:0e:6d:bc:a2:33:2b:3f:e0: ce:fc:69:29:5b:05:05:34:d4:8f:00:6f:e3:c5:5b: e7:7c:08:6b:95:a4:d4:21:25:6d:d0:0e:29:0c:f2: b5:05:96:43:79:23:4a:d5:4c:4d:98:6f:59:a4:57: 71:19:7c:38:d2:92:a1:6b:40:56:ec:53:25:99:f3: b7:70:a3:bb:15:ca:41:6f:e0:d4:40:2a:8f:7f:b8: 09:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B9:DC:69:21:2A:00:F1:92:87:5C:52:B4:2D:DF:F0:F1:D8:5C:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ca188e0d-2670-31e3-af3f-65329302fedd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:03:ec:9a:e6:25:08:91:09:a1:97:3b:c2:22:8a:a5:16:a6: 42:b6:31:1c:6e:07:96:f1:19:ac:19:a7:22:1c:f7:94:b2:3a: e0:8b:ba:53:e9:ea:3f:e4:35:e5:0e:cb:e1:f6:ee:0e:cb:be: b3:ec:f9:7b:c3:7a:f2:6d:98:de:3f:f2:3a:c4:e4:bf:a2:07: c5:71:cb:9f:d7:e3:6d:83:31:99:7c:3f:14:a2:b1:c4:c2:8f: c3:7f:38:18:71:2f:c3:fa:ed:a8:f6:eb:c5:3d:ce:a1:48:ce: 5a:3e:29:4e:23:55:57:0f:4c:1c:13:9f:4b:76:14:26:d7:e1: 70:73:09:7d:e1:d9:b9:87:d5:1a:5d:d8:27:e2:16:94:5b:0a: 9a:60:6a:20:be:08:6e:7b:d6:61:b2:68:02:73:ea:32:f5:b8: 99:0a:09:5d:35:2d:53:f7:fe:97:97:4a:05:20:2a:bb:df:11: 43:73:1c:8d:7c:c7:b3:ed:9f:cc:d3:02:75:42:e9:91:b6:5a: 70:3b:67:41:0f:f1:ab:7a:a5:67:a6:d5:db:e9:c7:e5:6f:17: 07:1e:18:c3:f8:c2:f1:58:09:5b:80:79:d0:77:e4:5a:3a:1b: 8e:f3:ed:42:5f:05:f7:d0:1f:7c:76:a5:a5:56:0e:51:8e:17: df:16:8d:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku0n32ZjQVg8u64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Nzg3ZGU1ZDQtMTkxZi00ZTczLWI4ODMtYTE2NjYzZDA4ZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh86cDhZlcF3eVGdjpn8tO9UDjetqdKhaDyZ1 R7gw8+zCHci06fxJTDr6tFYEe5q+y4MC+qywLx7LbeiRM4zMZiccLWubVnKxX0yk g94F8VodJ60RmDL7qLftXg7ogrtBueZnjNDo/uop7dGeor9obIYZ9JpmmbspEOE3 df3y+CSO0b/qZhW1fOOYUf1H+slsH2roeMbD99wXBEa9bLFJME+dbSw37ehPyul1 Dm28ojMrP+DO/GkpWwUFNNSPAG/jxVvnfAhrlaTUISVt0A4pDPK1BZZDeSNK1UxN mG9ZpFdxGXw40pKha0BW7FMlmfO3cKO7FcpBb+DUQCqPf7gJMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKC53GkhKgDxkodcUrQt3/Dx2FyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2ExODhlMGQtMjY3MC0z MWUzLWFmM2YtNjUzMjkzMDJmZWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcD7JrmJQiRCaGXO8IiiqUWpkK2MRxuB5bxGawZpyIc95SyOuCLulPp 6j/kNeUOy+H27g7LvrPs+XvDevJtmN4/8jrE5L+iB8Vxy5/X422DMZl8PxSiscTC j8N/OBhxL8P67aj268U9zqFIzlo+KU4jVVcPTBwTn0t2FCbX4XBzCX3h2bmH1Rpd 2CfiFpRbCppgaiC+CG571mGyaAJz6jL1uJkKCV01LVP3/peXSgUgKrvfEUNzHI18 x7Ptn8zTAnVC6ZG2WnA7Z0EP8at6pWem1dvpx+VvFwceGMP4wvFYCVuAedB35Fo6 G47z7UJfBffQH3x2paVWDlGOF98WjaA= -----END CERTIFICATE-----Generated at Sun Apr 27 01:59:51 2025 by rpki-client