$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb9f349e-81a2-3b62-a174-0e2494547880.roa File: cb9f349e-81a2-3b62-a174-0e2494547880.roa (raw, json) Hash identifier: aAbUe1Y2EUNE7XcBOAFVTi2EZdIuhmLm+KkUOkJT/x4= Subject key identifier: 69:A2:C3:66:F7:81:B6:17:6B:A4:8F:3F:C6:D7:57:94:E0:E6:53:B8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9D418DA72DD0889B7880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb9f349e-81a2-3b62-a174-0e2494547880.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.20.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:9d:41:8d:a7:2d:d0:88:9b:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c4cb6e22-68d8-428b-9138-395fa64d951d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6f:d5:4b:ed:b0:d5:56:f8:d0:de:52:df:51: 08:3d:4a:1e:df:59:e6:b8:0b:c8:e8:51:51:3a:82: be:99:f0:ef:d9:fe:4e:fb:a6:7d:04:10:d9:60:53: 5e:8f:76:0f:14:98:b9:c9:51:fe:56:63:0e:c1:ba: 72:61:98:fa:58:ca:25:c0:d6:bc:20:67:5e:f0:8b: c8:2b:8e:71:d1:31:a9:fb:8e:9a:81:7d:f3:47:96: 8a:d9:45:01:30:d4:45:0a:94:d0:78:70:b6:2a:cd: 55:33:8c:39:12:12:43:33:9b:84:f1:a8:37:ea:11: 71:f3:27:0c:f8:62:78:63:8a:03:d1:3e:bd:e0:51: e3:41:6b:43:66:5a:bc:80:3e:d4:0d:40:ee:1c:e1: c3:c4:36:ee:c6:c5:47:0d:a7:2f:d9:34:eb:97:15: fb:e0:21:24:32:b6:a0:9f:3b:39:55:50:7e:44:64: 45:e0:cd:3c:7d:a0:91:38:bc:5d:cc:e1:8c:a9:86: 0a:50:8b:43:06:2f:6e:c8:34:d5:f2:86:c7:1e:bf: a9:6a:f0:33:5d:a4:fc:f8:37:56:a8:b8:c4:9a:f6: 76:1f:0b:1a:c2:05:a6:bc:b8:1e:f6:84:a1:ae:6a: 81:ad:5e:07:f6:f8:cb:0e:c5:e9:9d:78:9a:b9:09: c0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A2:C3:66:F7:81:B6:17:6B:A4:8F:3F:C6:D7:57:94:E0:E6:53:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb9f349e-81a2-3b62-a174-0e2494547880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:72:b2:84:71:4c:79:b6:d0:d4:a9:ce:ad:17:e7:8f:55:e6: cb:08:ef:98:2d:e6:4d:94:64:3e:25:e0:68:12:63:62:3d:ad: f5:f2:9a:29:fe:d9:17:d4:3c:f2:41:d6:ff:53:e0:6e:34:72: 66:cc:56:a4:4f:e5:5a:c7:9c:6f:a6:fc:d2:ac:ef:9e:f4:43: 5a:51:fb:60:c2:54:35:1a:27:43:93:2b:21:e4:24:34:a8:e4: 1f:d1:5b:d9:59:fb:b2:c6:08:17:a2:2c:03:92:01:d1:0c:61: 0e:4f:b3:b0:5c:25:15:c3:cf:57:de:30:78:2b:67:26:ee:f3: 2f:b6:90:7e:a6:85:b8:be:01:c3:94:29:19:e8:0d:70:51:1c: 4e:52:46:3f:8b:c0:98:61:c2:bc:80:bf:05:ce:f8:b8:48:92: a0:b2:0f:ff:0d:ec:26:1a:cd:92:e6:c6:df:16:ab:f2:14:16: 53:53:e1:92:79:30:27:3f:01:fd:d3:3d:99:50:9f:95:6d:58: c3:c4:cd:67:f3:30:08:2c:c1:c4:8d:50:df:4b:32:c7:6d:17: 94:5e:22:1d:69:df:d5:f8:21:d0:9d:4d:d6:7a:34:e4:3f:b2: d8:7d:20:c4:09:74:3f:12:85:37:71:7b:cd:f3:92:d2:40:6b: 37:26:2b:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkup1Bjact0IibeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzRjYjZlMjItNjhkOC00MjhiLTkxMzgtMzk1ZmE2NGQ5NTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG/VS+2w1Vb40N5S31EIPUoe31nmuAvI6FFR OoK+mfDv2f5O+6Z9BBDZYFNej3YPFJi5yVH+VmMOwbpyYZj6WMolwNa8IGde8IvI K45x0TGp+46agX3zR5aK2UUBMNRFCpTQeHC2Ks1VM4w5EhJDM5uE8ag36hFx8ycM +GJ4Y4oD0T694FHjQWtDZlq8gD7UDUDuHOHDxDbuxsVHDacv2TTrlxX74CEkMrag nzs5VVB+RGRF4M08faCROLxdzOGMqYYKUItDBi9uyDTV8obHHr+pavAzXaT8+DdW qLjEmvZ2HwsawgWmvLge9oShrmqBrV4H9vjLDsXpnXiauQnAUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmiw2b3gbYXa6SPP8bXV5Tg5lO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2I5ZjM0OWUtODFhMi0z YjYyLWExNzQtMGUyNDk0NTQ3ODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBRqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdysoRxTHm20NSpzq0X549V5ssI75gt5k2UZD4l4GgSY2I9rfXymin+ 2RfUPPJB1v9T4G40cmbMVqRP5VrHnG+m/NKs7570Q1pR+2DCVDUaJ0OTKyHkJDSo 5B/RW9lZ+7LGCBeiLAOSAdEMYQ5Ps7BcJRXDz1feMHgrZybu8y+2kH6mhbi+AcOU KRnoDXBRHE5SRj+LwJhhwryAvwXO+LhIkqCyD/8N7CYazZLmxt8Wq/IUFlNT4ZJ5 MCc/Af3TPZlQn5VtWMPEzWfzMAgswcSNUN9LMsdtF5ReIh1p39X4IdCdTdZ6NOQ/ sth9IMQJdD8ShTdxe83zktJAazcmKyc= -----END CERTIFICATE-----Generated at Sun Apr 27 15:54:13 2025 by rpki-client