$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6c0baa9-d395-3659-9e4d-47386ed6f51a.roa File: d6c0baa9-d395-3659-9e4d-47386ed6f51a.roa (raw, json) Hash identifier: f+nbL4ZlIpIqL/Fn4dYSxNYXkCuRlpc7uqBeLsdkFms= Subject key identifier: 32:F1:2C:45:E8:AA:B1:54:01:03:11:F2:9E:CD:49:81:AE:29:99:F8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAA277AB944DF8ED641400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6c0baa9-d395-3659-9e4d-47386ed6f51a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:a2:77:ab:94:4d:f8:ed:64:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fb45e5de-0fd2-4485-8334-d628fd4e9b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:43:87:de:9b:41:cb:37:00:e2:07:b8:30:49: b8:b2:9b:b6:b9:2a:c0:4d:24:f1:ac:9c:ca:f1:4c: 65:dc:8d:3b:8e:1c:e6:2b:73:be:df:f3:cb:33:4f: 22:d9:7f:51:95:e5:8e:4b:16:50:32:f5:25:2e:dc: 81:1b:44:38:7f:1f:36:b2:af:a0:e4:70:b7:f2:c1: d7:97:a1:0f:5b:f4:af:78:05:40:f7:03:b5:ca:8f: 9c:f0:22:a4:3d:f2:13:62:24:0a:cc:1c:6b:8f:39: 49:0e:3a:1a:13:0b:51:46:ad:93:7e:fe:5c:a0:0c: 99:d5:93:95:99:e9:b1:30:6c:af:c1:a1:75:bf:15: 57:ff:b9:a2:49:4a:9f:be:53:d3:05:23:18:04:ce: 8a:f8:80:fc:c3:5d:7e:d9:52:97:b5:17:3f:fa:df: d0:8d:99:1a:0f:a4:6c:28:d6:f1:ed:c6:0f:0b:3a: 67:80:34:55:35:7f:30:70:44:e5:53:b3:51:c5:43: f8:43:3e:4b:90:6c:2e:7a:3e:f7:2c:45:fa:9b:70: 20:a7:fb:0e:3d:5e:8a:91:8c:c7:40:d5:74:98:66: 1f:d2:56:05:ea:9b:da:9c:1d:bc:52:b2:5b:9b:1b: ce:6a:61:c1:bc:e6:92:43:db:2f:ac:51:5c:4a:1a: d3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F1:2C:45:E8:AA:B1:54:01:03:11:F2:9E:CD:49:81:AE:29:99:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6c0baa9-d395-3659-9e4d-47386ed6f51a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:d5:58:e4:b5:6c:fe:28:57:a7:66:22:f1:cf:73:4e:f2:94: 26:26:d8:aa:b5:2a:3f:66:41:44:91:b2:dd:89:7b:0c:f5:82: 82:3e:66:f5:00:27:d3:e6:08:25:d3:88:52:ba:ea:e9:db:dd: c0:1f:f9:49:a0:f1:4e:46:f7:33:88:54:1b:7c:02:34:76:0a: 5f:27:03:44:39:75:c6:74:23:30:fd:46:01:63:f2:7a:87:22: 96:3e:00:c7:4c:7a:98:72:30:74:01:c0:48:8e:b5:1e:4e:b8: 01:7d:bc:d9:5d:b3:a4:05:d3:6d:f1:2a:12:52:3d:44:8d:75: 88:3d:36:c5:2c:89:f0:e0:e7:47:c6:fc:e1:36:9c:7d:61:e2: f5:08:91:a2:87:30:fa:95:0f:79:c9:93:51:68:05:b2:ca:2b: 62:bc:61:71:34:9a:fb:17:60:79:a5:ed:76:bc:d1:a2:21:59: 90:8c:b0:23:db:7d:ff:28:55:f8:8c:9c:bc:1d:b8:b5:f0:7d: 6d:61:be:70:03:8e:12:d5:c0:43:b8:0b:f7:37:8a:59:77:92: a7:d7:95:4e:ec:6c:ca:b2:ec:1a:4a:4e:78:d9:37:70:74:d3: 2b:c1:e2:7a:23:6f:57:8e:26:90:0e:f3:b7:19:e8:e9:ce:5d: 85:50:ee:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuqJ3q5RN+O1kFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmI0NWU1ZGUtMGZkMi00NDg1LTgzMzQtZDYyOGZkNGU5YjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0OH3ptByzcA4ge4MEm4spu2uSrATSTxrJzK 8Uxl3I07jhzmK3O+3/PLM08i2X9RleWOSxZQMvUlLtyBG0Q4fx82sq+g5HC38sHX l6EPW/SveAVA9wO1yo+c8CKkPfITYiQKzBxrjzlJDjoaEwtRRq2Tfv5coAyZ1ZOV memxMGyvwaF1vxVX/7miSUqfvlPTBSMYBM6K+ID8w11+2VKXtRc/+t/QjZkaD6Rs KNbx7cYPCzpngDRVNX8wcETlU7NRxUP4Qz5LkGwuej73LEX6m3Agp/sOPV6KkYzH QNV0mGYf0lYF6pvanB28UrJbmxvOamHBvOaSQ9svrFFcShrTEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLxLEXoqrFUAQMR8p7NSYGuKZn4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDZjMGJhYTktZDM5NS0z NjU5LTllNGQtNDczODZlZDZmNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7VWOS1bP4oV6dmIvHPc07ylCYm2Kq1Kj9mQUSRst2Jewz1goI+ZvUA J9PmCCXTiFK66unb3cAf+Umg8U5G9zOIVBt8AjR2Cl8nA0Q5dcZ0IzD9RgFj8nqH IpY+AMdMephyMHQBwEiOtR5OuAF9vNlds6QF023xKhJSPUSNdYg9NsUsifDg50fG /OE2nH1h4vUIkaKHMPqVD3nJk1FoBbLKK2K8YXE0mvsXYHml7Xa80aIhWZCMsCPb ff8oVfiMnLwduLXwfW1hvnADjhLVwEO4C/c3ill3kqfXlU7sbMqy7BpKTnjZN3B0 0yvB4nojb1eOJpAO87cZ6OnOXYVQ7gg= -----END CERTIFICATE-----Generated at Sun Apr 27 19:40:39 2025 by rpki-client