$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd88be1c-feb4-3ab2-9924-b8bb1120d645.roa File: fd88be1c-feb4-3ab2-9924-b8bb1120d645.roa (raw, json) Hash identifier: RtLpZj1trChHtznkPJthotMCDgpTjVDSW5JzORATF5U= Subject key identifier: 98:4B:11:7D:D2:4B:78:06:E1:25:FC:69:17:58:0F:A0:0D:C1:49:2C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAA62F0FE552D3EA63F100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd88be1c-feb4-3ab2-9924-b8bb1120d645.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:a6:2f:0f:e5:52:d3:ea:63:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=05d1f6e1-35f8-4a6d-aee0-95b70a50c454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8c:10:d3:d4:62:04:cb:0c:9c:09:56:8a:c1: 9c:b3:69:65:9d:b2:bb:1f:4f:74:74:2f:b5:a7:c2: fb:49:f3:fe:9f:41:78:95:df:be:a8:24:eb:c2:b6: 84:f0:de:f2:70:03:ef:8b:33:96:78:cd:3c:40:66: 37:e6:33:d7:3f:86:00:40:dc:5f:11:96:d9:62:18: 4f:d8:d8:de:46:cf:7c:ba:4f:5b:d7:fb:b9:8d:10: 9e:2f:a6:53:de:ea:30:24:db:16:52:71:1d:0a:bc: 3f:52:11:42:2c:5e:00:94:24:3b:0a:06:00:75:de: 10:f3:3f:b5:f7:a6:7b:ea:f5:25:20:b0:da:94:ee: a3:52:96:95:10:3c:93:93:0a:19:ac:85:45:0a:2f: 60:96:43:bb:48:b0:77:fe:6a:8e:e3:2d:3a:ca:b1: e0:8c:34:aa:69:9a:e8:a7:89:cb:83:9f:1e:65:e3: 92:35:0d:b5:41:b8:c6:14:1f:89:da:02:fb:0c:d7: 34:8b:bb:93:83:df:77:89:1b:1c:04:8e:ec:41:ee: 60:ec:36:1d:0a:30:23:f7:96:d8:63:a6:52:5e:84: c1:ac:87:e3:c9:79:52:a7:9d:ec:18:c3:88:3b:43: de:2e:c3:6f:40:32:82:d2:b4:27:a0:dd:35:b6:a0: a8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4B:11:7D:D2:4B:78:06:E1:25:FC:69:17:58:0F:A0:0D:C1:49:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd88be1c-feb4-3ab2-9924-b8bb1120d645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:11:c6:78:c8:2f:1f:43:d7:3e:38:cc:18:64:0e:3f:c1:f8: d7:91:e0:a1:b1:3a:41:05:76:70:b4:3d:ad:b5:b4:00:e6:5b: 5e:c3:78:13:6f:3a:8d:07:d1:5e:be:02:18:c6:5b:6c:e2:95: 26:6c:73:7a:a5:98:4f:c9:19:07:85:62:17:bf:e1:28:e5:65: 03:9f:3c:b4:75:8c:76:7b:6d:d8:72:3b:e3:de:6d:85:1a:79: a9:d2:8b:3b:13:a2:8e:e8:9f:8b:0d:f7:52:a8:f7:4a:4f:75: 3b:f8:c9:48:61:96:da:9d:83:e5:5c:8c:84:a6:a9:4c:54:6b: f9:f3:0b:f3:dc:13:89:28:14:1a:73:73:28:ee:90:06:7f:9a: 2a:e5:82:e5:4e:df:2a:44:2d:60:87:f7:c5:22:c8:c2:7d:41: 27:56:ba:97:8b:bc:b7:b5:83:0d:ed:cf:36:d6:d1:e1:a4:c3: b8:0a:a7:e2:ea:ed:65:75:22:77:10:47:fc:aa:34:77:ef:62: 55:7f:90:f6:83:95:52:86:54:1c:de:76:b8:de:ba:66:e8:a6: 9a:d4:08:06:98:5d:2e:d7:e2:42:13:95:49:be:b2:58:ee:94: a7:7f:80:a6:cd:94:f2:59:38:14:ad:0d:81:10:0a:99:5c:fd: 52:5a:3a:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuqYvD+VS0+pj8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDVkMWY2ZTEtMzVmOC00YTZkLWFlZTAtOTViNzBhNTBjNDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4wQ09RiBMsMnAlWisGcs2llnbK7H090dC+1 p8L7SfP+n0F4ld++qCTrwraE8N7ycAPvizOWeM08QGY35jPXP4YAQNxfEZbZYhhP 2NjeRs98uk9b1/u5jRCeL6ZT3uowJNsWUnEdCrw/UhFCLF4AlCQ7CgYAdd4Q8z+1 96Z76vUlILDalO6jUpaVEDyTkwoZrIVFCi9glkO7SLB3/mqO4y06yrHgjDSqaZro p4nLg58eZeOSNQ21QbjGFB+J2gL7DNc0i7uTg993iRscBI7sQe5g7DYdCjAj95bY Y6ZSXoTBrIfjyXlSp53sGMOIO0PeLsNvQDKC0rQnoN01tqCozQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhLEX3SS3gG4SX8aRdYD6ANwUksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmQ4OGJlMWMtZmViNC0z YWIyLTk5MjQtYjhiYjExMjBkNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQRxnjILx9D1z44zBhkDj/B+NeR4KGxOkEFdnC0Pa21tADmW17DeBNv Oo0H0V6+AhjGW2zilSZsc3qlmE/JGQeFYhe/4SjlZQOfPLR1jHZ7bdhyO+PebYUa eanSizsToo7on4sN91Ko90pPdTv4yUhhltqdg+VcjISmqUxUa/nzC/PcE4koFBpz cyjukAZ/mirlguVO3ypELWCH98UiyMJ9QSdWupeLvLe1gw3tzzbW0eGkw7gKp+Lq 7WV1IncQR/yqNHfvYlV/kPaDlVKGVBzedrjeumbopprUCAaYXS7X4kITlUm+slju lKd/gKbNlPJZOBStDYEQCplc/VJaOqo= -----END CERTIFICATE-----Generated at Sun Apr 27 06:32:16 2025 by rpki-client