$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fde5c3f6-38be-3426-b393-8a4581bb20e3.roa File: fde5c3f6-38be-3426-b393-8a4581bb20e3.roa (raw, json) Hash identifier: PVpAUJnO9mKIObxtRgFspKdxv3RG7isBQ2NUkvC9Zm0= Subject key identifier: E6:C1:3B:6F:52:F5:2B:D9:05:B1:0B:7A:B2:E3:8C:C8:B1:71:52:C6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAAD69CDD56638AD392980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fde5c3f6-38be-3426-b393-8a4581bb20e3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.62.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:ad:69:cd:d5:66:38:ad:39:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7f51dd37-f7a1-43e8-bc85-27fbb3ecd6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d1:f8:ab:3c:8f:74:87:9c:0c:e7:36:fc:fb: 1c:aa:c7:9a:16:c6:3e:d0:d2:06:88:09:13:88:71: e8:67:ab:6a:f7:57:6a:f7:46:84:9e:da:15:e8:d8: 35:62:7b:a5:15:68:36:7c:8d:96:aa:ef:78:e3:da: af:69:a5:ee:4e:3b:69:c0:c8:e7:79:82:24:ad:9a: 2f:34:67:54:d0:3d:80:e0:68:0b:cd:c9:6b:b0:b0: 20:a0:b9:ea:ad:c0:ad:0a:3f:af:e9:84:44:94:0e: d9:72:8c:75:9a:56:49:ae:aa:d1:24:a6:3b:5d:35: a1:3e:ad:27:79:e8:9f:bc:23:97:38:68:09:7f:f4: 02:df:d3:c3:16:a3:48:b8:07:3e:90:18:cc:87:b4: 02:29:bc:87:24:ba:22:ff:59:e1:fc:c9:08:5e:ee: 17:28:3f:07:ef:42:e9:37:fc:4e:14:59:ce:c8:1e: f8:37:48:95:36:85:c5:ee:29:67:08:02:bc:c9:d3: 19:07:b3:f3:19:7f:c1:66:7a:0b:10:6c:f0:43:48: b0:ad:6d:3a:2d:f0:d6:c7:e9:c0:b4:a7:fd:ea:21: 4f:ce:26:68:ec:be:78:5f:35:08:7d:f2:36:c9:c9: 6b:70:3c:b1:de:f7:ec:ad:2f:81:84:d9:eb:c8:f0: a2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C1:3B:6F:52:F5:2B:D9:05:B1:0B:7A:B2:E3:8C:C8:B1:71:52:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fde5c3f6-38be-3426-b393-8a4581bb20e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.62.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5f:17:04:bb:65:0e:13:b8:a8:fe:cb:92:25:48:9e:2e:37: 24:11:ed:a0:bf:7d:98:0c:a9:b1:71:a8:e1:bf:22:c3:e0:b2: cf:b9:50:b0:c7:7a:a9:3b:08:04:04:e9:22:c4:81:8b:29:97: be:41:09:10:04:cc:cf:1c:c8:23:30:5e:39:b4:95:a4:b3:ef: ac:a7:39:ea:ae:de:e6:7f:23:a5:65:b3:18:06:64:e9:84:1d: ff:5f:8c:4e:fd:94:a0:a7:64:3f:ed:e2:1a:1d:1d:57:d3:10: ec:08:bd:9f:b9:01:59:82:dd:83:a7:03:36:9e:2d:9f:48:80: 7e:e3:43:a7:8e:b3:62:5f:03:09:4f:2e:06:f0:d7:27:76:dd: 2c:75:d7:4d:e4:c5:61:6d:a8:55:a2:24:b2:dc:23:2c:6c:5b: f2:ed:89:2f:82:61:cc:f5:a1:59:20:f7:d7:90:4d:95:8d:bb: 1d:64:fa:d7:57:f8:bf:06:5e:81:33:68:b6:69:25:e2:9e:f0: 10:44:d6:9b:85:90:1c:fe:db:df:4d:3f:9b:fc:68:64:99:40: 66:94:14:2c:94:77:54:6b:49:a9:39:3d:ee:e8:2c:80:d9:b2: b6:12:67:4a:58:21:da:63:f6:12:c8:50:47:eb:b4:da:88:c1: 35:3f:25:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuq1pzdVmOK05KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2Y1MWRkMzctZjdhMS00M2U4LWJjODUtMjdmYmIzZWNkNmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtH4qzyPdIecDOc2/PscqseaFsY+0NIGiAkT iHHoZ6tq91dq90aEntoV6Ng1YnulFWg2fI2Wqu9449qvaaXuTjtpwMjneYIkrZov NGdU0D2A4GgLzclrsLAgoLnqrcCtCj+v6YRElA7Zcox1mlZJrqrRJKY7XTWhPq0n eeifvCOXOGgJf/QC39PDFqNIuAc+kBjMh7QCKbyHJLoi/1nh/MkIXu4XKD8H70Lp N/xOFFnOyB74N0iVNoXF7ilnCAK8ydMZB7PzGX/BZnoLEGzwQ0iwrW06LfDWx+nA tKf96iFPziZo7L54XzUIffI2yclrcDyx3vfsrS+BhNnryPCigQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObBO29S9SvZBbELerLjjMixcVLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmRlNWMzZjYtMzhiZS0z NDI2LWIzOTMtOGE0NTgxYmIyMGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD7PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJfFwS7ZQ4TuKj+y5IlSJ4uNyQR7aC/fZgMqbFxqOG/IsPgss+5ULDH eqk7CAQE6SLEgYspl75BCRAEzM8cyCMwXjm0laSz76ynOequ3uZ/I6VlsxgGZOmE Hf9fjE79lKCnZD/t4hodHVfTEOwIvZ+5AVmC3YOnAzaeLZ9IgH7jQ6eOs2JfAwlP Lgbw1yd23Sx1103kxWFtqFWiJLLcIyxsW/LtiS+CYcz1oVkg99eQTZWNux1k+tdX +L8GXoEzaLZpJeKe8BBE1puFkBz+299NP5v8aGSZQGaUFCyUd1RrSak5Pe7oLIDZ srYSZ0pYIdpj9hLIUEfrtNqIwTU/JeM= -----END CERTIFICATE-----Generated at Sun Apr 27 04:08:34 2025 by rpki-client