$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a2159d0-619a-3378-87d9-a49babf5d690.roa File: 0a2159d0-619a-3378-87d9-a49babf5d690.roa (raw, json) Hash identifier: zo3QSlj5pKpAWoVnPKLiIyNecu1KRUQ2NeoGtg6F1fI= Subject key identifier: 95:E3:0A:C4:76:75:45:04:CE:71:B3:00:AE:EF:9C:3E:5F:CE:9F:45 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581551AA53F918DD1852400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a2159d0-619a-3378-87d9-a49babf5d690.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.20.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:55:1a:a5:3f:91:8d:d1:85:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=0a3b1e88-5a39-4c71-9610-c24997aebdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5a:16:84:3c:d0:54:0d:6d:72:db:6d:e3:14: 2d:fe:3d:af:ef:9d:aa:b8:94:ef:87:d2:2f:4f:e8: ab:f3:89:8a:8e:87:09:ee:db:a9:ae:3e:3d:38:71: ab:ff:70:48:3c:1a:4f:63:b8:aa:e6:c7:06:84:f9: 56:67:dd:71:3e:d7:6f:73:21:bd:8f:8e:f2:57:aa: 5a:3f:0e:79:1a:6d:7b:d6:3f:2c:82:5b:bd:c4:60: 14:58:e7:ad:46:46:cd:5f:61:88:c9:cb:82:50:33: 1b:9e:2e:9a:fd:05:3a:52:fa:7b:fc:33:19:b5:d4: 9e:08:30:3c:92:9b:34:21:77:ff:a8:3f:7a:68:61: e2:02:1a:67:fb:1c:84:c2:c5:53:4c:2a:51:f3:8a: ee:a0:a0:ad:18:fc:18:96:0b:f6:54:0a:c5:24:86: b8:bb:fa:77:3c:0a:b2:5d:d9:de:3c:ee:25:e0:3a: 15:e5:69:5b:3a:9a:7a:ec:9c:c1:29:a9:e8:75:0c: 1a:a0:79:74:9c:62:18:09:2e:bc:a8:26:c6:c5:61: 77:d6:95:30:88:71:2e:32:09:13:b3:72:6c:4a:b4: 4e:43:f5:be:e2:d9:18:5b:96:61:24:7e:a4:88:71: 47:2d:4a:19:53:0b:74:ce:3a:f2:ca:91:f8:25:1d: d2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E3:0A:C4:76:75:45:04:CE:71:B3:00:AE:EF:9C:3E:5F:CE:9F:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a2159d0-619a-3378-87d9-a49babf5d690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:ec:ac:2c:ce:22:ca:54:31:f6:6a:ef:39:58:ee:c1:59:89: 95:bb:3b:a5:67:9d:78:60:82:4f:52:42:ba:aa:1a:ce:c3:2e: 9e:39:3f:41:bd:03:c8:a0:2d:bd:75:07:09:01:e2:94:52:8a: 84:01:15:df:f4:65:2b:30:64:d5:53:ef:dc:7f:bb:21:0e:23: ff:20:11:3f:82:88:0b:cb:e5:1c:65:89:1b:61:79:10:6f:b5: 65:d5:82:59:22:5c:3c:90:3e:8e:9b:0f:d1:15:0b:5f:8d:a8: 4b:52:82:67:8c:3c:70:94:aa:0b:9c:aa:40:f5:94:70:41:9d: 1f:99:48:22:47:8b:0e:14:8e:0c:03:b1:87:86:ea:44:ef:a8: cc:d5:98:21:be:d7:8a:6f:29:7a:6b:8e:2d:a6:24:b8:a9:d4: 04:a0:4b:d3:5b:de:82:0c:0a:45:9c:ed:e1:53:9a:78:14:e2: d9:c1:f5:b0:52:84:2c:41:d1:8b:4e:0b:1c:d4:7a:0e:38:a7: 36:0e:ae:40:da:72:d4:d1:3d:5f:cc:8c:b2:4b:fa:27:4b:27: 4b:1f:3a:f9:74:25:0e:ea:fe:41:be:d2:5a:cc:8a:7e:d2:28: f4:f9:94:f9:ad:23:cf:b4:5f:b2:a0:cf:b0:be:f8:94:aa:68: 08:58:22:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVUapT+RjdGFJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MGEzYjFlODgtNWEzOS00YzcxLTk2MTAtYzI0OTk3YWViZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1oWhDzQVA1tcttt4xQt/j2v752quJTvh9Iv T+ir84mKjocJ7tuprj49OHGr/3BIPBpPY7iq5scGhPlWZ91xPtdvcyG9j47yV6pa Pw55Gm171j8sglu9xGAUWOetRkbNX2GIycuCUDMbni6a/QU6Uvp7/DMZtdSeCDA8 kps0IXf/qD96aGHiAhpn+xyEwsVTTCpR84ruoKCtGPwYlgv2VArFJIa4u/p3PAqy XdnePO4l4DoV5WlbOpp67JzBKanodQwaoHl0nGIYCS68qCbGxWF31pUwiHEuMgkT s3JsSrROQ/W+4tkYW5ZhJH6kiHFHLUoZUwt0zjryypH4JR3SsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXjCsR2dUUEznGzAK7vnD5fzp9FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGEyMTU5ZDAtNjE5YS0z Mzc4LTg3ZDktYTQ5YmFiZjVkNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMjsrCzOIspUMfZq7zlY7sFZiZW7O6VnnXhggk9SQrqqGs7DLp45P0G9 A8igLb11BwkB4pRSioQBFd/0ZSswZNVT79x/uyEOI/8gET+CiAvL5RxliRtheRBv tWXVglkiXDyQPo6bD9EVC1+NqEtSgmeMPHCUqgucqkD1lHBBnR+ZSCJHiw4UjgwD sYeG6kTvqMzVmCG+14pvKXprji2mJLip1ASgS9Nb3oIMCkWc7eFTmngU4tnB9bBS hCxB0YtOCxzUeg44pzYOrkDactTRPV/MjLJL+idLJ0sfOvl0JQ7q/kG+0lrMin7S KPT5lPmtI8+0X7Kgz7C++JSqaAhYImc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:31 2025 by rpki-client