$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a25de3e-1cd7-363e-b285-03ed6e5777ed.roa File: 0a25de3e-1cd7-363e-b285-03ed6e5777ed.roa (raw, json) Hash identifier: VjkJ1ZrIe3D32Ts2q/1vuSKWXk06wwJ/28jaB88N87w= Subject key identifier: 8C:2E:45:1F:C2:47:56:A9:5D:24:BE:3C:63:A2:17:7F:DA:4A:A2:CE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581E9B7D6BAFE6C93F96880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a25de3e-1cd7-363e-b285-03ed6e5777ed.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.21.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:e9:b7:d6:ba:fe:6c:93:f9:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=7612c6c2-c38b-4a0d-9630-c00a75e988f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0d:5c:73:72:a2:2f:a1:dc:b9:93:1a:d8:57: 72:37:80:57:f8:83:f4:cc:ee:0e:d5:84:ec:95:b0: 51:37:29:67:fb:43:5c:e1:b6:ff:57:9f:0c:25:de: 6d:cf:54:11:da:63:ae:21:71:29:1f:99:03:2a:f7: 74:7d:4c:26:62:25:c2:0b:65:a2:8b:b0:fb:a9:c0: 4a:5e:42:b1:91:c1:51:a5:c1:ef:f9:f0:7c:da:ce: fb:9c:0e:84:c9:8c:ff:49:31:7f:72:9e:c9:e7:8e: f2:f8:21:42:f1:4f:90:19:cb:34:0f:94:63:8d:58: c5:1a:dd:cf:6c:be:02:2e:69:26:c0:51:f3:eb:e0: 7a:fb:3d:81:71:42:cc:e1:4c:1f:85:f2:d1:60:8a: 5f:43:aa:28:22:99:3e:14:c3:1c:e1:87:2e:bb:5c: e6:4d:ef:23:85:d7:91:a6:a1:77:d5:86:80:79:ec: 8d:0c:7b:73:3e:a0:27:53:15:3c:f0:4a:06:df:4b: 25:fe:19:f8:5a:58:55:6b:b7:ac:ce:1e:f7:0a:48: d5:f8:71:d5:81:3f:1e:16:ea:f6:f9:cd:c0:14:39: 6c:1a:17:6b:bb:a6:2c:29:de:33:55:a4:fb:01:5c: 34:c9:cd:b3:2a:e4:cd:01:ff:ac:5f:13:c3:10:c4: 18:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2E:45:1F:C2:47:56:A9:5D:24:BE:3C:63:A2:17:7F:DA:4A:A2:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a25de3e-1cd7-363e-b285-03ed6e5777ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ef:d4:bf:92:aa:d3:17:6f:e4:c2:bf:32:9d:79:46:f4:92: 86:45:d4:80:b1:25:32:89:91:16:b3:8a:81:c6:1b:59:a0:ba: af:2d:9e:ac:27:d1:ed:08:74:29:27:62:77:55:08:ab:fa:bb: dc:66:44:32:32:d0:fd:6d:b4:04:96:c8:7f:1b:94:05:a0:b5: f5:55:19:b9:ef:7d:fc:9f:c8:85:ae:18:53:b1:8a:02:d6:7a: a1:53:c9:94:d3:b0:11:dd:ba:cd:4c:e6:ba:bb:71:fb:68:0d: 4d:15:45:12:9a:5b:60:d3:50:e2:2e:07:8a:cd:88:2b:08:e9: c7:19:40:65:8d:bf:f7:68:50:c3:53:03:26:df:08:8a:8e:79: b5:28:16:92:a0:ba:fb:8a:0f:a1:17:04:be:6d:7e:24:1b:38: 08:29:de:5e:9c:c4:74:b5:73:37:d0:ce:f3:c1:89:1b:fd:29: eb:19:57:41:99:33:f0:4a:b9:97:e5:97:fc:56:58:90:14:c5: b3:d7:93:98:d7:57:94:51:e3:ff:0a:18:23:71:ee:19:47:b1: a6:7e:ff:4d:df:a0:6d:8f:e0:f0:c1:e7:ab:09:d6:e7:19:c6: 6f:83:55:cd:d0:ce:bf:c9:3c:11:a4:8e:1d:6b:88:84:9c:43: b5:fa:f3:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgem31rr+bJP5aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzYxMmM2YzItYzM4Yi00YTBkLTk2MzAtYzAwYTc1ZTk4OGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA1cc3KiL6HcuZMa2FdyN4BX+IP0zO4O1YTs lbBRNyln+0Nc4bb/V58MJd5tz1QR2mOuIXEpH5kDKvd0fUwmYiXCC2Wii7D7qcBK XkKxkcFRpcHv+fB82s77nA6EyYz/STF/cp7J547y+CFC8U+QGcs0D5RjjVjFGt3P bL4CLmkmwFHz6+B6+z2BcULM4UwfhfLRYIpfQ6ooIpk+FMMc4Ycuu1zmTe8jhdeR pqF31YaAeeyNDHtzPqAnUxU88EoG30sl/hn4WlhVa7eszh73CkjV+HHVgT8eFur2 +c3AFDlsGhdru6YsKd4zVaT7AVw0yc2zKuTNAf+sXxPDEMQYvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwuRR/CR1apXSS+PGOiF3/aSqLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGEyNWRlM2UtMWNkNy0z NjNlLWIyODUtMDNlZDZlNTc3N2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBVQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzv1L+SqtMXb+TCvzKdeUb0koZF1ICxJTKJkRazioHGG1mguq8tnqwn 0e0IdCknYndVCKv6u9xmRDIy0P1ttASWyH8blAWgtfVVGbnvffyfyIWuGFOxigLW eqFTyZTTsBHdus1M5rq7cftoDU0VRRKaW2DTUOIuB4rNiCsI6ccZQGWNv/doUMNT AybfCIqOebUoFpKguvuKD6EXBL5tfiQbOAgp3l6cxHS1czfQzvPBiRv9KesZV0GZ M/BKuZfll/xWWJAUxbPXk5jXV5RR4/8KGCNx7hlHsaZ+/03foG2P4PDB56sJ1ucZ xm+DVc3Qzr/JPBGkjh1riIScQ7X689o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:34 2025 by rpki-client