$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0dd5bf6b-3e54-319c-87e9-1061d3897e26.roa File: 0dd5bf6b-3e54-319c-87e9-1061d3897e26.roa (raw, json) Hash identifier: IxjtTXuF4jqR+UVoqNUMtcvyLOUoQOeBFTgF4RxjU9g= Subject key identifier: 36:90:55:C9:F9:CC:C7:FB:FF:66:75:CC:03:D2:25:C0:37:11:E8:59 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581E6D3D9DDFD832AF350A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0dd5bf6b-3e54-319c-87e9-1061d3897e26.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.20.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:e6:d3:d9:dd:fd:83:2a:f3:50:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=6be0dbdd-b600-42b6-92d1-36cffe4eadab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:76:60:1e:65:bb:d2:05:ab:34:9d:92:61:a5: 19:ec:b7:de:9c:4c:c4:4b:20:4f:1b:c3:8d:a0:43: fb:41:0f:b7:28:70:04:3c:39:32:b3:a1:af:f3:06: 7e:5f:4b:61:7e:78:89:ba:34:f8:a7:66:24:64:b9: 46:fb:89:54:ff:b8:4a:a9:06:b2:0c:10:27:df:36: ee:04:6e:24:f8:93:ab:2c:47:b7:8a:9a:15:93:bb: 52:95:e9:2e:f0:a4:52:bb:0d:80:53:37:fa:76:ec: 00:1b:b0:37:92:3d:6b:82:5d:f9:cc:aa:bb:2e:7f: 7a:4a:be:0d:a4:99:72:df:a1:3f:c9:4c:a5:ba:54: 29:88:4a:ed:e9:bd:8c:36:97:26:07:e3:b9:66:35: b2:d9:58:9f:74:c4:35:d4:00:35:06:40:79:39:e5: 5f:32:cb:b0:5e:ab:05:2a:3f:5f:12:7c:1e:ae:d1: 7b:10:8b:31:24:d3:7e:bd:50:35:c8:6c:01:5e:49: 63:5a:da:fa:26:88:41:b4:6e:6c:48:9e:a3:2a:5a: d3:ac:d2:1e:cf:06:16:41:13:a1:ea:75:b9:1e:8f: c5:27:48:bf:29:ff:ab:5e:7c:5c:67:19:f4:b9:26: e2:f7:9e:9c:5b:d1:a7:c8:d4:54:a5:ba:53:62:26: 0a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:90:55:C9:F9:CC:C7:FB:FF:66:75:CC:03:D2:25:C0:37:11:E8:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0dd5bf6b-3e54-319c-87e9-1061d3897e26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:1d:16:b9:28:88:89:10:b2:3a:ff:6e:ba:78:90:84:9e:49: 5b:f4:ba:46:1e:5a:8e:f4:a9:a2:54:1e:e4:6a:17:13:d8:6e: 14:f6:d6:97:0e:af:d0:8d:5b:43:48:c2:e5:8c:cb:29:97:db: 68:20:56:85:6b:ae:b8:70:99:3e:87:d0:1e:68:7c:b6:04:e1: 73:76:aa:ae:47:24:02:e1:b1:08:4c:1f:51:9d:6f:69:c4:0a: 45:a7:0f:ae:e0:31:78:8c:39:69:2b:74:dc:ad:d3:36:02:82: a6:ad:48:9e:64:64:81:6c:95:68:b2:cb:1d:08:a0:d3:a3:19: e5:6c:b3:25:05:4a:05:b2:07:c0:18:0a:d9:39:83:05:df:d6: bc:44:dc:f5:f1:01:46:c5:d3:7d:cd:c0:a1:96:3f:b6:13:dd: 8c:25:61:3e:54:4f:2f:c6:11:5a:aa:44:69:c0:bc:34:f2:3e: dd:af:8e:72:02:a5:58:fe:88:23:6a:19:ff:f3:a6:e0:4b:e0: c3:ac:cd:7b:a9:08:26:17:1c:c6:3c:8c:b7:d3:74:83:57:4f: 40:a1:a7:09:66:65:7a:52:78:bb:34:7c:72:d6:66:50:c0:0a: 7f:05:a3:6c:f0:25:c3:4b:84:cd:55:de:fc:f5:f4:5b:f9:cf: 3b:6d:f6:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgebT2d39gyrzUKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NmJlMGRiZGQtYjYwMC00MmI2LTkyZDEtMzZjZmZlNGVhZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXZgHmW70gWrNJ2SYaUZ7LfenEzESyBPG8ON oEP7QQ+3KHAEPDkys6Gv8wZ+X0thfniJujT4p2YkZLlG+4lU/7hKqQayDBAn3zbu BG4k+JOrLEe3ipoVk7tSleku8KRSuw2AUzf6duwAG7A3kj1rgl35zKq7Ln96Sr4N pJly36E/yUylulQpiErt6b2MNpcmB+O5ZjWy2VifdMQ11AA1BkB5OeVfMsuwXqsF Kj9fEnwertF7EIsxJNN+vVA1yGwBXkljWtr6JohBtG5sSJ6jKlrTrNIezwYWQROh 6nW5Ho/FJ0i/Kf+rXnxcZxn0uSbi956cW9GnyNRUpbpTYiYKZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaQVcn5zMf7/2Z1zAPSJcA3EehZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGRkNWJmNmItM2U1NC0z MTljLTg3ZTktMTA2MWQzODk3ZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0dFrkoiIkQsjr/brp4kISeSVv0ukYeWo70qaJUHuRqFxPYbhT21pcO r9CNW0NIwuWMyymX22ggVoVrrrhwmT6H0B5ofLYE4XN2qq5HJALhsQhMH1Gdb2nE CkWnD67gMXiMOWkrdNyt0zYCgqatSJ5kZIFslWiyyx0IoNOjGeVssyUFSgWyB8AY Ctk5gwXf1rxE3PXxAUbF033NwKGWP7YT3YwlYT5UTy/GEVqqRGnAvDTyPt2vjnIC pVj+iCNqGf/zpuBL4MOszXupCCYXHMY8jLfTdINXT0ChpwlmZXpSeLs0fHLWZlDA Cn8Fo2zwJcNLhM1V3vz19Fv5zztt9mM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:05 2025 by rpki-client