$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0f2c76e7-0630-361a-94db-3ffd55dd804f.roa File: 0f2c76e7-0630-361a-94db-3ffd55dd804f.roa (raw, json) Hash identifier: 9jH2DAk5n5Y5tdDZcwR0AdB9XseGIaKq7N/aPlo0saE= Subject key identifier: 06:6E:58:5B:27:3E:A4:F1:9E:17:C6:BD:88:50:02:B3:89:C0:FD:B7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581577EAC66163589BDA940 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0f2c76e7-0630-361a-94db-3ffd55dd804f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.21.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:57:7e:ac:66:16:35:89:bd:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=df054e81-11fe-4e11-826d-9ad3cbac2cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:65:c4:31:8c:97:8d:8e:1e:99:41:45:d0:a7: ae:42:77:ac:71:f9:a2:c8:0d:d1:a7:6b:0b:d0:52: a0:e9:d8:f8:d7:ec:d5:3b:84:68:3a:39:c3:32:41: e6:dd:50:f2:a5:cf:40:c8:a0:cb:ff:cc:68:16:b5: c4:65:98:91:79:4d:28:82:e5:ed:04:21:d7:ef:31: aa:28:c3:8b:b3:35:d1:f5:de:cc:80:aa:b5:a3:72: 68:c9:14:3e:60:c9:d2:22:16:c6:a7:00:af:aa:49: cf:de:17:fb:e7:3b:da:46:77:50:bb:46:87:66:f5: a4:f9:f5:83:8e:75:33:7d:fb:ce:ed:8e:0a:d5:8a: fa:ab:41:26:a9:e7:cb:97:75:f5:e9:d1:5d:00:24: 81:52:5f:91:69:f0:5c:52:cf:f9:4a:77:64:c9:35: e0:0c:c5:8a:ae:e8:8c:e2:1b:2b:1c:93:7e:e0:e8: d2:40:79:0f:40:ac:77:fc:a3:6f:d1:ad:7f:2b:fd: 8a:cd:1f:cc:d6:ec:50:8f:3f:ca:f0:bb:92:2f:3e: 22:38:89:ef:d3:45:e7:96:a6:46:2b:94:46:55:69: 1b:fd:34:c8:34:e2:9d:2c:d8:c8:09:2e:34:93:8c: e4:db:c1:65:65:cb:48:fa:45:1c:fa:24:87:d0:5f: 89:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6E:58:5B:27:3E:A4:F1:9E:17:C6:BD:88:50:02:B3:89:C0:FD:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0f2c76e7-0630-361a-94db-3ffd55dd804f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:2e:58:d2:b4:04:2f:68:99:ea:6a:dc:a4:bf:8b:bd:77:12: bf:37:7e:62:f2:a8:b0:cf:e6:6f:5a:4e:17:12:ad:d5:2c:51: da:80:f3:14:3d:19:60:4a:6b:db:dd:84:ab:df:a2:dc:fd:0c: 9b:d6:c4:0f:21:59:7a:14:b2:e0:f7:98:fe:20:d1:57:5b:19: bf:6e:d2:39:f0:e6:e7:df:c7:df:d5:81:a8:d1:cb:84:a3:6b: 2c:3f:36:0f:b2:ac:e4:63:9c:45:1f:78:30:6d:b6:90:a3:7d: 46:cf:da:08:1a:67:fd:2a:3c:04:c2:ea:6a:51:78:19:f1:2d: bc:d3:d6:42:1a:8d:bd:44:c1:e5:2b:54:b4:67:90:40:3f:b0: 79:8b:01:e4:96:71:81:ca:52:5b:ff:a1:d4:7d:e7:3a:ef:6b: a0:1f:ff:27:8a:f9:0b:6d:e8:98:b8:d2:0e:31:87:73:2a:58: e2:13:fb:b8:90:d0:e6:b3:28:73:20:5b:cf:b7:e0:bf:9c:8d: 09:0e:01:7c:91:d1:13:99:ca:2b:b5:40:f6:60:6b:bb:2e:40: a3:c5:7c:72:f7:c8:d6:1d:79:77:cd:cd:a1:c5:82:37:5c:92: b9:d9:a0:53:6a:c7:b0:e1:0a:db:d2:c7:bf:c9:fc:d4:66:0b: fc:9a:39:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVd+rGYWNYm9qUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGYwNTRlODEtMTFmZS00ZTExLTgyNmQtOWFkM2NiYWMyY2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWXEMYyXjY4emUFF0KeuQnescfmiyA3Rp2sL 0FKg6dj41+zVO4RoOjnDMkHm3VDypc9AyKDL/8xoFrXEZZiReU0oguXtBCHX7zGq KMOLszXR9d7MgKq1o3JoyRQ+YMnSIhbGpwCvqknP3hf75zvaRndQu0aHZvWk+fWD jnUzffvO7Y4K1Yr6q0EmqefLl3X16dFdACSBUl+RafBcUs/5SndkyTXgDMWKruiM 4hsrHJN+4OjSQHkPQKx3/KNv0a1/K/2KzR/M1uxQjz/K8LuSLz4iOInv00XnlqZG K5RGVWkb/TTINOKdLNjICS40k4zk28FlZctI+kUc+iSH0F+JDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZuWFsnPqTxnhfGvYhQArOJwP23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGYyYzc2ZTctMDYzMC0z NjFhLTk0ZGItM2ZmZDU1ZGQ4MDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBU2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8uWNK0BC9omepq3KS/i713Er83fmLyqLDP5m9aThcSrdUsUdqA8xQ9 GWBKa9vdhKvfotz9DJvWxA8hWXoUsuD3mP4g0VdbGb9u0jnw5uffx9/VgajRy4Sj ayw/Ng+yrORjnEUfeDBttpCjfUbP2ggaZ/0qPATC6mpReBnxLbzT1kIajb1EweUr VLRnkEA/sHmLAeSWcYHKUlv/odR95zrva6Af/yeK+Qtt6Ji40g4xh3MqWOIT+7iQ 0OazKHMgW8+34L+cjQkOAXyR0ROZyiu1QPZga7suQKPFfHL3yNYdeXfNzaHFgjdc krnZoFNqx7DhCtvSx7/J/NRmC/yaOSM= -----END CERTIFICATE-----Generated at Fri Mar 14 10:01:57 2025 by rpki-client