$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/19458f7a-e9ca-3e74-892e-3e071167bdf1.roa File: 19458f7a-e9ca-3e74-892e-3e071167bdf1.roa (raw, json) Hash identifier: N0l3uS5YiV5nco9CxMMUabKv7wSUckzs+UpA9Y8G0IA= Subject key identifier: 23:AD:23:A5:F2:41:82:2E:3C:52:A3:0F:89:31:3E:00:B5:36:88:87 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58157D45933409DEB3F4B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/19458f7a-e9ca-3e74-892e-3e071167bdf1.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.21.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:57:d4:59:33:40:9d:eb:3f:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=239efa37-f213-4d77-baf9-e9e63c12b332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2e:ba:87:72:b9:41:3a:b3:35:3c:c7:94:63: 7f:2d:60:66:07:7f:ce:7f:8a:06:d2:2e:99:9f:1b: db:ec:d2:f2:27:64:9e:e6:60:42:28:62:8b:a2:c4: 5c:63:2e:95:dc:74:63:c3:de:e0:25:99:2a:1e:c7: 39:22:9c:5c:70:7e:4a:d5:4b:80:cb:24:35:7b:4a: 05:04:8d:7c:21:d2:ac:90:ab:ae:e6:e3:b3:06:d5: b3:fc:59:e3:c0:d3:85:3b:04:1e:62:75:ff:82:cc: 85:bf:9a:c0:5c:db:1c:2c:df:a4:17:5e:ee:b7:b1: 1e:d6:10:f7:c1:2b:14:79:d7:fc:13:87:05:19:3a: 60:24:8e:06:c3:3a:24:cc:aa:1f:90:ae:67:b8:af: 29:8e:68:e0:12:0e:b2:11:eb:95:1c:fa:7c:d6:d3: 98:41:d4:be:61:b6:6d:05:cd:3c:3a:47:08:ef:fc: b0:d7:a6:4b:4e:46:a9:18:1b:3a:49:34:63:01:66: 0b:97:ee:eb:6a:81:ea:9b:26:ab:09:17:2e:91:2c: 9d:8d:e6:6e:0f:ac:77:84:6f:0d:88:e6:42:52:36: 5e:47:e1:41:22:d5:d8:f7:a6:72:14:5c:5d:ac:19: 17:48:e5:43:bd:38:53:06:5e:a1:8c:2b:44:2b:93: d9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AD:23:A5:F2:41:82:2E:3C:52:A3:0F:89:31:3E:00:B5:36:88:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/19458f7a-e9ca-3e74-892e-3e071167bdf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:6d:31:f5:43:95:0a:d5:b1:d6:a0:22:42:42:43:26:f3:86: b6:98:f6:4d:68:f4:40:ea:fd:1f:da:9d:d1:f7:43:76:8a:9f: fe:9f:a5:44:2e:cb:e5:f5:49:50:b8:c6:d3:8a:5f:26:b2:cb: 3b:a5:1d:4b:08:b8:0d:fb:95:15:7d:3a:8b:45:07:a9:31:a4: b6:c1:36:5b:4a:69:ae:54:8b:60:ad:03:03:ee:d6:69:0b:88: 08:43:85:10:c1:0f:f5:6a:5e:b9:a8:50:85:61:23:eb:21:2f: 0a:5f:bf:65:d9:65:b2:69:76:b0:cd:fa:bc:82:04:a8:dd:c7: dc:0c:e5:0b:18:42:1b:fd:27:92:73:2f:0d:db:73:5c:84:7c: 67:d7:40:54:5a:c1:e6:c4:7b:a7:0b:b2:ed:6c:db:45:31:68: 8e:e3:b0:25:92:c8:ca:8e:f8:32:9a:6a:45:4c:2a:23:35:c2: e4:cb:b0:9e:88:d5:1f:cc:5a:d1:16:42:1f:0f:f7:4f:79:fc: be:ed:91:4b:da:46:59:3b:44:85:84:29:56:fd:e5:58:e3:ed: 24:86:58:76:65:7b:ba:e3:bb:e8:da:69:01:07:a1:64:09:6e: fa:a3:6f:70:d5:95:d4:3b:4e:20:e3:2c:39:78:23:55:67:f8: d9:9c:37:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVfUWTNAnes/S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjM5ZWZhMzctZjIxMy00ZDc3LWJhZjktZTllNjNjMTJiMzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS66h3K5QTqzNTzHlGN/LWBmB3/Of4oG0i6Z nxvb7NLyJ2Se5mBCKGKLosRcYy6V3HRjw97gJZkqHsc5IpxccH5K1UuAyyQ1e0oF BI18IdKskKuu5uOzBtWz/FnjwNOFOwQeYnX/gsyFv5rAXNscLN+kF17ut7Ee1hD3 wSsUedf8E4cFGTpgJI4GwzokzKofkK5nuK8pjmjgEg6yEeuVHPp81tOYQdS+YbZt Bc08OkcI7/yw16ZLTkapGBs6STRjAWYLl+7raoHqmyarCRcukSydjeZuD6x3hG8N iOZCUjZeR+FBItXY96ZyFFxdrBkXSOVDvThTBl6hjCtEK5PZUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOtI6XyQYIuPFKjD4kxPgC1NoiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTk0NThmN2EtZTljYS0z ZTc0LTg5MmUtM2UwNzExNjdiZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBVCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFtMfVDlQrVsdagIkJCQybzhraY9k1o9EDq/R/andH3Q3aKn/6fpUQu y+X1SVC4xtOKXyayyzulHUsIuA37lRV9OotFB6kxpLbBNltKaa5Ui2CtAwPu1mkL iAhDhRDBD/VqXrmoUIVhI+shLwpfv2XZZbJpdrDN+ryCBKjdx9wM5QsYQhv9J5Jz Lw3bc1yEfGfXQFRawebEe6cLsu1s20UxaI7jsCWSyMqO+DKaakVMKiM1wuTLsJ6I 1R/MWtEWQh8P9095/L7tkUvaRlk7RIWEKVb95Vjj7SSGWHZle7rju+jaaQEHoWQJ bvqjb3DVldQ7TiDjLDl4I1Vn+NmcN6g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:15 2025 by rpki-client