$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a248259-f3fb-3cbd-9be3-ca56859a9ce0.roa File: 1a248259-f3fb-3cbd-9be3-ca56859a9ce0.roa (raw, json) Hash identifier: CfF0bYOzlINpuZFifC2YMnI5bESlyykjPi781+Zuh/I= Subject key identifier: 57:B1:CF:AE:D3:AC:05:CB:0D:44:F5:D9:EE:F1:BD:43:44:81:05:84 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581E7663F9D139CCF237A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a248259-f3fb-3cbd-9be3-ca56859a9ce0.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.20.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:e7:66:3f:9d:13:9c:cf:23:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=33e2834a-ea85-4a28-b6d5-9a6aadad8bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f1:e1:5f:71:48:04:a6:76:ff:19:d7:b1:05: 93:e6:39:9f:79:ba:d9:4c:f4:55:a5:49:21:65:ec: 5d:f7:50:2b:eb:cb:26:16:c4:f6:68:ba:77:9c:93: cb:98:c2:08:80:15:80:81:cd:92:3b:7a:1a:28:af: eb:1a:b3:0b:3c:12:b8:a2:a8:7e:46:34:d4:23:b1: 7b:81:6a:b7:c5:a2:a2:19:59:de:4d:de:2a:42:26: c3:19:5b:1a:ef:61:98:3d:ae:10:cb:4e:fb:6b:be: d1:1a:16:2a:1c:4b:4d:6c:25:33:bc:98:5e:83:ad: fd:5a:89:c7:8b:6f:c0:6b:c6:8e:eb:af:69:40:b9: 08:fd:fa:0b:96:d2:65:22:60:d2:c9:ab:57:35:e5: 6a:17:ad:74:2b:47:10:05:64:59:9b:ce:49:77:f2: 4d:f9:6f:94:9b:8d:0d:1b:76:31:ce:7e:9f:f0:1c: 69:b7:f8:28:13:a2:d9:64:8d:82:b9:8e:1e:6b:b5: 6f:e5:4c:66:59:2c:8f:ff:d8:35:7f:0d:ba:cc:26: 41:e7:ca:cf:88:44:8d:84:d5:90:7d:86:82:13:0a: de:a1:47:a3:3d:a0:3e:06:ce:20:8f:90:f3:7c:e0: b7:0d:7b:6f:57:f6:12:a3:ea:57:fa:63:63:8b:c3: 89:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B1:CF:AE:D3:AC:05:CB:0D:44:F5:D9:EE:F1:BD:43:44:81:05:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a248259-f3fb-3cbd-9be3-ca56859a9ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:9b:f4:b2:01:59:12:70:ac:a5:b7:5a:43:bd:ac:1f:da:89: d7:2e:7c:ed:2c:42:93:ed:a2:df:a6:e7:d8:dc:14:13:51:fd: 53:bd:89:66:8e:7f:31:73:39:1d:32:85:9e:4f:55:0d:6a:c0: 02:97:c4:84:0c:bb:d2:81:23:1e:be:e7:5f:8d:49:9b:74:34: a0:da:0d:60:12:45:2e:28:a7:26:2b:45:57:44:7d:28:c9:a2: 49:52:6d:b1:1d:19:00:58:6a:eb:8a:b4:7e:82:43:34:0f:38: 09:7b:44:bf:2d:bc:62:e8:7e:64:c3:df:e5:ae:0f:01:35:46: 6c:18:ca:54:1b:60:62:2b:dc:0c:38:d6:03:f8:1d:2c:f5:16: e4:9f:b4:a3:a1:c1:8f:1c:a5:88:be:7f:e6:7c:91:10:97:c8: ee:50:d1:1f:1f:f1:a5:7b:90:fc:a9:38:06:8e:8a:dd:8b:76: 11:0a:e0:52:d9:cf:02:f1:59:11:d9:f2:8f:33:a8:82:08:a7: bc:98:c2:58:29:8e:0f:81:b4:09:8c:d0:35:39:47:b1:61:7b: a0:a4:8e:ee:ed:10:32:13:a4:22:2d:77:71:f9:55:2c:98:73: e8:f7:7b:50:60:7e:31:45:b1:2d:67:da:69:42:7a:c7:d8:77: 29:32:2b:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgedmP50TnM8jegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzNlMjgzNGEtZWE4NS00YTI4LWI2ZDUtOWE2YWFkYWQ4YmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivHhX3FIBKZ2/xnXsQWT5jmfebrZTPRVpUkh Zexd91Ar68smFsT2aLp3nJPLmMIIgBWAgc2SO3oaKK/rGrMLPBK4oqh+RjTUI7F7 gWq3xaKiGVneTd4qQibDGVsa72GYPa4Qy077a77RGhYqHEtNbCUzvJheg639WonH i2/Aa8aO669pQLkI/foLltJlImDSyatXNeVqF610K0cQBWRZm85Jd/JN+W+Um40N G3Yxzn6f8Bxpt/goE6LZZI2CuY4ea7Vv5UxmWSyP/9g1fw26zCZB58rPiESNhNWQ fYaCEwreoUejPaA+Bs4gj5DzfOC3DXtvV/YSo+pX+mNji8OJ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFexz67TrAXLDUT12e7xvUNEgQWEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWEyNDgyNTktZjNmYi0z Y2JkLTliZTMtY2E1Njg1OWE5Y2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCb9LIBWRJwrKW3WkO9rB/aidcufO0sQpPtot+m59jcFBNR/VO9iWaO fzFzOR0yhZ5PVQ1qwAKXxIQMu9KBIx6+51+NSZt0NKDaDWASRS4opyYrRVdEfSjJ oklSbbEdGQBYauuKtH6CQzQPOAl7RL8tvGLofmTD3+WuDwE1RmwYylQbYGIr3Aw4 1gP4HSz1FuSftKOhwY8cpYi+f+Z8kRCXyO5Q0R8f8aV7kPypOAaOit2LdhEK4FLZ zwLxWRHZ8o8zqIIIp7yYwlgpjg+BtAmM0DU5R7Fhe6Ckju7tEDITpCItd3H5VSyY c+j3e1BgfjFFsS1n2mlCesfYdykyK24= -----END CERTIFICATE-----Generated at Wed Apr 16 07:26:17 2025 by rpki-client