$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c18b732-22d7-3432-8bf0-1e9d4566bf40.roa File: 1c18b732-22d7-3432-8bf0-1e9d4566bf40.roa (raw, json) Hash identifier: pLm2+g/BXsWh7CDHOwJ5FP9pIcfz5Io9+BAItkLSlLs= Subject key identifier: 87:13:E1:3B:94:C0:C5:A6:A6:44:D0:D3:2A:86:A9:D6:AA:37:44:53 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB44647D60726D8A0CD680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c18b732-22d7-3432-8bf0-1e9d4566bf40.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.20.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:44:64:7d:60:72:6d:8a:0c:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7b0ea6b9-a505-4999-8460-dcb487abcdd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:58:50:9d:28:20:72:e6:71:e0:cc:a3:da:56: 27:e5:e1:f0:a1:af:f1:84:ae:17:09:d2:73:f0:85: 61:ce:af:63:8c:08:95:4f:45:22:cd:54:a6:3a:6b: 95:da:66:05:1c:0a:92:4d:f1:d2:d7:1b:79:23:37: eb:e4:2b:77:1b:a1:91:c2:c5:08:06:66:e1:ae:22: 52:30:90:9a:a2:6e:af:82:ee:c8:a4:bb:59:5e:6f: 91:bb:47:ca:55:33:bf:a9:5c:4a:05:9a:52:be:32: c0:a3:9f:8a:2e:b1:00:f1:3b:87:be:eb:0b:28:43: 05:d3:52:48:cb:13:4c:cd:fe:cc:a8:e0:0a:f4:f1: d4:db:01:5e:08:94:75:3d:52:be:0f:60:cb:2b:44: 88:5e:70:34:75:b3:05:39:b5:8a:d3:3c:3e:b2:18: d5:e3:d0:8c:26:26:00:c8:cc:1c:b7:3b:46:87:d1: c8:a3:4f:ed:06:00:dd:9b:fc:20:59:fb:f5:1c:0b: b9:bf:a5:33:06:73:10:5e:e8:40:53:cb:ee:bd:f3: f5:69:ac:c0:b9:e1:7c:21:d5:53:0e:f2:7c:b6:b3: 51:06:c0:95:38:14:31:d6:ee:e8:91:a8:0b:2d:41: 2f:ef:ad:7f:de:67:20:38:ed:74:c1:b5:a6:77:77: a8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:13:E1:3B:94:C0:C5:A6:A6:44:D0:D3:2A:86:A9:D6:AA:37:44:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c18b732-22d7-3432-8bf0-1e9d4566bf40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:29:2b:aa:9d:26:0d:67:a0:bf:5d:89:c3:9d:a8:1b:56:e1: db:40:ae:6a:d0:d1:b4:64:69:7b:66:f3:7e:e3:70:80:8b:a0: e5:30:d2:a7:9f:b0:da:43:41:1f:53:85:e4:27:2b:50:94:f5: c2:3a:3a:6b:02:71:03:c6:1c:43:22:d8:38:f5:46:f5:e9:e0: ec:bb:44:37:84:af:47:45:15:66:91:5d:b0:3b:d7:fe:8b:fd: b5:cd:1c:67:02:15:e8:46:cb:ec:9a:a2:0b:8f:e8:3c:27:a8: f8:50:01:3a:83:5d:c8:39:ba:6e:61:51:a6:e5:07:8a:00:ea: 89:07:0f:2c:3c:b3:08:49:57:5d:25:b7:08:47:1e:2c:bc:6b: 0c:dd:4a:6c:47:de:48:3a:e9:87:a4:8a:0d:61:f0:42:17:2a: 4c:80:4d:7a:ab:ac:95:e7:a3:82:53:1d:05:aa:74:2a:c3:ed: b6:73:39:80:17:49:6a:83:7c:b5:f4:af:e0:ad:60:22:07:dd: e0:fb:1b:5a:d6:5c:c2:df:0d:2b:a8:41:bc:c0:41:e9:fb:6b: 22:bc:c1:ab:01:ed:1b:d2:50:f0:90:7f:0b:17:3e:59:58:3b: 0e:cb:a5:de:d4:14:c1:73:cd:cc:79:28:8c:32:b3:ea:8e:ca: b8:c3:63:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku0RkfWBybYoM1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2IwZWE2YjktYTUwNS00OTk5LTg0NjAtZGNiNDg3YWJjZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVhQnSggcuZx4Myj2lYn5eHwoa/xhK4XCdJz 8IVhzq9jjAiVT0UizVSmOmuV2mYFHAqSTfHS1xt5Izfr5Ct3G6GRwsUIBmbhriJS MJCaom6vgu7IpLtZXm+Ru0fKVTO/qVxKBZpSvjLAo5+KLrEA8TuHvusLKEMF01JI yxNMzf7MqOAK9PHU2wFeCJR1PVK+D2DLK0SIXnA0dbMFObWK0zw+shjV49CMJiYA yMwctztGh9HIo0/tBgDdm/wgWfv1HAu5v6UzBnMQXuhAU8vuvfP1aazAueF8IdVT DvJ8trNRBsCVOBQx1u7okagLLUEv761/3mcgOO10wbWmd3eocwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcT4TuUwMWmpkTQ0yqGqdaqN0RTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWMxOGI3MzItMjJkNy0z NDMyLThiZjAtMWU5ZDQ1NjZiZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADopK6qdJg1noL9dicOdqBtW4dtArmrQ0bRkaXtm837jcICLoOUw0qef sNpDQR9TheQnK1CU9cI6OmsCcQPGHEMi2Dj1RvXp4Oy7RDeEr0dFFWaRXbA71/6L /bXNHGcCFehGy+yaoguP6DwnqPhQATqDXcg5um5hUablB4oA6okHDyw8swhJV10l twhHHiy8awzdSmxH3kg66Yekig1h8EIXKkyATXqrrJXno4JTHQWqdCrD7bZzOYAX SWqDfLX0r+CtYCIH3eD7G1rWXMLfDSuoQbzAQen7ayK8wasB7RvSUPCQfwsXPllY Ow7Lpd7UFMFzzcx5KIwys+qOyrjDY+8= -----END CERTIFICATE-----Generated at Sat Jun 7 21:49:08 2025 by rpki-client