$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c18b732-22d7-3432-8bf0-1e9d4566bf40.roa File: 1c18b732-22d7-3432-8bf0-1e9d4566bf40.roa (raw, json) Hash identifier: CIxgUXzdYJ5MrYTBepVDf/WIDotVthrZ1dM8TMeO7fs= Subject key identifier: 36:B1:8F:B0:BB:66:64:30:AF:E1:AF:81:9B:D0:50:B9:B8:68:61:F9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581E792ABDA5E7737F9B240 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c18b732-22d7-3432-8bf0-1e9d4566bf40.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.20.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:e7:92:ab:da:5e:77:37:f9:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=af9ee55e-1e81-49d2-872a-6cf7365764cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:72:95:4e:36:a5:8f:03:02:99:5d:69:bb:31: b3:d4:75:d9:e4:c9:39:40:49:f1:24:ed:fd:8b:71: 6d:d2:4f:60:23:f1:5f:94:e5:d5:20:f3:24:e8:b2: 03:a4:47:8d:6f:2e:8f:1d:2d:63:e0:05:d0:05:b7: e7:20:c0:8c:be:50:7f:97:87:2d:6f:ae:29:79:20: a2:4b:75:3d:6b:ce:7e:2d:d4:06:c0:dd:00:f7:ba: 3b:34:ef:77:c5:de:e4:e2:53:07:46:f0:40:ae:46: 70:ac:3f:2a:5d:07:19:aa:83:66:40:4b:df:d3:34: 77:b5:f9:66:66:92:6e:f4:44:37:50:2e:43:82:fd: 33:bc:fe:4e:36:1d:fd:f5:0b:4d:42:8f:c7:c9:e4: e4:a5:8b:9a:8e:87:e8:c5:27:40:c3:2b:00:28:5d: a7:ea:8b:36:fe:dd:70:e0:94:a5:3f:3d:18:9a:b8: d6:40:ac:43:4d:14:58:ab:8a:ce:d1:99:dd:68:3c: 66:2b:07:ee:71:16:c6:e9:ba:e7:c7:46:98:a3:ad: ae:7b:b7:d0:20:2f:b9:da:de:67:8b:58:e7:47:25: bd:98:4f:47:3d:c4:8c:ae:52:3d:ab:bb:1f:52:71: 8b:af:7c:aa:a7:49:06:35:eb:ab:08:0e:6b:1e:93: 7f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B1:8F:B0:BB:66:64:30:AF:E1:AF:81:9B:D0:50:B9:B8:68:61:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c18b732-22d7-3432-8bf0-1e9d4566bf40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4a:97:69:05:a1:d4:33:1c:a2:e5:98:02:c6:21:ce:f1:a1: 40:fd:79:6d:16:1b:cc:4d:b4:30:70:1b:b3:54:f0:da:5e:7a: 73:c3:52:92:f3:86:f3:78:2e:ea:dd:b6:83:f7:37:32:b3:3f: 64:5a:04:0e:8a:02:88:5e:28:da:2b:5c:d3:ad:52:52:1b:78: 58:4b:76:6b:4e:1b:bf:3b:31:70:0b:7c:ae:1d:66:4a:95:03: b0:0a:ab:8e:4d:8f:f4:32:97:90:d3:fe:54:42:f6:b2:05:b9: fe:c9:1b:ca:94:71:9c:e8:2f:ec:d0:49:30:7d:cc:0e:98:ad: 41:23:d4:ec:b4:a0:da:43:98:99:12:d1:cf:4c:1b:28:7b:7f: 8b:b5:cc:a6:3c:82:20:f7:dd:e3:c2:54:3a:1d:5e:60:03:cf: 48:d3:82:9c:10:91:07:66:86:95:b3:50:15:6c:bc:66:5f:ef: 5f:8e:33:0c:95:c3:83:6f:46:a4:28:d5:ec:be:80:9c:40:e3: 32:9b:65:58:62:e5:e5:4a:e2:6e:c1:23:df:8f:32:26:79:f9: 4c:fa:84:de:11:2e:cc:f9:3c:30:27:98:79:f2:ba:4c:91:85: 57:76:a6:9a:9a:c6:f9:71:9d:94:f0:0d:7a:fa:fc:94:8b:34: 94:a6:35:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgeeSq9pedzf5skAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YWY5ZWU1NWUtMWU4MS00OWQyLTg3MmEtNmNmNzM2NTc2NGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHKVTjaljwMCmV1puzGz1HXZ5Mk5QEnxJO39 i3Ft0k9gI/FflOXVIPMk6LIDpEeNby6PHS1j4AXQBbfnIMCMvlB/l4ctb64peSCi S3U9a85+LdQGwN0A97o7NO93xd7k4lMHRvBArkZwrD8qXQcZqoNmQEvf0zR3tflm ZpJu9EQ3UC5Dgv0zvP5ONh399QtNQo/HyeTkpYuajofoxSdAwysAKF2n6os2/t1w 4JSlPz0YmrjWQKxDTRRYq4rO0ZndaDxmKwfucRbG6brnx0aYo62ue7fQIC+52t5n i1jnRyW9mE9HPcSMrlI9q7sfUnGLr3yqp0kGNeurCA5rHpN/gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaxj7C7ZmQwr+GvgZvQULm4aGH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWMxOGI3MzItMjJkNy0z NDMyLThiZjAtMWU5ZDQ1NjZiZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVKl2kFodQzHKLlmALGIc7xoUD9eW0WG8xNtDBwG7NU8NpeenPDUpLz hvN4LurdtoP3NzKzP2RaBA6KAoheKNorXNOtUlIbeFhLdmtOG787MXALfK4dZkqV A7AKq45Nj/Qyl5DT/lRC9rIFuf7JG8qUcZzoL+zQSTB9zA6YrUEj1Oy0oNpDmJkS 0c9MGyh7f4u1zKY8giD33ePCVDodXmADz0jTgpwQkQdmhpWzUBVsvGZf71+OMwyV w4NvRqQo1ey+gJxA4zKbZVhi5eVK4m7BI9+PMiZ5+Uz6hN4RLsz5PDAnmHnyukyR hVd2ppqaxvlxnZTwDXr6/JSLNJSmNZc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:53 2025 by rpki-client