$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22c9aa67-d20c-310e-860d-1d2be861471c.roa File: 22c9aa67-d20c-310e-860d-1d2be861471c.roa (raw, json) Hash identifier: BcybiP/EcGD5Y0B6VPWFF3Q3VQFUuuL0vS6oTCfOn50= Subject key identifier: 37:E7:3F:B8:8C:E3:2E:A8:CC:98:DC:39:DA:D6:7F:1C:91:4A:D9:93 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581E4084E3DF330A4D78B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22c9aa67-d20c-310e-860d-1d2be861471c.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.20.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:e4:08:4e:3d:f3:30:a4:d7:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d74bd448-32c7-4119-887d-cf8ea873e7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:80:4b:0f:60:a8:33:57:99:41:fc:9a:1a: 4c:78:56:55:a8:34:2d:b0:c7:9f:c1:a8:a0:d0:80: 6a:7c:f0:dc:0a:db:fd:3f:ec:8a:37:a8:a0:ca:49: 02:1e:eb:f7:8d:9a:4a:98:8e:bb:b2:04:6d:f8:17: 6a:58:f9:07:e9:e6:ff:19:0d:a6:05:b8:07:7b:58: fd:88:69:21:5b:15:70:f6:fa:ad:c4:f6:4e:c3:00: 5f:c3:fe:8e:08:df:b1:fc:51:ea:ee:1b:45:fc:bb: 46:a3:0b:b8:7b:19:56:0b:c9:2b:7d:83:6a:6c:db: 3e:45:32:1f:86:cf:ad:4d:f9:c7:12:c0:88:16:c1: 30:43:98:c7:d2:54:2e:71:40:fe:9b:0b:77:9c:72: 36:92:f6:7c:2b:b9:8b:e9:e6:f2:ea:e1:d5:00:60: 9f:dc:fd:67:cc:d8:a7:c9:52:e8:18:82:01:a5:30: 3b:73:19:7c:1b:d9:24:95:6f:c9:0f:b0:02:90:cb: ad:43:5d:b5:24:9e:7a:16:c2:1f:e6:92:27:3e:83: 3a:f6:56:e8:86:99:b7:c0:eb:03:a0:be:7f:aa:63: 6a:e7:c6:1b:13:82:af:98:bd:1d:10:35:61:06:ae: 63:18:e4:46:2f:8c:36:3f:73:d2:7d:3a:95:af:c2: fb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E7:3F:B8:8C:E3:2E:A8:CC:98:DC:39:DA:D6:7F:1C:91:4A:D9:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22c9aa67-d20c-310e-860d-1d2be861471c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:f8:84:6f:4b:58:c2:51:2d:b9:54:02:46:2b:bf:f4:88:88: 74:15:4f:bf:6f:4d:50:ce:6e:6a:be:bf:f4:a9:7c:29:5b:16: ee:15:3d:28:0c:c4:b2:20:6e:c3:a9:ae:11:be:f5:32:d6:21: fd:3f:98:07:8c:4f:ea:ee:3b:fe:a3:18:bf:1b:af:a6:9b:4f: 97:8e:df:2d:a8:be:ca:cc:60:73:36:9d:b9:9f:a0:27:8c:62: 76:a6:b5:cb:61:dd:7e:38:bb:65:46:0b:bb:8e:e7:e0:af:77: a3:e9:73:45:05:f6:25:ee:30:2a:7c:2e:19:9f:9e:69:8e:99: a6:f5:63:cd:5f:9c:03:3b:81:57:f5:cf:19:12:1e:c9:e3:70: d6:9b:d5:15:5d:ba:a9:18:51:45:46:10:11:d8:2d:78:bc:b6: f8:76:a0:77:e4:6f:fb:74:cd:fc:99:8e:3c:47:7b:3f:1d:e0: 68:14:69:02:68:8a:01:98:d2:ad:59:54:28:dd:30:26:f1:b8: 66:13:17:ab:d9:3e:0e:cf:82:94:9d:32:80:c0:5c:84:37:70: 44:d1:71:6a:3c:4e:fa:ee:03:9a:84:7a:83:1a:0a:d1:24:4a: 74:b7:fd:90:a9:74:26:aa:20:f2:02:f8:6c:0e:4e:46:a2:3e: ca:d5:cf:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgeQITj3zMKTXiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDc0YmQ0NDgtMzJjNy00MTE5LTg4N2QtY2Y4ZWE4NzNlN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx6ASw9gqDNXmUH8mhpMeFZVqDQtsMefwaig 0IBqfPDcCtv9P+yKN6igykkCHuv3jZpKmI67sgRt+BdqWPkH6eb/GQ2mBbgHe1j9 iGkhWxVw9vqtxPZOwwBfw/6OCN+x/FHq7htF/LtGowu4exlWC8krfYNqbNs+RTIf hs+tTfnHEsCIFsEwQ5jH0lQucUD+mwt3nHI2kvZ8K7mL6eby6uHVAGCf3P1nzNin yVLoGIIBpTA7cxl8G9kklW/JD7ACkMutQ121JJ56FsIf5pInPoM69lbohpm3wOsD oL5/qmNq58YbE4KvmL0dEDVhBq5jGORGL4w2P3PSfTqVr8L7RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfnP7iM4y6ozJjcOdrWfxyRStmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjJjOWFhNjctZDIwYy0z MTBlLTg2MGQtMWQyYmU4NjE0NzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBRvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFz4hG9LWMJRLblUAkYrv/SIiHQVT79vTVDObmq+v/SpfClbFu4VPSgM xLIgbsOprhG+9TLWIf0/mAeMT+ruO/6jGL8br6abT5eO3y2ovsrMYHM2nbmfoCeM Ynamtcth3X44u2VGC7uO5+Cvd6Ppc0UF9iXuMCp8LhmfnmmOmab1Y81fnAM7gVf1 zxkSHsnjcNab1RVduqkYUUVGEBHYLXi8tvh2oHfkb/t0zfyZjjxHez8d4GgUaQJo igGY0q1ZVCjdMCbxuGYTF6vZPg7PgpSdMoDAXIQ3cETRcWo8TvruA5qEeoMaCtEk SnS3/ZCpdCaqIPIC+GwOTkaiPsrVz1A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:41 2025 by rpki-client