$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ed9b9aa-8e91-3a34-b044-27f1f3eecde6.roa File: 2ed9b9aa-8e91-3a34-b044-27f1f3eecde6.roa (raw, json) Hash identifier: Ormm3KPE3bJC8WIEzmSX6escnRSFdJUDxyLxGq6CQCE= Subject key identifier: F9:A0:33:D1:47:98:96:07:C0:B5:A7:63:29:7C:C2:7A:FA:C7:32:E0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58150EFCBC0D9D1BE96CE00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ed9b9aa-8e91-3a34-b044-27f1f3eecde6.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.20.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:50:ef:cb:c0:d9:d1:be:96:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=84122bcc-4e4c-4dfe-bf37-0ae246899e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:a6:6b:b8:bb:5a:65:c6:22:da:8a:8a:d6: 75:c4:9f:5d:bc:63:3d:e8:90:d0:98:cd:b9:ec:2b: e6:5c:68:e9:80:de:75:c9:91:88:eb:d1:a4:dc:9f: a7:80:13:ee:80:15:e7:dd:8c:9f:e0:9e:0a:85:ea: 52:7c:e1:03:21:43:95:cf:67:70:61:9d:2f:a3:36: 0d:ca:c1:d3:7b:a7:44:c5:d4:5d:bf:d1:43:77:8f: 9d:57:9d:07:a3:75:89:ee:47:08:0e:96:ed:24:0b: a3:c1:0b:7b:78:30:3f:5e:92:25:37:fd:f0:1c:fb: 9b:cd:47:aa:c5:43:85:06:95:20:93:87:c2:c3:c2: 17:0c:f6:5e:e6:4a:22:4d:1b:99:fd:ba:7e:7c:5d: df:46:41:2b:1e:72:e0:04:2b:84:47:2d:4f:c2:9b: 0f:2c:3f:4b:79:05:62:2c:a4:74:3c:a6:96:1d:d6: 12:8b:f7:7f:60:11:0e:bb:97:34:f9:1a:dd:ee:7a: 17:f7:7c:4c:f7:a3:a1:b5:aa:81:ac:fe:10:83:2d: 45:85:d9:3a:9f:b9:18:39:58:ef:1d:ab:0f:ea:68: 64:02:cd:e5:92:e5:96:b7:4a:12:39:33:70:05:f0: d9:aa:8d:a2:13:d4:ec:16:42:ba:6d:96:53:90:a8: 57:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A0:33:D1:47:98:96:07:C0:B5:A7:63:29:7C:C2:7A:FA:C7:32:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ed9b9aa-8e91-3a34-b044-27f1f3eecde6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:6b:d6:75:73:c2:ae:ad:45:bc:84:a2:59:71:b8:71:d5:ec: 38:32:ae:94:a0:aa:69:bf:cd:d4:a1:86:64:bc:fa:21:c3:53: eb:28:be:5a:22:ce:07:07:10:66:63:2f:4c:5f:6b:a3:e1:ca: 6b:cc:2c:5d:d3:84:0b:7d:bb:e4:23:66:e7:c2:34:5f:56:06: 88:2b:4a:c1:c0:14:9c:67:4e:bb:fd:93:23:d1:03:c2:de:0f: 3a:70:1e:86:77:c1:bd:18:a7:89:5b:cd:76:11:99:b2:3d:8a: 65:dc:10:ca:10:2c:6a:fa:de:96:bf:72:3d:10:6c:70:de:10: 6c:75:ca:a7:4d:e2:81:a7:21:1c:23:68:5b:a1:ec:3c:76:56: 43:4b:42:94:f3:a9:91:0b:12:95:45:d4:67:77:6d:88:5b:ef: 29:2e:a9:82:8c:77:24:c8:78:0f:a0:d0:55:ae:78:71:e8:4a: fb:ba:0c:e8:1b:f7:c0:b9:c9:d9:b8:25:ac:a6:94:a1:bb:23: f6:79:20:0a:c6:3e:d4:f7:64:ba:2e:3e:dc:3a:45:24:fa:8b: 2a:a4:af:dd:8d:7d:4b:fb:a9:ac:b8:85:92:29:7e:3b:ae:c7: f8:97:6d:eb:4b:38:64:0c:0f:91:e7:b0:20:3f:bf:2d:d4:77: 14:d1:f9:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVDvy8DZ0b6WzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODQxMjJiY2MtNGU0Yy00ZGZlLWJmMzctMGFlMjQ2ODk5ZTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbWma7i7WmXGItqKitZ1xJ9dvGM96JDQmM25 7CvmXGjpgN51yZGI69Gk3J+ngBPugBXn3Yyf4J4KhepSfOEDIUOVz2dwYZ0vozYN ysHTe6dExdRdv9FDd4+dV50Ho3WJ7kcIDpbtJAujwQt7eDA/XpIlN/3wHPubzUeq xUOFBpUgk4fCw8IXDPZe5koiTRuZ/bp+fF3fRkErHnLgBCuERy1PwpsPLD9LeQVi LKR0PKaWHdYSi/d/YBEOu5c0+Rrd7noX93xM96OhtaqBrP4Qgy1Fhdk6n7kYOVjv HasP6mhkAs3lkuWWt0oSOTNwBfDZqo2iE9TsFkK6bZZTkKhXVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmgM9FHmJYHwLWnYyl8wnr6xzLgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmVkOWI5YWEtOGU5MS0z YTM0LWIwNDQtMjdmMWYzZWVjZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZr1nVzwq6tRbyEollxuHHV7DgyrpSgqmm/zdShhmS8+iHDU+sovloi zgcHEGZjL0xfa6PhymvMLF3ThAt9u+QjZufCNF9WBogrSsHAFJxnTrv9kyPRA8Le DzpwHoZ3wb0Yp4lbzXYRmbI9imXcEMoQLGr63pa/cj0QbHDeEGx1yqdN4oGnIRwj aFuh7Dx2VkNLQpTzqZELEpVF1Gd3bYhb7ykuqYKMdyTIeA+g0FWueHHoSvu6DOgb 98C5ydm4JaymlKG7I/Z5IArGPtT3ZLouPtw6RST6iyqkr92NfUv7qay4hZIpfjuu x/iXbetLOGQMD5HnsCA/vy3UdxTR+Y0= -----END CERTIFICATE-----Generated at Sat Apr 12 00:52:41 2025 by rpki-client