$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3adf7e50-b4cc-33e7-8d05-95666a9efe13.roa File: 3adf7e50-b4cc-33e7-8d05-95666a9efe13.roa (raw, json) Hash identifier: 08G70eu16V3ciPrWvwVPE/OxHZatHnQqd7XY9yaeiWY= Subject key identifier: 6A:17:24:5D:BE:3E:20:A0:C2:71:FC:A0:84:F3:A1:82:B9:76:C0:47 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581590F48F8017A97962080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3adf7e50-b4cc-33e7-8d05-95666a9efe13.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.21.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:59:0f:48:f8:01:7a:97:96:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=0c02fd01-95a4-40c6-8a32-671beb7c239b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:df:bb:c2:cc:c1:5d:c3:a5:63:01:f6:20:ff: db:6b:5e:1f:1c:dc:96:b7:04:52:1c:60:31:26:79: 59:42:a8:e8:b9:59:ea:58:8f:42:23:99:de:72:5f: 0e:45:1d:dc:c4:86:c6:17:07:6e:9e:c7:cc:47:c7: 4f:6d:39:d5:95:78:f9:2c:05:92:84:5e:89:47:b6: 8e:76:b8:a5:c9:97:23:90:15:d3:8b:eb:ee:3c:3e: fa:bc:35:77:b2:5e:fb:aa:07:7e:85:9b:a0:f1:61: 02:94:e1:2e:e5:8b:1f:30:45:f3:bf:3d:49:86:e6: d6:f3:07:74:2f:b7:3c:26:2b:9b:a0:e1:f3:99:92: f8:fb:0a:2c:ff:07:f2:aa:29:12:4e:77:71:6e:57: 49:66:df:06:e8:2f:77:33:51:c8:3c:9b:a8:e0:59: 05:cc:26:9a:7b:f6:6f:c7:12:15:e1:d0:fa:91:f1: 90:82:0e:1d:73:80:67:94:4b:a1:c2:a0:fd:4b:c4: 8c:85:cd:ad:8b:a5:73:e1:ec:e3:3d:2a:5c:3a:90: db:d2:f3:07:48:70:9d:e6:b9:55:9a:ce:e2:c2:95: 88:b3:75:ec:6b:d7:bb:83:82:d9:6f:22:c7:9c:1f: ef:9e:7a:4e:4f:65:47:fd:5e:22:e6:24:e0:bd:ff: 1e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:17:24:5D:BE:3E:20:A0:C2:71:FC:A0:84:F3:A1:82:B9:76:C0:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3adf7e50-b4cc-33e7-8d05-95666a9efe13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f8:f5:8f:2d:c8:8e:c6:95:bc:a6:85:b3:d3:24:b2:49:f4: 47:08:b8:9c:ea:76:f4:34:8d:d0:97:db:7a:55:fb:b0:6e:2c: 83:a3:2d:6f:88:3d:32:9b:52:d1:0a:87:56:77:47:cc:b3:e6: 97:b7:84:41:09:34:5b:6a:11:ed:30:ff:30:38:40:9e:c0:0e: fc:79:b8:7a:a6:8c:69:69:01:8c:2a:e8:75:65:1e:83:ed:cc: e1:9e:3c:0f:a9:04:f5:3a:67:94:9e:56:d0:b7:07:6d:73:11: a2:b5:30:ee:72:af:41:16:4e:49:c5:3f:bd:eb:ed:64:9d:27: 5d:6a:49:1e:29:75:f0:a8:8f:7f:26:7b:a9:14:24:65:27:4d: 34:39:96:96:cb:2e:24:00:54:9b:d5:df:39:5b:0a:d9:24:ea: 84:86:84:1e:6e:e4:12:a9:82:49:e3:03:a2:44:13:c6:4a:4e: b9:c7:da:ca:6e:4f:4b:15:3c:db:18:c5:f0:89:c4:8a:d0:75: c1:2e:bd:90:76:32:32:d0:f6:7b:e1:58:25:f9:8a:7c:8e:4f: ae:60:c0:23:ed:71:63:72:af:fa:b7:19:98:a8:bb:e9:2f:e3: 02:37:bf:2b:33:53:32:62:61:d8:be:cf:e3:db:c5:41:40:92: c1:cf:66:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVkPSPgBepeWIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MGMwMmZkMDEtOTVhNC00MGM2LThhMzItNjcxYmViN2MyMzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9+7wszBXcOlYwH2IP/ba14fHNyWtwRSHGAx JnlZQqjouVnqWI9CI5necl8ORR3cxIbGFwdunsfMR8dPbTnVlXj5LAWShF6JR7aO drilyZcjkBXTi+vuPD76vDV3sl77qgd+hZug8WEClOEu5YsfMEXzvz1JhubW8wd0 L7c8JiuboOHzmZL4+wos/wfyqikSTndxbldJZt8G6C93M1HIPJuo4FkFzCaae/Zv xxIV4dD6kfGQgg4dc4BnlEuhwqD9S8SMhc2ti6Vz4ezjPSpcOpDb0vMHSHCd5rlV ms7iwpWIs3Xsa9e7g4LZbyLHnB/vnnpOT2VH/V4i5iTgvf8eQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoXJF2+PiCgwnH8oITzoYK5dsBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2FkZjdlNTAtYjRjYy0z M2U3LThkMDUtOTU2NjZhOWVmZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBV1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH749Y8tyI7GlbymhbPTJLJJ9EcIuJzqdvQ0jdCX23pV+7BuLIOjLW+I PTKbUtEKh1Z3R8yz5pe3hEEJNFtqEe0w/zA4QJ7ADvx5uHqmjGlpAYwq6HVlHoPt zOGePA+pBPU6Z5SeVtC3B21zEaK1MO5yr0EWTknFP73r7WSdJ11qSR4pdfCoj38m e6kUJGUnTTQ5lpbLLiQAVJvV3zlbCtkk6oSGhB5u5BKpgknjA6JEE8ZKTrnH2spu T0sVPNsYxfCJxIrQdcEuvZB2MjLQ9nvhWCX5inyOT65gwCPtcWNyr/q3GZiou+kv 4wI3vyszUzJiYdi+z+PbxUFAksHPZl0= -----END CERTIFICATE-----Generated at Sat Apr 12 00:03:07 2025 by rpki-client