$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa File: 475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa (raw, json) Hash identifier: PhLQ4PVMLm5cABzUmoDpThVy8ngYR8ko4vFMqaUCbwI= Subject key identifier: 3D:2A:D5:62:38:A4:87:2F:6A:48:E7:D3:E0:82:3A:8B:46:1D:20:93 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9B4FDFAE0C0CF7234FE8 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.20.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:9b:4f:df:ae:0c:0c:f7:23:4f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3add3a3e-c55f-4e8c-a0c4-190b535c1a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e1:c3:69:4a:55:07:17:e2:b4:0f:4d:f2:79: f7:5a:0c:27:ec:a1:f9:a1:16:d6:d5:fd:c1:34:54: f5:f0:d7:24:9e:b5:f3:d2:e2:2d:ee:94:99:ae:73: d4:22:90:be:7b:cf:17:b0:c5:95:24:b5:b4:35:74: 0c:34:53:31:8d:fc:1e:35:c2:55:5e:4d:ec:66:2d: 81:7a:93:f2:6b:a9:47:05:63:19:17:83:92:02:c0: 9c:8d:6a:77:13:36:db:de:86:47:40:90:0f:68:2c: 02:c9:37:7b:45:56:06:f8:cb:8d:43:5a:db:39:07: b2:6d:48:7d:be:8e:52:7d:0d:1d:21:33:ea:1a:d2: 62:c0:2d:4a:d1:2b:f2:48:ce:eb:ef:20:c8:68:fc: d6:af:fa:3c:f9:dd:2a:09:a2:45:bb:c2:26:1f:e2: d5:24:4a:5a:72:00:f3:6a:6a:24:7d:b0:d8:fa:b3: 1c:44:85:c9:d1:e7:32:8d:66:fb:b6:fd:fd:40:51: ec:f0:2e:2d:3e:6d:03:fa:12:73:7f:26:02:ec:73: 5f:91:bc:7b:0a:aa:bf:19:d5:81:63:5f:00:32:81: 23:cd:f1:3f:69:e8:d0:87:34:35:2b:61:4a:d9:b1: 5c:42:8d:6c:74:d2:67:4d:5b:ad:8b:8c:f2:bd:e1: b6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2A:D5:62:38:A4:87:2F:6A:48:E7:D3:E0:82:3A:8B:46:1D:20:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:42:79:ed:96:c9:52:59:fe:f8:97:11:be:3a:ba:c4:f4:10: 8d:c8:9e:1e:32:4a:03:a7:32:a5:7a:f3:be:fb:72:9c:c5:d8: 48:0a:c1:6b:8b:3b:7f:eb:21:4f:93:ad:0f:d4:48:22:51:ca: c7:16:00:25:3e:b7:51:b3:a9:e9:fa:fc:19:56:f8:70:eb:e0: 28:5f:b4:21:6a:5e:f3:2b:4e:39:a3:5b:c4:5e:78:90:23:f6: bf:f3:00:c0:b2:34:99:63:a3:9a:e1:48:81:be:84:a4:ae:25: c9:9e:be:94:bd:1c:00:14:12:ea:ec:03:90:c9:1c:43:52:31: 3f:02:27:03:d1:97:d1:a4:2c:c5:a1:cb:5a:a0:16:fe:e6:4f: f6:ee:52:fa:92:cc:cf:0d:37:11:08:c6:ed:f5:d1:a3:f9:9a: 60:10:a0:eb:5c:cc:17:5a:7a:30:84:bf:b5:b2:58:85:c7:13: 6d:59:ba:58:1b:62:93:c5:98:15:a6:e1:55:2f:7b:25:b7:7e: f3:b2:f0:1c:49:ed:41:4b:eb:60:b3:7e:9a:0e:ce:43:41:b9: 65:5d:f5:a0:27:a3:e4:68:fe:c1:36:26:69:c9:c5:a6:a5:66: ca:5f:45:08:95:67:80:74:3b:22:56:62:d7:2e:f7:59:0c:62: b3:07:e6:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuptP364MDPcjT+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2FkZDNhM2UtYzU1Zi00ZThjLWEwYzQtMTkwYjUzNWMxYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuHDaUpVBxfitA9N8nn3Wgwn7KH5oRbW1f3B NFT18NcknrXz0uIt7pSZrnPUIpC+e88XsMWVJLW0NXQMNFMxjfweNcJVXk3sZi2B epPya6lHBWMZF4OSAsCcjWp3Ezbb3oZHQJAPaCwCyTd7RVYG+MuNQ1rbOQeybUh9 vo5SfQ0dITPqGtJiwC1K0SvySM7r7yDIaPzWr/o8+d0qCaJFu8ImH+LVJEpacgDz amokfbDY+rMcRIXJ0ecyjWb7tv39QFHs8C4tPm0D+hJzfyYC7HNfkbx7Cqq/GdWB Y18AMoEjzfE/aejQhzQ1K2FK2bFcQo1sdNJnTVuti4zyveG2lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0q1WI4pIcvakjn0+CCOotGHSCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDc1YzE3M2MtNmEzMC0z NGQ1LWJiYjQtOTUwZjdmZmU4ZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1Cee2WyVJZ/viXEb46usT0EI3Inh4ySgOnMqV68777cpzF2EgKwWuL O3/rIU+TrQ/USCJRyscWACU+t1Gzqen6/BlW+HDr4ChftCFqXvMrTjmjW8ReeJAj 9r/zAMCyNJljo5rhSIG+hKSuJcmevpS9HAAUEursA5DJHENSMT8CJwPRl9GkLMWh y1qgFv7mT/buUvqSzM8NNxEIxu310aP5mmAQoOtczBdaejCEv7WyWIXHE21Zulgb YpPFmBWm4VUveyW3fvOy8BxJ7UFL62CzfpoOzkNBuWVd9aAno+Ro/sE2JmnJxaal ZspfRQiVZ4B0OyJWYtcu91kMYrMH5kQ= -----END CERTIFICATE-----Generated at Sat Jun 7 11:52:17 2025 by rpki-client