$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa File: 4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa (raw, json) Hash identifier: kt8Nu7fNsK5UM7qQuF5Q113tq6JFXAbJrAxI2hzBipk= Subject key identifier: 90:4A:AC:54:BC:08:6C:DB:9D:32:B2:50:75:19:D6:18:E7:C4:77:53 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5815BEBB019E17404375080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.21.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:5b:eb:b0:19:e1:74:04:37:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=6f09ceef-b839-41b4-8148-905d617198d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c2:ac:fe:d0:f1:1e:12:3b:e7:6c:a7:28:20: d9:e7:67:b8:c7:51:21:3a:3e:80:72:aa:6c:2d:83: b9:6b:39:08:4d:28:65:4a:f8:73:0e:fd:34:4f:e4: 71:d3:c1:b7:b5:cd:4b:22:d4:fc:30:68:0c:6c:36: 0d:5f:70:62:4a:ae:c0:c2:83:ef:10:f0:54:78:be: 45:7d:5b:56:e9:a8:62:10:0c:9f:9a:68:6c:a5:62: 84:92:49:98:19:ad:c6:b7:36:53:80:84:18:51:8e: 6f:2b:6b:73:7f:68:02:4b:84:43:4a:e2:bf:1a:81: 19:7f:56:4a:70:4b:0e:1c:77:9b:d1:cf:4c:30:ae: 2e:b2:1e:4a:c8:8f:f3:bb:53:c1:55:dd:1e:69:91: 7a:1d:79:c5:ce:01:a1:8b:46:b1:9e:9e:38:34:91: ba:45:42:ae:da:d9:42:56:11:16:a2:0f:15:ed:0b: 84:c0:db:77:0c:a4:cf:b6:bd:e6:41:5c:fa:a1:9b: ea:a0:30:cf:cc:4c:8e:e1:dc:55:65:5b:0a:bc:df: 3d:53:3b:86:94:6a:8c:06:2e:06:ed:25:b4:a4:45: e0:84:a7:3b:ed:3a:f1:f5:b0:00:15:2c:35:40:da: 03:45:1e:d0:c7:5b:6b:ba:7a:e2:9b:ef:05:c9:3a: c2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4A:AC:54:BC:08:6C:DB:9D:32:B2:50:75:19:D6:18:E7:C4:77:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:51:e6:ce:63:84:64:07:8b:5e:07:ba:f6:7b:0c:59:22:1d: 65:a7:1f:78:ca:75:bf:9a:9f:b2:c3:b3:12:59:a0:a7:3b:7f: 95:b2:3b:a6:6b:17:25:51:74:4b:2f:4e:61:68:8f:ce:87:78: 65:9b:09:bd:1a:ff:71:0e:a6:df:ef:99:77:09:65:e9:55:b1: b8:9f:83:69:16:ce:59:48:ae:e4:c6:57:bf:26:ef:51:b5:71: 90:eb:8a:2c:1b:f3:6e:d2:ec:ea:53:34:e8:ea:d8:cc:6a:07: 05:ed:00:27:04:3b:7f:55:04:1a:52:9a:47:61:29:42:37:bb: 19:fa:74:c2:8f:fd:3e:ee:32:5e:0f:f0:76:51:cf:f5:d6:f7: 51:79:7a:75:33:76:b5:d9:4a:e9:42:69:22:c0:31:5f:0a:81: 46:a5:b8:c8:9d:1b:29:82:1b:43:7a:a2:42:02:d8:bd:30:b1: c3:b0:65:74:27:90:ad:8e:fd:f1:4e:e9:75:4d:65:5e:a5:f3: 48:54:99:95:c0:4d:32:76:a7:f8:29:19:c3:7f:bf:bb:72:40: 97:d1:25:a5:3f:e5:5d:2d:c1:7c:e6:87:59:84:39:df:2b:91: df:22:e8:fd:e5:73:5e:a4:db:f5:35:27:34:38:8f:4e:4e:08: bc:5d:f4:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVvrsBnhdAQ3UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NmYwOWNlZWYtYjgzOS00MWI0LTgxNDgtOTA1ZDYxNzE5OGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsKs/tDxHhI752ynKCDZ52e4x1EhOj6Acqps LYO5azkITShlSvhzDv00T+Rx08G3tc1LItT8MGgMbDYNX3BiSq7AwoPvEPBUeL5F fVtW6ahiEAyfmmhspWKEkkmYGa3GtzZTgIQYUY5vK2tzf2gCS4RDSuK/GoEZf1ZK cEsOHHeb0c9MMK4ush5KyI/zu1PBVd0eaZF6HXnFzgGhi0axnp44NJG6RUKu2tlC VhEWog8V7QuEwNt3DKTPtr3mQVz6oZvqoDDPzEyO4dxVZVsKvN89UzuGlGqMBi4G 7SW0pEXghKc77Trx9bAAFSw1QNoDRR7Qx1trunrim+8FyTrCfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBKrFS8CGzbnTKyUHUZ1hjnxHdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGM1NzEwYTItOWU3YS0z ZGUxLTg3NmEtOGJlNGFhMjhkYjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVR5s5jhGQHi14HuvZ7DFkiHWWnH3jKdb+an7LDsxJZoKc7f5WyO6Zr FyVRdEsvTmFoj86HeGWbCb0a/3EOpt/vmXcJZelVsbifg2kWzllIruTGV78m71G1 cZDriiwb827S7OpTNOjq2MxqBwXtACcEO39VBBpSmkdhKUI3uxn6dMKP/T7uMl4P 8HZRz/XW91F5enUzdrXZSulCaSLAMV8KgUaluMidGymCG0N6okIC2L0wscOwZXQn kK2O/fFO6XVNZV6l80hUmZXATTJ2p/gpGcN/v7tyQJfRJaU/5V0twXzmh1mEOd8r kd8i6P3lc16k2/U1JzQ4j05OCLxd9GA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:23 2025 by rpki-client