$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4dce652f-b0ad-38cf-90d7-fb45a377ff5e.roa File: 4dce652f-b0ad-38cf-90d7-fb45a377ff5e.roa (raw, json) Hash identifier: 9jMlMfbzSvN0GYwAA/66b/G/MSAk0ttg/ntzDD9Zphw= Subject key identifier: 8A:AD:DF:45:1F:BD:FC:08:8A:96:6E:60:BF:E6:B3:D4:F6:C9:CD:EB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581E41F96AE14B35C73E920 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4dce652f-b0ad-38cf-90d7-fb45a377ff5e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.20.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:e4:1f:96:ae:14:b3:5c:73:e9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=b70faac3-ab71-405c-be5a-a468ebca1fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7d:6c:ef:f9:3f:b6:8d:fb:d2:6c:a7:3c:7e: 8b:81:9d:e6:b6:c8:55:2e:bd:e2:07:3a:61:f0:5c: 5e:e8:77:4e:f3:77:96:2b:a8:68:83:0d:7c:f3:ec: bb:cd:14:a6:c9:84:f8:74:0f:f8:9c:3a:b0:e5:66: f0:0e:d4:a1:7d:03:0c:b9:12:f2:78:6f:73:41:60: 9d:27:1a:b0:e0:a4:7a:a6:8f:0a:49:96:78:85:31: 68:f5:0d:a1:c8:6f:f6:5d:f9:a5:14:be:de:e5:27: a2:4b:5e:55:a6:41:9d:6e:73:6c:20:30:dc:13:6e: 68:2d:de:b2:ad:f6:cf:5d:92:0e:b6:06:c3:a1:97: 90:f4:51:6c:a5:7d:fe:d0:61:64:65:b0:71:47:1d: 5d:08:dd:ab:fc:ce:9b:a0:2f:43:ee:a9:9d:d9:7e: 3a:e9:91:95:19:b8:24:7d:84:ab:be:a4:85:31:c8: b4:0e:66:89:2c:b2:e9:7e:58:7c:6c:17:98:e8:2b: 83:06:c1:f2:3a:20:44:13:65:7a:44:9f:7b:b3:05: e2:03:c1:31:dd:ed:b9:6c:8e:98:a1:fd:7c:4e:1e: 6f:26:4a:66:f8:23:4e:92:71:ff:33:fe:77:a6:01: 1f:59:21:a4:37:5a:93:1e:41:e4:38:ca:17:58:65: 55:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AD:DF:45:1F:BD:FC:08:8A:96:6E:60:BF:E6:B3:D4:F6:C9:CD:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4dce652f-b0ad-38cf-90d7-fb45a377ff5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b7:8e:ff:73:e0:82:9c:8f:17:06:dd:fc:e9:fd:a4:3b:8f: d5:26:6f:67:22:3c:0c:0f:aa:f1:8c:4e:6b:5f:e0:b4:6f:50: fe:c1:0f:e5:56:57:94:44:63:94:1f:6b:1e:5e:ec:a0:d5:2b: 89:db:cf:8b:32:4c:c1:e0:ef:36:81:ad:75:a2:1b:74:26:13: c3:2c:ac:92:16:2a:db:84:4d:b5:fc:7f:f1:00:95:6d:b7:07: 94:73:f5:29:ad:09:64:30:dc:f5:e9:65:68:05:49:b2:23:53: d1:25:7e:74:a0:8c:00:90:f7:5e:98:8c:9b:f6:95:b8:89:42: d8:56:5a:4e:4a:57:95:bb:58:3f:07:f4:37:14:af:b8:59:63: b1:5d:fc:1c:94:82:02:2a:fd:2b:93:1e:5a:af:09:4e:e2:25: 02:f5:d0:6b:58:5b:cf:ed:f8:38:ad:3c:41:2d:0f:0a:f0:01: 38:ef:ad:a7:dc:ee:12:00:b5:0e:4c:50:d3:1f:ec:04:f3:fe: 8e:11:5f:a9:a4:59:b7:82:f2:f3:46:70:00:09:35:9b:dc:38: a3:3b:22:a4:27:17:46:ba:27:a2:fb:f5:b5:1f:d6:b4:54:85: 13:d7:78:63:f0:06:48:c5:e5:07:20:df:56:10:e0:c7:18:92: 90:c3:f5:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgeQflq4Us1xz6SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YjcwZmFhYzMtYWI3MS00MDVjLWJlNWEtYTQ2OGViY2ExZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn31s7/k/to370mynPH6LgZ3mtshVLr3iBzph 8Fxe6HdO83eWK6hogw188+y7zRSmyYT4dA/4nDqw5WbwDtShfQMMuRLyeG9zQWCd Jxqw4KR6po8KSZZ4hTFo9Q2hyG/2XfmlFL7e5SeiS15VpkGdbnNsIDDcE25oLd6y rfbPXZIOtgbDoZeQ9FFspX3+0GFkZbBxRx1dCN2r/M6boC9D7qmd2X466ZGVGbgk fYSrvqSFMci0DmaJLLLpflh8bBeY6CuDBsHyOiBEE2V6RJ97swXiA8Ex3e25bI6Y of18Th5vJkpm+CNOknH/M/53pgEfWSGkN1qTHkHkOMoXWGVVUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqt30UfvfwIipZuYL/ms9T2yc3rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGRjZTY1MmYtYjBhZC0z OGNmLTkwZDctZmI0NWEzNzdmZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBRzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC3jv9z4IKcjxcG3fzp/aQ7j9Umb2ciPAwPqvGMTmtf4LRvUP7BD+VW V5REY5Qfax5e7KDVK4nbz4syTMHg7zaBrXWiG3QmE8MsrJIWKtuETbX8f/EAlW23 B5Rz9SmtCWQw3PXpZWgFSbIjU9ElfnSgjACQ916YjJv2lbiJQthWWk5KV5W7WD8H 9DcUr7hZY7Fd/ByUggIq/SuTHlqvCU7iJQL10GtYW8/t+DitPEEtDwrwATjvrafc 7hIAtQ5MUNMf7ATz/o4RX6mkWbeC8vNGcAAJNZvcOKM7IqQnF0a6J6L79bUf1rRU hRPXeGPwBkjF5Qcg31YQ4McYkpDD9V4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:19 2025 by rpki-client