$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4fc07ac7-cd9c-3eeb-a1a9-e2121ca56e34.roa File: 4fc07ac7-cd9c-3eeb-a1a9-e2121ca56e34.roa (raw, json) Hash identifier: zKXMwHF8F5+WLQUL+TrUUyUe8seKaJ0+QPRtrMHzhOw= Subject key identifier: B4:35:81:7A:07:FE:AE:81:B5:AD:29:BE:6A:70:43:37:CB:8A:12:98 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581E721E7F43706E85562F0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4fc07ac7-cd9c-3eeb-a1a9-e2121ca56e34.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.20.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:e7:21:e7:f4:37:06:e8:55:62:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=96404575-9ad8-4cc2-ab7c-78cf92c59e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:91:17:27:73:c1:cb:7b:74:4b:ed:ae:15:5b: 77:05:e5:b5:99:b5:9b:f4:91:82:90:d3:cb:d0:4b: 4f:3c:42:f1:03:af:7d:26:27:ed:38:4f:0c:c8:53: 79:4a:69:19:eb:b0:14:e5:30:39:2e:b9:25:54:4a: 79:fe:e1:2a:f0:00:59:31:8d:54:2b:07:ea:86:20: c3:06:01:89:df:cd:78:85:ce:88:0c:6d:9b:32:21: 65:16:58:a7:7f:25:d1:04:e9:97:5c:6c:2d:e6:da: 1c:87:d4:69:1a:6f:65:26:39:ae:e1:78:75:a9:47: 77:fd:03:4d:5c:96:88:8a:7f:f9:f6:e6:50:15:4b: 68:67:13:48:fc:36:df:db:d9:0c:ae:62:c4:ae:e8: 86:45:f3:3d:38:da:26:57:3a:30:43:8b:10:0e:45: 36:4f:fb:c3:64:86:79:79:d6:1b:0e:0c:43:bd:d0: 91:2c:9f:6f:57:09:ff:ee:6a:9b:85:66:b0:f7:81: 76:73:fe:de:d5:98:5e:ad:90:53:5f:2e:66:21:0e: 3e:b1:6d:2c:30:a7:0a:7a:f1:ed:16:e7:c9:48:46: b5:da:d0:e9:d5:c3:e8:3c:1f:7b:25:39:fb:ba:17: 5e:e9:92:b2:65:61:99:b9:1d:a6:72:5b:32:d0:54: 01:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:35:81:7A:07:FE:AE:81:B5:AD:29:BE:6A:70:43:37:CB:8A:12:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4fc07ac7-cd9c-3eeb-a1a9-e2121ca56e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:ac:0c:19:0d:c0:52:3b:70:fe:87:f8:72:09:cc:59:49:84: c4:31:58:18:40:2b:20:b6:29:36:5e:e7:b6:bd:45:2f:b0:99: 6b:a1:98:f8:96:44:17:fc:fe:b3:c1:2a:e0:a0:6b:35:02:f1: 31:c9:78:35:18:91:79:b5:ec:54:af:da:03:f7:cc:19:c4:e3: 9d:c2:9a:86:2b:05:29:e9:20:9e:63:ac:19:93:37:e3:a7:b4: ef:78:3a:49:71:d8:f2:7c:02:2b:e4:b3:42:1f:91:2a:1d:32: c3:a2:95:1a:54:10:04:a9:cb:69:ef:31:1f:72:f0:6a:5e:c8: 02:8e:9b:8e:97:f7:82:51:12:ec:03:7a:19:93:49:79:3c:97: c4:8e:3d:1e:2c:8d:41:8c:61:d8:ff:dd:9a:00:74:23:81:19: 58:e2:01:18:2b:74:1d:fb:a3:ef:91:e6:4e:86:aa:cc:62:15: 73:f7:82:44:4c:a2:1f:6c:2d:8b:a7:01:0b:6b:ac:07:ba:e7: 81:a5:ca:fa:f4:a7:b8:ee:d8:4f:9d:58:9f:67:1a:6d:36:f6: 9f:82:ba:99:09:a2:43:fb:b4:53:45:1e:1c:84:31:e9:b8:9e: d8:8a:58:15:a9:ef:6f:ac:4f:aa:8b:dc:00:bd:28:3a:57:ff: 37:35:4d:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgech5/Q3BuhVYvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTY0MDQ1NzUtOWFkOC00Y2MyLWFiN2MtNzhjZjkyYzU5ZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpEXJ3PBy3t0S+2uFVt3BeW1mbWb9JGCkNPL 0EtPPELxA699JiftOE8MyFN5SmkZ67AU5TA5LrklVEp5/uEq8ABZMY1UKwfqhiDD BgGJ3814hc6IDG2bMiFlFlinfyXRBOmXXGwt5toch9RpGm9lJjmu4Xh1qUd3/QNN XJaIin/59uZQFUtoZxNI/Dbf29kMrmLEruiGRfM9ONomVzowQ4sQDkU2T/vDZIZ5 edYbDgxDvdCRLJ9vVwn/7mqbhWaw94F2c/7e1ZherZBTXy5mIQ4+sW0sMKcKevHt FufJSEa12tDp1cPoPB97JTn7uhde6ZKyZWGZuR2mclsy0FQBqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQ1gXoH/q6Bta0pvmpwQzfLihKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGZjMDdhYzctY2Q5Yy0z ZWViLWExYTktZTIxMjFjYTU2ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKsDBkNwFI7cP6H+HIJzFlJhMQxWBhAKyC2KTZe57a9RS+wmWuhmPiW RBf8/rPBKuCgazUC8THJeDUYkXm17FSv2gP3zBnE453CmoYrBSnpIJ5jrBmTN+On tO94Oklx2PJ8Aivks0IfkSodMsOilRpUEASpy2nvMR9y8GpeyAKOm46X94JREuwD ehmTSXk8l8SOPR4sjUGMYdj/3ZoAdCOBGVjiARgrdB37o++R5k6GqsxiFXP3gkRM oh9sLYunAQtrrAe654Glyvr0p7ju2E+dWJ9nGm029p+CupkJokP7tFNFHhyEMem4 ntiKWBWp72+sT6qL3AC9KDpX/zc1TZI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:48 2025 by rpki-client