$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6345a660-467f-3a6b-9cdb-e8aa795e474b.roa File: 6345a660-467f-3a6b-9cdb-e8aa795e474b.roa (raw, json) Hash identifier: hnNY+y94NFIOoclHIWUQAoaECy6ZZ6NJNMSweuL9fz8= Subject key identifier: F3:38:45:48:82:A6:DC:76:A0:37:25:5D:4E:0C:B7:E5:43:FE:F8:35 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58153D3389304A011EFAF80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6345a660-467f-3a6b-9cdb-e8aa795e474b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.20.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:53:d3:38:93:04:a0:11:ef:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f9c8ac67-73a9-407d-a212-d19638359eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:65:3f:f2:d5:12:42:2e:4b:6f:c0:26:82:d3: 6c:20:56:08:3c:cb:28:c4:3a:60:8c:d5:96:83:eb: 9e:72:2b:55:0e:c2:65:2f:07:8c:e0:63:1b:cd:be: 13:36:1a:96:8f:37:bd:39:1f:c8:01:f5:4a:0c:90: 4e:4c:08:5d:33:ad:37:df:80:66:65:80:2e:b6:1d: 44:cf:54:5e:17:e1:b3:59:96:02:2f:e2:bd:3e:c8: ce:d9:e6:d5:57:92:5c:4a:f1:09:24:7c:02:58:3f: 5d:4b:8b:2e:f9:b2:4a:2c:a1:89:97:cd:29:9a:db: 42:e0:93:ca:4b:55:75:cb:f9:14:41:cb:5d:63:ae: 95:8e:42:f0:4d:64:e9:d2:52:1e:48:5d:8d:a1:71: c1:58:01:8d:98:ec:57:d4:bc:ae:dd:d5:91:6a:52: 15:0c:ab:c9:7c:24:cb:ab:6c:2d:48:6c:a9:0f:40: d2:57:e1:bf:17:b5:d8:63:83:0f:f4:2b:d0:a6:53: 47:42:b4:b9:ff:42:39:d0:fa:2f:6b:88:cc:ae:34: ff:e3:cb:c1:36:4e:f5:c6:22:d1:28:9e:a3:0f:bd: a8:a3:05:8b:50:90:b4:99:59:a3:47:00:72:ca:76: 32:5d:c8:49:bd:03:d2:90:74:da:fc:34:13:16:b0: dc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:38:45:48:82:A6:DC:76:A0:37:25:5D:4E:0C:B7:E5:43:FE:F8:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6345a660-467f-3a6b-9cdb-e8aa795e474b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:6c:93:69:b8:68:71:09:63:d7:a1:c6:7b:c1:b1:ed:6e:88: ab:4d:d0:4e:3d:11:4b:1f:63:0d:76:0d:90:9c:4d:89:52:a2: da:3e:4f:b1:b4:ca:8a:ed:04:47:3f:27:d8:fe:4a:62:22:e2: d9:3b:06:b9:f5:c2:9b:3c:27:cc:3b:a5:53:79:86:40:07:5a: 62:e9:56:5d:f4:51:33:0d:f4:a5:e6:f8:c5:e3:f6:6f:70:32: 05:25:bf:42:31:ca:e7:11:7e:b8:9d:f9:aa:bd:6a:df:86:99: 51:36:65:39:3e:e5:1c:d3:19:51:6f:ca:87:ca:98:c9:c4:d7: 33:62:92:62:23:43:9e:28:53:26:b4:fa:dd:0f:52:2d:2e:23: f6:44:a3:c9:f7:69:f3:b4:ba:70:9e:d7:1d:8e:1e:6e:81:c4: 33:f3:b2:bd:02:10:a7:e2:8c:87:3a:e6:76:b2:be:04:8a:96: 95:a6:91:ef:58:59:60:5a:c3:25:a7:17:52:8d:2b:a0:3c:00: 0e:9b:50:d1:bd:f7:2e:fb:4a:22:6c:3c:63:a2:a6:92:9f:96: 25:41:fd:61:9c:b6:5e:c1:81:3d:42:90:f2:cc:16:96:8c:6c: 61:83:6d:26:5a:10:e3:32:ee:1a:af:8c:de:c9:8a:a6:77:3c: 82:47:77:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVPTOJMEoBHvr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjljOGFjNjctNzNhOS00MDdkLWEyMTItZDE5NjM4MzU5ZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWU/8tUSQi5Lb8AmgtNsIFYIPMsoxDpgjNWW g+uecitVDsJlLweM4GMbzb4TNhqWjze9OR/IAfVKDJBOTAhdM60334BmZYAuth1E z1ReF+GzWZYCL+K9PsjO2ebVV5JcSvEJJHwCWD9dS4su+bJKLKGJl80pmttC4JPK S1V1y/kUQctdY66VjkLwTWTp0lIeSF2NoXHBWAGNmOxX1Lyu3dWRalIVDKvJfCTL q2wtSGypD0DSV+G/F7XYY4MP9CvQplNHQrS5/0I50Pova4jMrjT/48vBNk71xiLR KJ6jD72oowWLUJC0mVmjRwByynYyXchJvQPSkHTa/DQTFrDcnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPM4RUiCptx2oDclXU4Mt+VD/vg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjM0NWE2NjAtNDY3Zi0z YTZiLTljZGItZThhYTc5NWU0NzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBSjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNsk2m4aHEJY9ehxnvBse1uiKtN0E49EUsfYw12DZCcTYlSoto+T7G0 yortBEc/J9j+SmIi4tk7Brn1wps8J8w7pVN5hkAHWmLpVl30UTMN9KXm+MXj9m9w MgUlv0IxyucRfrid+aq9at+GmVE2ZTk+5RzTGVFvyofKmMnE1zNikmIjQ54oUya0 +t0PUi0uI/ZEo8n3afO0unCe1x2OHm6BxDPzsr0CEKfijIc65nayvgSKlpWmke9Y WWBawyWnF1KNK6A8AA6bUNG99y77SiJsPGOippKfliVB/WGctl7BgT1CkPLMFpaM bGGDbSZaEOMy7hqvjN7JiqZ3PIJHdzE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:48 2025 by rpki-client