$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67a29eb0-1d7f-37ed-a6ca-2886cf4a8a80.roa File: 67a29eb0-1d7f-37ed-a6ca-2886cf4a8a80.roa (raw, json) Hash identifier: R0BwF1Sjxcaoq5owvZGdnAtwfDjY0FZLKJkrYnqIZ1o= Subject key identifier: 8A:63:7C:CD:8D:50:5A:6E:66:88:E0:3D:CC:72:46:E5:FD:F5:D3:90 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58151E811DA3534CCC49400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67a29eb0-1d7f-37ed-a6ca-2886cf4a8a80.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.20.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:51:e8:11:da:35:34:cc:c4:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3fbbb90e-a3bf-4c95-859a-aca7eb5b1606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:94:7e:5f:54:95:bd:b4:c4:7c:21:d7:ce:ba: fd:53:9b:6c:d5:64:59:67:3b:78:78:0f:ca:b5:be: d5:06:a1:41:5c:d8:96:49:98:c2:98:2d:71:ec:95: a8:a3:e7:ff:b9:11:6c:86:a6:8c:89:1c:d8:e7:ef: c7:62:1c:f3:89:6f:5c:5c:c0:2e:6b:42:f8:87:a6: ce:b1:9b:ec:81:a0:32:df:75:e7:b5:5c:96:47:ef: 74:0f:07:cb:cb:f2:1d:9d:2b:3f:55:22:8f:00:7e: a6:49:8a:10:b6:25:56:27:55:30:11:89:49:1b:ef: ab:cc:9b:09:5b:2c:05:e3:bb:93:d0:ec:6a:1b:e7: 6e:be:f9:a8:37:57:d6:2a:10:56:00:f4:2e:29:e6: e3:55:af:be:01:46:88:ed:bd:5a:91:22:ea:dd:18: ac:f9:3d:76:42:9f:16:0b:0f:88:0a:64:ef:09:51: d7:97:2d:17:a9:14:56:43:ae:20:77:32:87:75:c9: bf:43:3c:b6:68:8d:77:ed:38:88:8e:fc:47:ef:ee: 97:1e:45:a8:6c:85:66:b1:87:c3:e7:1e:03:00:c2: f0:0d:3c:39:a8:04:aa:f5:7b:4c:bd:c9:ad:2e:b3: 96:d9:01:3e:d4:cf:51:12:2b:9c:36:77:2f:1a:c6: 00:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:63:7C:CD:8D:50:5A:6E:66:88:E0:3D:CC:72:46:E5:FD:F5:D3:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67a29eb0-1d7f-37ed-a6ca-2886cf4a8a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:96:65:91:4a:ae:be:4d:ab:a0:ba:f9:2b:9b:13:2d:b7:9c: f7:48:7d:60:f3:e2:a9:21:e0:ce:cb:dd:e5:2e:ab:2f:d8:cd: 3b:da:a0:a4:11:d5:56:ad:5c:91:2e:c3:ca:a4:94:4c:c3:79: 22:3a:1e:98:a9:a0:a5:87:33:3c:dc:10:43:da:61:bf:cb:32: d2:ab:37:df:ce:a0:ec:01:c3:94:d6:d0:ed:4b:0c:49:f6:86: e3:ea:0d:1e:37:59:78:db:90:6c:f0:39:f4:71:4f:7d:e0:15: d0:fa:ae:fc:34:68:44:d2:24:7d:00:3d:4d:0f:db:0f:cc:3d: 5a:07:e0:b9:2f:31:12:6a:ca:06:73:6a:ae:d4:f5:2a:9d:05: 48:66:3d:46:99:b7:8c:a4:08:d6:dd:09:b4:ee:b0:a4:b0:3e: 9a:0d:a0:63:d4:73:02:c7:bf:51:e9:2b:77:0c:21:f7:1e:71: ae:5d:8b:15:87:9b:a0:bf:41:f0:56:b3:68:af:ec:2e:39:98: 68:93:03:5e:4a:79:f0:f5:9b:a1:a1:a3:16:ca:58:bf:81:f5: 14:5a:50:ab:f5:4d:8b:cf:bb:06:eb:bc:ac:2b:47:dd:e8:9c: a1:61:f1:93:fb:d8:be:8c:1f:5f:6b:31:e0:1c:70:cf:4e:06: d7:d3:0d:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVHoEdo1NMzElAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2ZiYmI5MGUtYTNiZi00Yzk1LTg1OWEtYWNhN2ViNWIxNjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpR+X1SVvbTEfCHXzrr9U5ts1WRZZzt4eA/K tb7VBqFBXNiWSZjCmC1x7JWoo+f/uRFshqaMiRzY5+/HYhzziW9cXMAua0L4h6bO sZvsgaAy33XntVyWR+90DwfLy/IdnSs/VSKPAH6mSYoQtiVWJ1UwEYlJG++rzJsJ WywF47uT0OxqG+duvvmoN1fWKhBWAPQuKebjVa++AUaI7b1akSLq3Ris+T12Qp8W Cw+ICmTvCVHXly0XqRRWQ64gdzKHdcm/Qzy2aI137TiIjvxH7+6XHkWobIVmsYfD 5x4DAMLwDTw5qASq9XtMvcmtLrOW2QE+1M9REiucNncvGsYAlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpjfM2NUFpuZojgPcxyRuX99dOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjdhMjllYjAtMWQ3Zi0z N2VkLWE2Y2EtMjg4NmNmNGE4YTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBRBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMOWZZFKrr5Nq6C6+SubEy23nPdIfWDz4qkh4M7L3eUuqy/YzTvaoKQR 1VatXJEuw8qklEzDeSI6HpipoKWHMzzcEEPaYb/LMtKrN9/OoOwBw5TW0O1LDEn2 huPqDR43WXjbkGzwOfRxT33gFdD6rvw0aETSJH0APU0P2w/MPVoH4LkvMRJqygZz aq7U9SqdBUhmPUaZt4ykCNbdCbTusKSwPpoNoGPUcwLHv1HpK3cMIfceca5dixWH m6C/QfBWs2iv7C45mGiTA15KefD1m6GhoxbKWL+B9RRaUKv1TYvPuwbrvKwrR93o nKFh8ZP72L6MH19rMeAccM9OBtfTDT8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:39 2025 by rpki-client