$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85c6a687-0218-3be1-a801-fcc7c4cc76a7.roa File: 85c6a687-0218-3be1-a801-fcc7c4cc76a7.roa (raw, json) Hash identifier: WZ5VsNO9RECybyA9mSeSWuMqSQwehQgQHSfG/YzIh5Q= Subject key identifier: 53:9B:10:42:1E:3B:63:EB:3B:6D:BD:7A:94:19:0C:AC:DD:49:EB:84 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58190D415128E6A550FE780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85c6a687-0218-3be1-a801-fcc7c4cc76a7.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 40306 IP address blocks: 184.63.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:90:d4:15:12:8e:6a:55:0f:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e5575869-90a2-41f3-9cf0-c9bffa32ed69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8f:f3:47:45:3b:52:07:1a:eb:3a:30:03:74: f9:a5:7a:e1:3d:db:9b:7b:34:d3:23:a4:d6:21:7f: 8a:d3:48:11:68:f0:18:2b:12:0e:22:7e:07:fe:17: 76:d5:32:85:3d:60:44:66:91:d0:4c:45:5d:9e:f6: 54:6e:c8:e5:03:2d:8d:b0:00:c8:3a:63:4c:06:33: 98:47:57:aa:6c:2b:16:d1:e0:cb:53:f1:07:1e:ca: e9:3e:03:7e:52:7e:5c:ef:79:67:d6:a0:cb:91:fe: e1:d9:d8:f6:78:f4:62:27:26:49:30:8e:4a:4e:6f: e2:0d:ec:5c:7a:6a:e3:81:96:45:f6:16:a0:f2:fb: f8:8c:25:61:f1:0b:39:ca:88:4c:67:a0:48:da:00: f1:4f:ec:cd:04:02:39:6f:7c:39:02:25:35:67:9f: a7:1c:7b:ad:f7:d4:97:3a:d9:d7:78:e4:24:b6:70: 0c:a0:dd:69:d8:9d:b7:a9:4a:bb:98:a5:5d:05:50: 32:14:30:28:ba:a7:a0:78:67:41:85:bc:e5:48:e9: aa:32:2b:e5:c9:f7:09:d2:53:a9:89:28:ad:d2:e7: ed:f9:b7:80:e6:6b:da:ed:9d:01:c2:d8:49:78:22: 3d:95:8e:7d:3a:98:46:33:c7:ce:78:eb:8e:d6:2f: 95:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9B:10:42:1E:3B:63:EB:3B:6D:BD:7A:94:19:0C:AC:DD:49:EB:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85c6a687-0218-3be1-a801-fcc7c4cc76a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.63.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:65:86:ca:cd:67:9c:85:ef:2e:8f:d9:7b:cf:02:43:b2:50: 86:a1:09:68:35:f8:4d:10:4f:bb:db:92:23:a6:e3:88:ba:9c: 91:24:9c:fe:bf:3f:86:bf:bb:e8:46:eb:04:6d:f6:54:80:9e: 9c:1e:f2:54:d4:72:d8:c8:9f:81:96:75:55:1c:97:6e:e5:10: be:f0:54:77:65:d3:0d:50:74:f4:93:46:50:67:6e:32:45:d2: fa:a2:d0:43:1e:ed:d6:52:17:96:fd:6d:42:a1:ab:60:1c:c0: d5:22:33:a1:e8:44:1c:b2:5d:97:6d:2a:7c:5f:c4:ce:fd:b4: de:a9:f9:27:fa:50:5c:d6:53:bd:68:9e:a8:b7:cf:4f:e5:7a: ce:4f:bd:7b:b6:a5:85:eb:09:cd:8a:f3:0c:c5:90:47:95:0e: a0:4b:aa:19:04:e8:6c:c6:b1:3d:51:03:8a:5c:84:8e:b4:42: 42:f2:65:71:9d:5c:b1:23:bd:4e:ae:3c:45:b3:96:6e:f6:50: de:48:bb:26:ad:7f:4b:3b:f2:d3:c6:9d:6f:ff:84:97:4b:a7: d6:1d:ae:79:9f:6f:dc:92:01:1b:44:bd:a8:bd:cc:7e:69:79: 3d:03:07:d9:a9:1e:9d:61:1c:d6:da:6c:77:03:fb:14:56:af: 8a:1e:22:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZDUFRKOalUP54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTU1NzU4NjktOTBhMi00MWYzLTljZjAtYzliZmZhMzJlZDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y/zR0U7Ugca6zowA3T5pXrhPdubezTTI6TW IX+K00gRaPAYKxIOIn4H/hd21TKFPWBEZpHQTEVdnvZUbsjlAy2NsADIOmNMBjOY R1eqbCsW0eDLU/EHHsrpPgN+Un5c73ln1qDLkf7h2dj2ePRiJyZJMI5KTm/iDexc emrjgZZF9hag8vv4jCVh8Qs5yohMZ6BI2gDxT+zNBAI5b3w5AiU1Z5+nHHut99SX OtnXeOQktnAMoN1p2J23qUq7mKVdBVAyFDAouqegeGdBhbzlSOmqMivlyfcJ0lOp iSit0uft+beA5mva7Z0BwthJeCI9lY59OphGM8fOeOuO1i+VVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFObEEIeO2PrO229epQZDKzdSeuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODVjNmE2ODctMDIxOC0z YmUxLWE4MDEtZmNjN2M0Y2M3NmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuD8sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIplhsrNZ5yF7y6P2XvPAkOyUIahCWg1+E0QT7vbkiOm44i6nJEknP6/ P4a/u+hG6wRt9lSAnpwe8lTUctjIn4GWdVUcl27lEL7wVHdl0w1QdPSTRlBnbjJF 0vqi0EMe7dZSF5b9bUKhq2AcwNUiM6HoRByyXZdtKnxfxM79tN6p+Sf6UFzWU71o nqi3z0/les5PvXu2pYXrCc2K8wzFkEeVDqBLqhkE6GzGsT1RA4pchI60QkLyZXGd XLEjvU6uPEWzlm72UN5Iuyatf0s78tPGnW//hJdLp9Ydrnmfb9ySARtEvai9zH5p eT0DB9mpHp1hHNbabHcD+xRWr4oeItA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:55 2025 by rpki-client