$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa File: 85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa (raw, json) Hash identifier: RondDrM1oVfJIl5DkwTeXM1X0qRlcwdxRth9PNmKviQ= Subject key identifier: 66:8D:43:48:27:79:8A:F6:4B:FA:B1:2B:1D:BA:B8:58:87:4C:44:68 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5815AAA34C09C26FA65EF00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.21.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:5a:aa:34:c0:9c:26:fa:65:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=836da80f-b1d9-4546-931d-88fa6ab01e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:91:29:38:9d:b7:08:72:36:91:6c:e1:95: d2:2b:51:a5:94:36:45:cb:85:fd:d9:e1:4e:94:6c: 35:c4:cc:4c:7a:67:65:db:3c:b5:76:9e:0d:0d:f9: 66:2e:f3:5f:1e:f7:ee:da:61:e1:9d:a2:bd:47:e9: 61:d4:b4:5e:fd:f1:89:d1:58:23:e8:bd:ea:f5:48: 56:b0:91:14:f0:54:55:04:e6:34:77:5e:41:88:94: 82:4b:40:1f:a0:41:97:ec:1b:c1:1c:3a:e6:49:1e: 0a:72:f5:45:db:cb:75:1b:a0:51:bb:58:53:e0:7b: b6:f6:e4:ec:4e:8b:31:b4:98:01:d1:7e:36:a9:b8: fd:12:49:02:22:dc:81:e0:90:2c:0a:57:f0:cd:af: 2b:86:5d:73:91:42:25:19:48:bb:55:69:99:d6:72: f4:96:a3:ca:20:f7:58:78:5d:b8:fd:09:b5:3c:05: 28:7c:d7:59:9f:59:ac:10:15:29:67:7e:1d:de:72: 76:5e:a5:de:c2:85:2e:66:96:6c:69:65:7f:87:de: bf:3c:60:c2:e1:36:40:6c:df:c8:ed:66:6e:54:5d: 62:fa:34:60:7a:03:9f:0a:c5:c6:e5:10:bb:ae:8c: c3:e8:0e:68:ba:14:22:4b:dd:58:d6:d8:df:95:d0: 1c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8D:43:48:27:79:8A:F6:4B:FA:B1:2B:1D:BA:B8:58:87:4C:44:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:bb:ce:b1:c6:48:11:e3:a6:49:d5:97:cc:12:54:80:cc:55: 23:52:e3:0c:6c:be:bb:35:10:06:26:41:54:e3:55:93:a0:d1: 89:b3:44:bf:90:77:9c:8f:19:3d:c3:b8:a6:f8:65:3c:8a:31: f1:c2:e7:51:0d:51:17:5f:13:ac:f9:7f:93:f6:9a:48:90:38: 8a:33:ae:41:c3:4c:74:0a:60:39:f3:6f:ab:88:4c:01:b3:78: f8:a8:3f:e3:8f:eb:61:c9:e5:6d:a6:9e:6a:03:08:a1:61:1d: e0:16:9e:59:7d:f7:2f:93:bd:4e:20:49:20:3a:a7:08:55:87: 16:f4:f1:13:aa:8a:3b:73:2c:d2:dc:6b:f7:59:7b:26:27:c5: a6:4e:82:7b:02:a6:89:88:4c:d8:65:60:69:77:98:f4:26:b1: de:cc:fe:e2:2b:dc:82:20:fb:38:17:13:55:75:7f:96:f5:6b: fe:de:64:85:43:3a:77:c4:88:40:ac:4e:57:64:27:f7:9c:62: ad:dd:c9:1b:af:ff:9e:74:5e:33:53:84:1b:7a:2f:50:2f:eb: 60:db:9b:ed:de:da:e3:c1:2f:d2:23:64:64:e8:ea:9f:ed:35: 55:06:23:34:30:01:29:fa:8d:94:17:33:8c:f1:06:4b:58:ac: 21:c4:e9:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVqqNMCcJvpl7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODM2ZGE4MGYtYjFkOS00NTQ2LTkzMWQtODhmYTZhYjAxZTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1KRKTidtwhyNpFs4ZXSK1GllDZFy4X92eFO lGw1xMxMemdl2zy1dp4NDflmLvNfHvfu2mHhnaK9R+lh1LRe/fGJ0Vgj6L3q9UhW sJEU8FRVBOY0d15BiJSCS0AfoEGX7BvBHDrmSR4KcvVF28t1G6BRu1hT4Hu29uTs TosxtJgB0X42qbj9EkkCItyB4JAsClfwza8rhl1zkUIlGUi7VWmZ1nL0lqPKIPdY eF24/Qm1PAUofNdZn1msEBUpZ34d3nJ2XqXewoUuZpZsaWV/h96/PGDC4TZAbN/I 7WZuVF1i+jRgegOfCsXG5RC7rozD6A5ouhQiS91Y1tjfldAc+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaNQ0gneYr2S/qxKx26uFiHTERoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODVmMDg0MzMtMTJlMy0z ZDllLWJmZGYtMGVmM2QyZTZjNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi7zrHGSBHjpknVl8wSVIDMVSNS4wxsvrs1EAYmQVTjVZOg0YmzRL+Q d5yPGT3DuKb4ZTyKMfHC51ENURdfE6z5f5P2mkiQOIozrkHDTHQKYDnzb6uITAGz ePioP+OP62HJ5W2mnmoDCKFhHeAWnll99y+TvU4gSSA6pwhVhxb08ROqijtzLNLc a/dZeyYnxaZOgnsCpomITNhlYGl3mPQmsd7M/uIr3IIg+zgXE1V1f5b1a/7eZIVD OnfEiECsTldkJ/ecYq3dyRuv/550XjNThBt6L1Av62Dbm+3e2uPBL9IjZGTo6p/t NVUGIzQwASn6jZQXM4zxBktYrCHE6YE= -----END CERTIFICATE-----Generated at Sat Apr 12 01:59:50 2025 by rpki-client