$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86f688b9-1b92-3650-8689-e026ed5732ea.roa File: 86f688b9-1b92-3650-8689-e026ed5732ea.roa (raw, json) Hash identifier: e/ZMyA2Mb5zuRJLs+opzPZXW4jZe+W5qeDeHK4KCK2U= Subject key identifier: D5:52:7A:29:D6:97:9C:C0:65:BA:0A:F2:5C:B7:22:37:9A:50:1B:22 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581550D152D2C453D442A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86f688b9-1b92-3650-8689-e026ed5732ea.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.20.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:55:0d:15:2d:2c:45:3d:44:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=980b4a06-86a9-460d-a6f3-7fc1f567619a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:76:31:ba:df:c0:0e:cf:28:f3:a3:33:5b: 9b:05:18:b4:36:a8:95:21:f7:d7:55:9c:6e:50:a6: c1:15:70:4d:b0:37:74:7a:f4:2f:c4:b5:f3:8a:72: 50:bc:bb:b0:b6:57:89:21:2c:32:bc:76:27:9d:ea: 92:23:c2:2d:7e:32:b6:ae:0b:e8:c3:5a:d2:63:1f: e9:d3:d9:1d:20:90:d2:3b:b5:99:73:08:a9:56:c7: e5:6a:72:53:a9:35:7d:65:08:c2:8d:c6:e5:ea:0e: f3:95:0c:ef:58:db:4b:c2:79:16:42:c1:48:71:8a: 0b:95:2f:34:db:f0:b4:b7:30:28:f3:95:a1:6b:52: c5:6d:e0:a2:5a:56:4a:a5:6a:e4:d3:78:c6:a1:6b: a7:c2:1d:89:8f:ea:18:91:ee:d1:4c:a6:81:1a:fe: 0b:7d:d5:69:19:3d:e1:40:60:23:13:30:81:05:da: cf:ec:1f:7b:30:c0:20:f7:76:19:f7:87:37:d8:73: 4c:49:ba:f1:62:5a:e0:69:89:ba:cb:b0:08:da:6e: 3f:37:a5:0b:76:75:1b:39:4e:21:40:1a:63:8f:25: 6e:a7:95:11:9c:f3:b2:90:ae:dc:26:a7:fd:ac:fe: a2:0d:d7:ad:50:dd:80:fc:f3:57:2d:53:75:00:0b: 70:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:52:7A:29:D6:97:9C:C0:65:BA:0A:F2:5C:B7:22:37:9A:50:1B:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86f688b9-1b92-3650-8689-e026ed5732ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f3:fe:a9:fd:07:47:61:21:a8:e8:9b:7b:c6:30:36:d8:b6: d9:c2:b2:7e:cd:78:ce:f6:43:eb:82:fe:1c:87:68:ca:43:cd: 19:4f:c2:03:12:6e:5b:04:01:1d:ef:b0:3b:7b:62:69:ec:1b: 05:16:02:31:9b:69:33:e2:bc:af:2f:58:2a:04:52:bc:10:34: f2:6e:78:2b:a5:83:79:e7:12:f9:b8:81:53:38:a8:73:6a:b5: 39:26:fc:3f:d8:14:d3:88:18:4d:0c:d2:d2:62:a6:00:cf:77: ab:9c:e9:22:6f:e7:67:b5:64:d4:9e:bf:f3:a2:d6:38:11:93: 53:b9:df:49:34:b4:4c:49:01:73:48:83:84:5f:fb:de:1e:34: ed:cb:46:f3:33:0b:a6:b2:a1:14:db:a8:e5:f5:00:e2:44:10: 93:aa:17:02:5e:5f:9f:08:24:4a:d6:b9:6d:7f:df:e1:a2:75: a7:76:68:db:b1:8d:e5:c4:d7:40:0b:13:1a:74:67:82:85:55: 59:13:3c:0e:f8:0e:d8:31:d5:8d:9e:10:a2:7c:9a:98:63:43: 1c:ee:78:7b:69:4f:7d:9e:aa:bc:b4:5f:93:ec:2f:c7:0f:b0: fc:4d:62:66:14:fd:08:8a:24:e0:ed:06:2c:13:97:6a:53:66: 33:44:0f:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVUNFS0sRT1EKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTgwYjRhMDYtODZhOS00NjBkLWE2ZjMtN2ZjMWY1Njc2MTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9B2MbrfwA7PKPOjM1ubBRi0NqiVIffXVZxu UKbBFXBNsDd0evQvxLXzinJQvLuwtleJISwyvHYnneqSI8ItfjK2rgvow1rSYx/p 09kdIJDSO7WZcwipVsflanJTqTV9ZQjCjcbl6g7zlQzvWNtLwnkWQsFIcYoLlS80 2/C0tzAo85Wha1LFbeCiWlZKpWrk03jGoWunwh2Jj+oYke7RTKaBGv4LfdVpGT3h QGAjEzCBBdrP7B97MMAg93YZ94c32HNMSbrxYlrgaYm6y7AI2m4/N6ULdnUbOU4h QBpjjyVup5URnPOykK7cJqf9rP6iDdetUN2A/PNXLVN1AAtw9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVSeinWl5zAZboK8ly3IjeaUBsiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODZmNjg4YjktMWI5Mi0z NjUwLTg2ODktZTAyNmVkNTczMmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvz/qn9B0dhIajom3vGMDbYttnCsn7NeM72Q+uC/hyHaMpDzRlPwgMS blsEAR3vsDt7YmnsGwUWAjGbaTPivK8vWCoEUrwQNPJueCulg3nnEvm4gVM4qHNq tTkm/D/YFNOIGE0M0tJipgDPd6uc6SJv52e1ZNSev/Oi1jgRk1O530k0tExJAXNI g4Rf+94eNO3LRvMzC6ayoRTbqOX1AOJEEJOqFwJeX58IJErWuW1/3+Gidad2aNux jeXE10ALExp0Z4KFVVkTPA74Dtgx1Y2eEKJ8mphjQxzueHtpT32eqry0X5PsL8cP sPxNYmYU/QiKJODtBiwTl2pTZjNEDy8= -----END CERTIFICATE-----Generated at Fri Apr 11 23:14:11 2025 by rpki-client