$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/94faf44f-1db0-3ae3-9af2-3ab2cd5954f8.roa File: 94faf44f-1db0-3ae3-9af2-3ab2cd5954f8.roa (raw, json) Hash identifier: mMuel0fib5g2Bp43E7119EDcKaAtyrhW29tZWgao9ZI= Subject key identifier: 0E:C6:17:B8:02:68:18:08:C9:C4:56:94:18:05:16:89:3E:66:9D:6F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58157346C799073CFC41900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/94faf44f-1db0-3ae3-9af2-3ab2cd5954f8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.21.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:57:34:6c:79:90:73:cf:c4:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=33f4c91c-22e5-4c53-ba75-767dd44afafe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5c:ab:46:99:65:23:25:18:61:b4:5c:58:63: f3:fa:0c:58:9a:c6:8f:be:b0:00:33:61:74:73:a1: c4:a5:a4:07:f1:97:e9:e4:31:79:0d:d9:a0:dc:46: 17:3d:13:97:fb:f3:83:6f:ca:17:9e:1d:f5:ca:10: 55:38:98:78:8f:99:9f:3d:b1:97:b5:58:91:39:ef: d9:8b:72:0e:22:79:0b:65:2d:d0:1b:bf:e5:69:19: 9f:c2:ad:80:79:35:a5:14:64:8f:33:63:36:e8:69: e9:00:21:78:33:8b:29:25:44:05:4e:1a:68:a4:d2: 4e:2b:eb:78:d2:5b:c8:38:43:10:94:f2:a5:71:9e: 4a:86:9c:d2:2c:9d:d0:70:b0:46:6c:e4:8c:b2:ef: 87:0a:de:b6:17:05:57:5b:31:37:ae:25:81:03:43: 8c:0d:de:63:36:63:6b:18:ee:73:83:b5:66:85:4d: 99:99:f6:95:10:38:6d:67:2b:e0:b4:66:0b:aa:24: f6:f3:2d:45:56:70:23:b1:bf:fb:72:eb:3c:95:05: c0:d5:36:5d:a9:fc:04:24:26:fa:4b:59:3b:2f:6d: 74:28:d8:78:4d:b0:b9:25:4f:d6:cd:24:12:aa:30: 8d:a7:70:e3:d9:a8:f0:e4:f1:e4:66:93:c0:bd:df: 03:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C6:17:B8:02:68:18:08:C9:C4:56:94:18:05:16:89:3E:66:9D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/94faf44f-1db0-3ae3-9af2-3ab2cd5954f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:7f:09:c8:9d:e3:57:fd:03:69:5f:4b:82:f1:bd:f4:36:57: 03:6c:1c:d3:9d:c1:df:ed:5b:3c:73:71:ca:4f:78:68:6a:f1: 13:41:04:d5:e1:50:41:56:d6:a6:61:36:d3:99:91:e4:70:01: 98:fe:a6:f6:6a:82:fa:b0:16:ba:35:31:13:db:06:44:af:93: f2:e0:08:a6:ad:3f:c2:67:11:fa:04:ce:ba:48:ad:c4:f4:d8: 12:ec:98:c5:d3:f4:dd:44:d5:94:fd:b4:5a:96:3e:95:29:1d: fc:dd:8a:a3:50:33:83:fc:a4:4c:17:2b:4d:f2:48:5b:3a:61: 7d:54:7a:6e:34:0c:56:04:4a:79:e1:68:83:61:1b:1c:f9:2a: 6c:bb:39:f2:97:a7:4a:46:1f:18:89:6f:cf:90:0f:b7:9a:e6: 5e:9f:69:c5:e3:90:2c:b4:c9:bf:68:aa:f9:20:ab:07:36:60: bd:e6:a4:13:b2:d8:1d:47:bd:41:bf:aa:bf:22:af:76:93:fa: ab:15:11:bc:51:72:6f:40:ca:e6:29:a5:28:cf:32:71:f0:d2: 44:ba:64:6d:16:02:ef:04:d4:d8:a6:43:45:dc:19:7b:67:ae: 36:5c:c0:1c:fb:38:06:7c:45:e9:db:eb:42:b0:90:f3:22:0f: ad:34:96:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVc0bHmQc8/EGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzNmNGM5MWMtMjJlNS00YzUzLWJhNzUtNzY3ZGQ0NGFmYWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVyrRpllIyUYYbRcWGPz+gxYmsaPvrAAM2F0 c6HEpaQH8Zfp5DF5Ddmg3EYXPROX+/ODb8oXnh31yhBVOJh4j5mfPbGXtViROe/Z i3IOInkLZS3QG7/laRmfwq2AeTWlFGSPM2M26GnpACF4M4spJUQFThpopNJOK+t4 0lvIOEMQlPKlcZ5KhpzSLJ3QcLBGbOSMsu+HCt62FwVXWzE3riWBA0OMDd5jNmNr GO5zg7VmhU2ZmfaVEDhtZyvgtGYLqiT28y1FVnAjsb/7cus8lQXA1TZdqfwEJCb6 S1k7L210KNh4TbC5JU/WzSQSqjCNp3Dj2ajw5PHkZpPAvd8DOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7GF7gCaBgIycRWlBgFFok+Zp1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTRmYWY0NGYtMWRiMC0z YWUzLTlhZjItM2FiMmNkNTk1NGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBUpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ/Ccid41f9A2lfS4LxvfQ2VwNsHNOdwd/tWzxzccpPeGhq8RNBBNXh UEFW1qZhNtOZkeRwAZj+pvZqgvqwFro1MRPbBkSvk/LgCKatP8JnEfoEzrpIrcT0 2BLsmMXT9N1E1ZT9tFqWPpUpHfzdiqNQM4P8pEwXK03ySFs6YX1Uem40DFYESnnh aINhGxz5Kmy7OfKXp0pGHxiJb8+QD7ea5l6facXjkCy0yb9oqvkgqwc2YL3mpBOy 2B1HvUG/qr8ir3aT+qsVEbxRcm9AyuYppSjPMnHw0kS6ZG0WAu8E1NimQ0XcGXtn rjZcwBz7OAZ8Renb60KwkPMiD600lss= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:04 2025 by rpki-client