$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99c2d326-b5cb-3e6f-8ea2-6789adc5779b.roa File: 99c2d326-b5cb-3e6f-8ea2-6789adc5779b.roa (raw, json) Hash identifier: R9WVIyTpnDoQ4Nyv9OrWHXeN3/ISFian/+fxALlTe2k= Subject key identifier: D9:CC:94:47:8D:BB:EB:20:B1:12:71:33:A9:8D:B5:90:C9:B8:19:06 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581E239DFBEBE920F657BC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99c2d326-b5cb-3e6f-8ea2-6789adc5779b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.20.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:e2:39:df:be:be:92:0f:65:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=b0d1a37b-eed8-4b40-b5f9-023db7b043c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:46:f9:b2:e7:ac:22:8c:17:e0:8c:90:db:41: 0a:0c:42:47:c6:6e:a0:51:5c:ff:fb:47:a5:9f:8e: 4a:d5:b9:82:17:6f:94:68:82:c2:09:7e:69:7e:2b: 8c:81:cc:29:c0:03:59:b6:b9:b9:20:28:8b:e1:0f: 22:9d:47:3f:8c:5e:a3:2d:86:f6:bd:e4:d9:29:47: 2d:51:d0:5f:68:e8:5b:72:cf:cd:f2:6d:10:b2:c3: ac:a8:00:bf:53:23:c8:ee:d8:27:b6:b0:91:be:5f: bf:c2:42:14:12:eb:d6:ba:23:7e:3f:4c:1b:d0:db: 2e:55:da:35:ba:7b:fd:f4:a9:88:f5:0d:6a:1a:82: 02:ac:ee:73:38:12:14:69:b3:c8:ef:7b:17:38:78: 21:c1:41:03:c9:78:34:94:7d:82:dd:7e:98:6a:df: 82:47:3a:52:ae:10:cc:7e:17:6f:e6:25:fd:12:57: 07:04:83:9a:ce:0d:99:ec:8c:5f:4b:f4:40:52:cd: 98:4c:31:9c:3c:24:45:ee:37:57:65:bd:d0:c7:8d: 7d:73:79:ed:42:85:ff:0a:5b:54:bd:bf:a9:58:43: d7:a0:d1:cd:96:8f:1f:00:9c:0f:0d:ea:8e:8a:f5: 66:bf:9d:8c:61:0f:aa:a1:fc:10:8e:50:90:91:23: fc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CC:94:47:8D:BB:EB:20:B1:12:71:33:A9:8D:B5:90:C9:B8:19:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99c2d326-b5cb-3e6f-8ea2-6789adc5779b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:db:d0:6a:4b:7e:cd:0b:1f:db:f9:f6:d3:81:f2:4c:fe:d3: 30:ef:3c:8c:05:02:25:66:5a:06:36:fa:fb:79:80:e5:e0:87: 31:94:1a:bc:38:1b:89:97:cd:bd:b5:24:e2:b6:b9:b6:22:ba: a5:4d:48:e7:f4:ec:e2:0b:5f:c8:94:07:a0:b7:19:09:fd:d6: 89:be:f0:50:8e:be:f2:f9:87:c3:6e:fe:cf:f7:52:1b:2d:e2: 5c:68:3f:e3:91:ad:1d:94:06:27:2b:79:67:55:11:3c:a7:c7: bf:2e:c8:e8:a6:6e:1d:53:00:0b:0b:82:e0:dd:38:ee:13:88: 57:97:48:7c:28:4b:36:f3:84:b1:22:e0:66:0a:fd:a1:f2:5c: e5:56:e8:0e:3c:f8:69:5f:c6:71:bb:54:03:bd:2b:3d:2a:04: 61:c7:ac:1c:e2:55:8a:d3:92:0b:3a:b6:c0:0a:1a:ea:ff:e6: 24:4c:12:f4:8b:46:03:02:0f:68:9f:df:5e:3c:ca:aa:e8:2d: 89:fd:32:af:3c:36:9e:cb:19:0d:82:09:99:8e:4a:24:e8:d3: 41:b9:05:4e:cf:9c:29:1b:84:aa:3b:34:57:ec:5a:d9:47:32: 31:fd:b1:92:c5:8c:a4:9c:69:63:8e:05:55:b2:d9:8a:57:e9: c5:0e:ce:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgeI5376+kg9le8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YjBkMWEzN2ItZWVkOC00YjQwLWI1ZjktMDIzZGI3YjA0M2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20b5suesIowX4IyQ20EKDEJHxm6gUVz/+0el n45K1bmCF2+UaILCCX5pfiuMgcwpwANZtrm5ICiL4Q8inUc/jF6jLYb2veTZKUct UdBfaOhbcs/N8m0QssOsqAC/UyPI7tgntrCRvl+/wkIUEuvWuiN+P0wb0NsuVdo1 unv99KmI9Q1qGoICrO5zOBIUabPI73sXOHghwUEDyXg0lH2C3X6Yat+CRzpSrhDM fhdv5iX9ElcHBIOazg2Z7IxfS/RAUs2YTDGcPCRF7jdXZb3Qx419c3ntQoX/CltU vb+pWEPXoNHNlo8fAJwPDeqOivVmv52MYQ+qofwQjlCQkSP8AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnMlEeNu+sgsRJxM6mNtZDJuBkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTljMmQzMjYtYjVjYi0z ZTZmLThlYTItNjc4OWFkYzU3NzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDb0GpLfs0LH9v59tOB8kz+0zDvPIwFAiVmWgY2+vt5gOXghzGUGrw4 G4mXzb21JOK2ubYiuqVNSOf07OILX8iUB6C3GQn91om+8FCOvvL5h8Nu/s/3Uhst 4lxoP+ORrR2UBicreWdVETynx78uyOimbh1TAAsLguDdOO4TiFeXSHwoSzbzhLEi 4GYK/aHyXOVW6A48+GlfxnG7VAO9Kz0qBGHHrBziVYrTkgs6tsAKGur/5iRMEvSL RgMCD2if3148yqroLYn9Mq88Np7LGQ2CCZmOSiTo00G5BU7PnCkbhKo7NFfsWtlH MjH9sZLFjKScaWOOBVWy2YpX6cUOzhE= -----END CERTIFICATE-----Generated at Fri Mar 14 09:36:34 2025 by rpki-client