$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8436167-fbd0-3f67-8cf4-86f256e88370.roa File: a8436167-fbd0-3f67-8cf4-86f256e88370.roa (raw, json) Hash identifier: i6S4F2oHC9sbBnhArlXkXTBp27LJ6Z2D5xETvsp50ow= Subject key identifier: 67:CC:60:08:A3:6B:EA:8A:E4:8D:FE:D6:72:F2:42:97:E9:E8:26:74 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581533EA69FA5F6B673B580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8436167-fbd0-3f67-8cf4-86f256e88370.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.20.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:53:3e:a6:9f:a5:f6:b6:73:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=712c0c5e-5310-4feb-b7ad-e8ca4b2f9239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:81:81:d8:36:04:87:ac:40:1c:fe:a5:7b:48: 1a:54:1f:a2:86:78:1a:3f:d9:47:c1:e4:e7:aa:6d: b2:6b:83:d5:4d:18:a1:b7:1a:a2:c4:fc:b5:46:65: a7:74:71:61:31:50:b4:3d:3c:dd:ac:49:c7:60:bf: cd:40:af:2f:0b:6e:73:b7:95:44:f2:88:d9:55:a9: 1b:f3:9b:8c:42:18:97:e0:72:75:2d:07:d5:cf:44: b7:9e:28:b9:78:3f:be:ca:33:4d:cf:c9:8f:d7:1d: d1:75:1d:f7:29:d3:c1:5b:9e:b4:02:cb:9a:a6:62: 9e:66:4f:39:94:c9:f4:31:7e:fa:cc:de:57:0d:0c: 1e:29:f2:14:cd:63:ee:3b:36:cd:dd:31:47:74:d4: 96:cd:51:c4:05:04:75:9e:ac:37:29:63:4b:46:43: ac:18:87:9e:25:64:bb:d5:3d:0e:56:0f:35:32:03: d7:1c:15:c7:9f:3f:6d:79:62:29:3f:b0:2b:1c:14: cb:47:85:9d:30:cd:7e:cb:d7:47:6a:14:e3:6a:98: 3a:54:a1:78:1e:25:32:88:df:54:91:8e:0b:3d:da: 19:48:fa:f2:88:72:5c:77:f9:1f:0b:5f:39:12:c5: 6c:b9:56:fd:94:a2:6c:53:d6:20:5f:c8:41:88:40: ee:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CC:60:08:A3:6B:EA:8A:E4:8D:FE:D6:72:F2:42:97:E9:E8:26:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8436167-fbd0-3f67-8cf4-86f256e88370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:42:13:cd:84:ed:01:fa:ca:b2:63:7c:cc:81:a3:22:93:6d: 21:2a:16:57:88:13:84:29:30:58:92:0a:f0:a0:17:49:7b:8e: 9b:1e:4f:6e:96:e2:6f:c1:58:c5:10:51:c0:c1:00:58:c5:53: 61:8d:2f:bf:e9:c4:48:c6:1f:62:e3:7c:9a:bb:86:30:4d:a2: 58:89:f9:a9:f7:3e:1e:80:89:48:91:77:81:22:7d:d0:d7:c1: b8:71:e0:c4:20:3d:bf:26:51:e8:13:03:77:0f:ad:90:80:a1: 54:b3:27:cd:20:66:ee:9a:20:07:00:ff:b5:67:cc:6b:d9:cd: 85:4a:2e:3e:2c:d9:8a:6e:9e:4b:14:f4:6b:53:9a:1f:53:88: 1b:d4:d0:fc:85:46:eb:21:70:2a:47:86:f6:3a:78:d2:ca:fb: 27:6c:3d:d0:10:01:ec:a8:cc:ff:a7:0a:dc:7c:44:90:18:08: da:5b:38:b1:1f:ba:f6:97:05:9d:8a:fb:a5:69:6c:f4:03:d1: a0:ee:76:a2:55:0b:b8:48:20:d0:b8:67:38:3a:ff:6f:4e:ce: 21:88:23:8b:f2:f6:b5:e7:80:b1:1a:d4:77:9f:29:98:c9:cc: 2e:41:05:3d:3c:1d:40:fa:e8:f7:53:42:a7:b2:d4:5e:a9:99: 70:d5:a3:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVM+pp+l9rZztYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzEyYzBjNWUtNTMxMC00ZmViLWI3YWQtZThjYTRiMmY5MjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oGB2DYEh6xAHP6le0gaVB+ihngaP9lHweTn qm2ya4PVTRihtxqixPy1RmWndHFhMVC0PTzdrEnHYL/NQK8vC25zt5VE8ojZVakb 85uMQhiX4HJ1LQfVz0S3nii5eD++yjNNz8mP1x3RdR33KdPBW560AsuapmKeZk85 lMn0MX76zN5XDQweKfIUzWPuOzbN3TFHdNSWzVHEBQR1nqw3KWNLRkOsGIeeJWS7 1T0OVg81MgPXHBXHnz9teWIpP7ArHBTLR4WdMM1+y9dHahTjapg6VKF4HiUyiN9U kY4LPdoZSPryiHJcd/kfC185EsVsuVb9lKJsU9YgX8hBiEDu9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfMYAija+qK5I3+1nLyQpfp6CZ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTg0MzYxNjctZmJkMC0z ZjY3LThjZjQtODZmMjU2ZTg4MzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBSCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNCE82E7QH6yrJjfMyBoyKTbSEqFleIE4QpMFiSCvCgF0l7jpseT26W 4m/BWMUQUcDBAFjFU2GNL7/pxEjGH2LjfJq7hjBNoliJ+an3Ph6AiUiRd4EifdDX wbhx4MQgPb8mUegTA3cPrZCAoVSzJ80gZu6aIAcA/7VnzGvZzYVKLj4s2YpunksU 9GtTmh9TiBvU0PyFRushcCpHhvY6eNLK+ydsPdAQAeyozP+nCtx8RJAYCNpbOLEf uvaXBZ2K+6VpbPQD0aDudqJVC7hIINC4Zzg6/29OziGII4vy9rXngLEa1HefKZjJ zC5BBT08HUD66PdTQqey1F6pmXDVo1Y= -----END CERTIFICATE-----Generated at Fri Apr 11 23:50:30 2025 by rpki-client