$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9c5d267-98dd-3f6c-9455-0eca1e14d05b.roa File: a9c5d267-98dd-3f6c-9455-0eca1e14d05b.roa (raw, json) Hash identifier: jdQ9VlQqV1Unwuy4lMbd+3SKSAyL98y2r1WV/dHdaqU= Subject key identifier: 29:E5:97:B1:5B:8C:1D:8B:68:AF:D4:08:5D:9F:8B:B6:0B:59:0F:8C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58165C12E43F19B5EED9580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9c5d267-98dd-3f6c-9455-0eca1e14d05b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.63.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:65:c1:2e:43:f1:9b:5e:ed:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=59aefa39-f1df-4a0d-a8bb-c33efe82be2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b2:bf:67:d3:d1:0f:15:41:b3:8f:60:af:d0: c2:8b:e9:33:37:95:6e:e0:24:fb:10:fb:49:17:f9: 09:89:99:98:43:56:03:6e:54:1b:0a:b1:c8:6f:ba: 46:5a:5c:a1:35:62:43:e6:52:1b:ed:74:71:ee:9d: 58:82:50:15:c8:7a:47:d6:e5:7a:40:91:1a:0f:3d: 6d:b4:aa:57:00:46:d2:1a:17:cc:ca:1f:00:65:3e: d0:71:a6:13:d9:a3:0c:36:f4:65:5f:bc:87:92:e4: 50:35:52:21:de:ce:a6:f7:69:a8:0b:91:a0:4f:2e: ee:5a:e2:56:c3:ec:44:c8:8b:3d:e3:d1:98:2a:76: 89:b1:f5:34:b7:b9:0b:e0:96:3d:f4:18:3d:32:fe: 77:24:5c:73:1f:1c:cf:84:f2:d0:5a:03:16:4d:68: da:3d:9a:1e:10:01:c5:6b:27:4d:e8:17:cc:d2:30: ec:67:60:e0:f3:cb:98:64:25:bc:eb:78:8b:66:54: a9:da:65:db:1a:ed:a9:67:87:27:19:50:74:5e:c5: 0b:38:8b:eb:d8:74:7e:16:8b:01:be:1c:63:f3:15: 8d:e0:57:03:75:f6:31:fc:8a:de:a4:a3:35:82:6a: bb:b9:d9:b7:0e:d3:e0:d1:69:c6:2f:48:38:14:7a: 5d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E5:97:B1:5B:8C:1D:8B:68:AF:D4:08:5D:9F:8B:B6:0B:59:0F:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9c5d267-98dd-3f6c-9455-0eca1e14d05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.63.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:52:fd:3e:36:86:26:c9:9a:04:24:6e:44:7f:31:fd:b6:48: 2d:82:08:27:5d:86:3b:78:3d:42:44:7f:43:4e:c0:7f:ec:e6: 04:77:a1:23:e3:b3:5f:ab:0a:37:44:71:21:bb:f8:d0:80:15: ac:c6:4e:a7:bd:24:ce:e1:32:ce:bf:99:6f:c6:bd:ec:be:b1: bf:91:d4:2e:4e:eb:f5:25:04:1f:05:0c:b1:5a:bc:12:8a:d9: 81:16:70:75:67:30:8a:fc:90:2a:43:4b:de:43:74:16:82:bf: ca:12:53:30:7d:a3:88:9a:8b:e2:bd:c6:f4:7a:4d:89:d4:e0: 66:fa:09:5c:e4:bc:00:cd:b8:9b:78:be:c7:59:ea:89:88:27: 19:58:c4:1f:6e:2e:27:b4:a6:ca:df:ed:62:4d:7d:95:80:1d: 08:51:9d:81:36:64:86:b8:d4:83:3b:b8:f6:0a:a5:83:97:67: 8e:b5:d6:5d:c1:7e:c2:ba:03:64:bf:1c:a6:f2:91:d6:1c:81: 16:86:2a:9e:47:98:04:73:48:01:24:98:96:4b:66:6c:06:93: e1:ae:04:5a:07:9d:cf:b1:05:d8:e5:2d:53:79:85:93:58:f6: 77:8a:73:aa:5f:75:04:a5:cc:f5:da:f8:cd:59:46:24:6a:17: ba:e9:c4:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgWXBLkPxm17tlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTlhZWZhMzktZjFkZi00YTBkLWE4YmItYzMzZWZlODJiZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrK/Z9PRDxVBs49gr9DCi+kzN5Vu4CT7EPtJ F/kJiZmYQ1YDblQbCrHIb7pGWlyhNWJD5lIb7XRx7p1YglAVyHpH1uV6QJEaDz1t tKpXAEbSGhfMyh8AZT7QcaYT2aMMNvRlX7yHkuRQNVIh3s6m92moC5GgTy7uWuJW w+xEyIs949GYKnaJsfU0t7kL4JY99Bg9Mv53JFxzHxzPhPLQWgMWTWjaPZoeEAHF aydN6BfM0jDsZ2Dg88uYZCW863iLZlSp2mXbGu2pZ4cnGVB0XsULOIvr2HR+FosB vhxj8xWN4FcDdfYx/IrepKM1gmq7udm3DtPg0WnGL0g4FHpdhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnll7FbjB2LaK/UCF2fi7YLWQ+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTljNWQyNjctOThkZC0z ZjZjLTk0NTUtMGVjYTFlMTRkMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD9fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALtS/T42hibJmgQkbkR/Mf22SC2CCCddhjt4PUJEf0NOwH/s5gR3oSPj s1+rCjdEcSG7+NCAFazGTqe9JM7hMs6/mW/Gvey+sb+R1C5O6/UlBB8FDLFavBKK 2YEWcHVnMIr8kCpDS95DdBaCv8oSUzB9o4iai+K9xvR6TYnU4Gb6CVzkvADNuJt4 vsdZ6omIJxlYxB9uLie0psrf7WJNfZWAHQhRnYE2ZIa41IM7uPYKpYOXZ4611l3B fsK6A2S/HKbykdYcgRaGKp5HmARzSAEkmJZLZmwGk+GuBFoHnc+xBdjlLVN5hZNY 9neKc6pfdQSlzPXa+M1ZRiRqF7rpxI0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:30 2025 by rpki-client