$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3de0e7a-d99e-35f3-87da-2e4be8f9780b.roa File: b3de0e7a-d99e-35f3-87da-2e4be8f9780b.roa (raw, json) Hash identifier: IY7k0ASOTc8xE0UmjRrDWRqiAR9wJ4ome5xmBR9LREA= Subject key identifier: 02:28:14:5F:84:D9:A5:8C:38:F9:4B:4D:71:EE:C8:B7:5B:7C:B1:0A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58153300AAB95A23753C980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3de0e7a-d99e-35f3-87da-2e4be8f9780b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.20.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:53:30:0a:ab:95:a2:37:53:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d1f695d9-bae8-47ed-b012-c3e7ebe0d35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:47:1c:bb:a7:30:6a:5f:c5:5c:e9:95:4b:40: a6:00:02:cd:dc:7c:c8:f3:bc:a1:41:73:b4:e9:be: c4:f7:7a:57:b8:a7:5d:d7:d8:e3:bf:ca:e4:7f:9c: d8:e5:af:a4:7c:8f:27:2f:ca:e5:8f:0f:1e:c2:38: 31:85:65:8b:27:2e:a4:24:04:91:ec:7e:0e:b3:77: 26:1c:db:35:74:ac:51:ff:2a:c1:9c:3e:42:6f:95: 17:81:79:58:5c:04:e1:e2:2e:4f:9e:4d:b1:a3:70: 96:6f:3a:31:64:f7:85:8e:dd:16:34:33:e2:39:a1: 17:8b:67:eb:06:27:0a:6a:84:2a:99:88:ee:72:86: ff:c4:2d:bd:94:a5:b6:4c:b9:2b:24:9c:d7:2f:52: bf:0e:2e:59:56:4a:75:1a:e0:4e:9c:c4:bc:a7:e5: 90:50:55:3e:d6:16:76:e7:c3:6c:7b:d6:40:72:94: 90:3a:e5:ef:9f:43:2f:ab:7e:d4:33:4c:04:51:a2: 8c:c4:09:1b:84:76:fd:90:f2:e4:b7:a1:96:f3:90: 04:3e:2c:10:66:41:6f:44:61:d9:e2:60:75:21:fd: 7f:a5:9f:00:36:dd:00:57:ea:94:b5:0a:84:9f:cf: c3:4a:45:e7:a1:6f:73:a2:fd:f3:76:53:46:ff:8f: 40:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:28:14:5F:84:D9:A5:8C:38:F9:4B:4D:71:EE:C8:B7:5B:7C:B1:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3de0e7a-d99e-35f3-87da-2e4be8f9780b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:35:c3:e6:12:3a:17:87:67:bc:99:a4:c6:ec:d0:c8:78:a7: a1:38:b5:04:5f:13:4a:05:e6:ca:f6:fa:9b:52:9a:62:b5:96: 77:cd:7c:8c:1c:74:f0:27:be:21:1f:c4:24:46:53:e4:9d:53: e7:b1:d5:b0:68:3b:29:97:81:0c:84:16:4b:1c:f2:32:a4:c6: 73:bc:00:08:ac:21:ac:47:75:62:82:87:d5:e9:56:c0:c9:80: 25:f4:64:3b:ae:ed:9f:6b:d2:f1:69:12:ed:36:63:5f:97:64: ff:ad:9b:ba:cf:93:60:7c:a0:a5:ed:4a:d0:ca:e5:80:cd:e2: b5:ad:0f:bf:89:81:f8:38:84:de:b9:66:9d:93:31:20:7e:82: b7:aa:89:72:4e:52:fa:94:77:31:6c:a1:4f:2e:47:e9:e7:7f: af:43:af:2a:38:1a:e6:0a:17:99:d1:f6:3e:7a:70:4d:8b:6e: 53:f0:46:8b:5c:9e:9c:5b:89:05:c6:10:a3:f8:4a:e4:af:8c: cc:8c:a6:b4:e1:63:5c:c2:fa:24:14:ee:20:2b:2b:f4:2e:f3: 50:77:24:a4:17:89:d4:df:b0:6e:5c:61:e2:8f:3e:68:e7:fa: 65:23:f7:06:d7:a5:26:b0:98:bf:26:c6:0d:67:81:6c:d9:50: 6f:74:e4:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVMwCquVojdTyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDFmNjk1ZDktYmFlOC00N2VkLWIwMTItYzNlN2ViZTBkMzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0ccu6cwal/FXOmVS0CmAALN3HzI87yhQXO0 6b7E93pXuKdd19jjv8rkf5zY5a+kfI8nL8rljw8ewjgxhWWLJy6kJASR7H4Os3cm HNs1dKxR/yrBnD5Cb5UXgXlYXATh4i5Pnk2xo3CWbzoxZPeFjt0WNDPiOaEXi2fr BicKaoQqmYjucob/xC29lKW2TLkrJJzXL1K/Di5ZVkp1GuBOnMS8p+WQUFU+1hZ2 58Nse9ZAcpSQOuXvn0Mvq37UM0wEUaKMxAkbhHb9kPLkt6GW85AEPiwQZkFvRGHZ 4mB1If1/pZ8ANt0AV+qUtQqEn8/DSkXnoW9zov3zdlNG/49AkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIoFF+E2aWMOPlLTXHuyLdbfLEKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjNkZTBlN2EtZDk5ZS0z NWYzLTg3ZGEtMmU0YmU4Zjk3ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBSBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI81w+YSOheHZ7yZpMbs0Mh4p6E4tQRfE0oF5sr2+ptSmmK1lnfNfIwc dPAnviEfxCRGU+SdU+ex1bBoOymXgQyEFksc8jKkxnO8AAisIaxHdWKCh9XpVsDJ gCX0ZDuu7Z9r0vFpEu02Y1+XZP+tm7rPk2B8oKXtStDK5YDN4rWtD7+Jgfg4hN65 Zp2TMSB+greqiXJOUvqUdzFsoU8uR+nnf69Dryo4GuYKF5nR9j56cE2LblPwRotc npxbiQXGEKP4SuSvjMyMprThY1zC+iQU7iArK/Qu81B3JKQXidTfsG5cYeKPPmjn +mUj9wbXpSawmL8mxg1ngWzZUG905IM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:15 2025 by rpki-client