$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcc6c87b-176e-3f65-a491-41380a670849.roa File: bcc6c87b-176e-3f65-a491-41380a670849.roa (raw, json) Hash identifier: zhH6X4wC+8TBNsTtQv6lAePV4Czvik+jh+wSFQBQP6I= Subject key identifier: 6C:83:B0:88:7A:A1:2C:F9:22:0B:44:40:15:1E:0D:90:C0:CE:41:95 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5814FD21A791D6A2322F600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcc6c87b-176e-3f65-a491-41380a670849.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.20.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:4f:d2:1a:79:1d:6a:23:22:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=a6198532-71c0-4b24-9289-d6b1f9d575a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:82:8c:a8:fe:8e:5d:48:98:40:af:57:e0:d8: a8:0f:40:b1:a7:a2:8d:6b:c2:d8:36:9f:f3:7b:9a: cb:dd:75:cd:3c:df:45:1b:15:a2:72:6b:59:95:0f: 20:7e:e6:c1:0f:26:d2:bb:7d:0b:7f:78:13:42:64: 40:15:72:e7:c6:af:95:44:c2:c4:09:b1:1b:20:34: 66:42:40:92:3c:e0:a6:43:a2:e7:55:31:5e:e7:15: 57:d7:8f:af:7a:4b:0c:1a:3a:ef:cb:fa:fa:a6:d5: e3:7e:42:e9:28:38:0d:7c:67:f9:59:43:2b:2b:56: 36:57:eb:28:12:f5:56:f6:1d:3d:79:b0:63:20:89: 1c:a9:d7:62:49:d5:db:bc:da:ae:0b:87:1d:9e:45: 07:f1:07:4d:91:c5:3d:63:b5:7f:de:f7:b4:ed:18: e4:5c:ce:33:07:d8:c2:17:c8:f9:6c:21:64:e8:23: 0c:9f:c9:2b:4d:c6:f8:2e:14:fe:59:74:62:21:55: e2:e9:9a:10:90:c3:06:13:32:bf:24:94:54:b7:88: 56:fd:0e:1f:9b:a7:c2:18:85:e2:e8:f7:af:78:0e: c0:f5:54:1d:48:e2:d4:06:22:32:cb:c7:57:f2:16: f9:ee:7f:0e:30:d0:40:61:4f:08:d0:24:a6:c3:6a: 14:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:83:B0:88:7A:A1:2C:F9:22:0B:44:40:15:1E:0D:90:C0:CE:41:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcc6c87b-176e-3f65-a491-41380a670849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ce:2a:d5:1d:d1:23:36:92:85:ca:99:bc:96:64:26:1d:15: 62:15:3e:de:77:1f:f2:5e:82:80:98:c3:ad:28:44:40:6e:19: fc:78:d4:f4:19:da:50:96:5b:7b:cf:29:e3:98:48:f6:98:fb: 84:34:00:fb:40:70:0f:da:70:71:af:8c:7e:da:85:4a:f1:0d: 0e:9b:29:3c:fa:be:b6:8d:2d:75:5c:95:28:8b:59:06:1b:c6: 95:aa:77:40:75:81:38:f2:e9:ee:8f:26:49:dc:c7:f4:1e:e9: 7c:65:e5:d3:75:d8:68:35:cc:89:a1:67:ea:87:b6:7d:db:cd: b5:ca:3c:2b:ee:ff:c6:e2:de:fc:5c:23:60:b8:35:5d:5d:a0: 7c:13:94:79:55:ab:ca:56:3e:8a:70:45:62:cd:a7:fc:d0:26: a6:ff:83:db:1c:ce:28:32:ac:6b:3e:74:01:55:11:fa:ef:e7: 9f:32:3e:67:14:67:53:1f:a8:dc:e4:84:0f:07:c5:62:dd:b1: f8:33:10:e9:dd:9c:14:e5:4a:79:b6:58:c8:42:77:fc:bd:4c: cd:c8:b8:50:d6:f6:bd:58:7c:30:e9:4e:27:34:1e:e3:30:47: ba:c0:e1:65:0e:d9:c4:b9:5e:78:1f:7e:e0:c7:11:7a:89:34: 36:c3:36:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgU/SGnkdaiMi9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YTYxOTg1MzItNzFjMC00YjI0LTkyODktZDZiMWY5ZDU3NWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoKMqP6OXUiYQK9X4NioD0Cxp6KNa8LYNp/z e5rL3XXNPN9FGxWicmtZlQ8gfubBDybSu30Lf3gTQmRAFXLnxq+VRMLECbEbIDRm QkCSPOCmQ6LnVTFe5xVX14+veksMGjrvy/r6ptXjfkLpKDgNfGf5WUMrK1Y2V+so EvVW9h09ebBjIIkcqddiSdXbvNquC4cdnkUH8QdNkcU9Y7V/3ve07RjkXM4zB9jC F8j5bCFk6CMMn8krTcb4LhT+WXRiIVXi6ZoQkMMGEzK/JJRUt4hW/Q4fm6fCGIXi 6PeveA7A9VQdSOLUBiIyy8dX8hb57n8OMNBAYU8I0CSmw2oUBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyDsIh6oSz5IgtEQBUeDZDAzkGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmNjNmM4N2ItMTc2ZS0z ZjY1LWE0OTEtNDEzODBhNjcwODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/OKtUd0SM2koXKmbyWZCYdFWIVPt53H/JegoCYw60oREBuGfx41PQZ 2lCWW3vPKeOYSPaY+4Q0APtAcA/acHGvjH7ahUrxDQ6bKTz6vraNLXVclSiLWQYb xpWqd0B1gTjy6e6PJkncx/Qe6Xxl5dN12Gg1zImhZ+qHtn3bzbXKPCvu/8bi3vxc I2C4NV1doHwTlHlVq8pWPopwRWLNp/zQJqb/g9sczigyrGs+dAFVEfrv558yPmcU Z1MfqNzkhA8HxWLdsfgzEOndnBTlSnm2WMhCd/y9TM3IuFDW9r1YfDDpTic0HuMw R7rA4WUO2cS5XngffuDHEXqJNDbDNpI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:51 2025 by rpki-client