$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2b5505a-2892-3cc5-afb5-4b96b4fe5976.roa File: c2b5505a-2892-3cc5-afb5-4b96b4fe5976.roa (raw, json) Hash identifier: pfC+8GQ74jU8ZNIEYxs2F4qlRJGf/NQszkezpgw/OcE= Subject key identifier: 99:D0:F1:FA:25:23:39:5D:66:42:F9:A6:FD:0F:C5:AA:32:99:AF:53 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581E457F5436CF2F5021158 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2b5505a-2892-3cc5-afb5-4b96b4fe5976.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.20.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:e4:57:f5:43:6c:f2:f5:02:11:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=4349fd3f-0253-4c7b-b15e-b5a60612589e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:7a:84:09:6d:21:b6:84:ee:d0:1b:2c:a5: 37:57:2e:31:a4:e7:0f:6b:fb:6f:76:9b:69:92:74: 5b:ce:8c:1f:09:df:fe:e6:62:7f:ce:75:77:c6:01: 33:23:3a:7b:6e:29:40:41:c0:56:5d:df:4c:17:ab: 36:4d:97:5c:33:1c:1b:ec:09:79:ae:b2:a7:c4:40: 4a:82:20:d7:bb:ad:a2:75:5e:da:7e:c7:b9:8f:27: 3c:59:d2:39:a7:16:4a:fc:b9:61:a1:59:b4:5b:50: 1e:86:d4:ef:cf:9e:b3:9f:79:e0:11:78:3e:4b:2e: fa:ad:3e:96:c2:11:9a:76:97:a6:93:51:61:e6:ff: 73:01:b5:bb:9c:16:b9:36:8e:38:ef:84:63:20:f3: 21:83:6d:82:61:42:f2:6a:e3:cd:9b:08:2e:29:25: 9f:43:69:35:28:23:f7:ce:7b:3b:d8:86:42:4a:1e: a9:09:d7:73:89:78:93:7a:4b:99:f4:8b:53:72:fc: 0b:2e:65:5c:b5:a1:ee:c0:b5:fb:4a:f0:ed:5d:ba: 52:1e:1c:76:d7:cb:d7:27:63:19:4e:a0:ef:b8:83: 74:e1:84:b7:23:dd:10:18:c4:a6:90:e4:10:bb:50: aa:f3:bf:d3:d4:9d:d7:f6:82:63:46:4e:99:7b:21: eb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D0:F1:FA:25:23:39:5D:66:42:F9:A6:FD:0F:C5:AA:32:99:AF:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2b5505a-2892-3cc5-afb5-4b96b4fe5976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8b:4f:71:fb:78:ea:e9:ad:ca:2f:8c:88:01:0b:24:e2:a5: af:26:77:fc:04:da:41:9e:d8:a2:1c:1a:ff:c9:35:74:ad:0f: 87:14:ac:5b:42:b2:b7:1c:41:46:3b:ba:5e:3e:1c:98:ec:70: 41:49:e7:ac:03:06:27:a8:88:5c:74:89:21:58:d6:c1:67:67: 3f:6b:28:de:ba:95:78:63:b9:be:e4:df:23:a1:75:57:2d:3e: 7c:d1:15:69:70:99:29:e8:5f:05:e3:95:f9:ef:f6:5d:fb:d5: a2:f0:f9:96:2c:4a:37:04:22:5c:fd:80:28:1b:cd:e8:3e:fe: 8f:49:ba:43:fa:a9:7e:fa:5c:b9:b0:df:71:a7:aa:4c:91:22: 9a:bb:75:1b:28:87:45:be:50:bc:22:8e:7e:9e:56:30:19:ff: a3:30:58:f5:79:db:1c:26:e5:d8:9c:13:48:c1:e3:3e:5c:6a: e2:c4:71:86:35:bc:a8:7a:ad:0a:0a:bd:ee:7c:e5:e0:3b:19: 79:28:c8:8b:99:6d:36:50:b1:80:0e:62:24:d6:f9:bb:3d:84: e6:92:a5:45:10:4a:38:28:e9:e5:5a:b0:03:0b:0f:cd:f6:8d: 1a:99:f0:91:7c:a9:cb:14:41:7b:f0:d8:72:72:32:d5:7b:6a: e0:95:60:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgeRX9UNs8vUCEVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDM0OWZkM2YtMDI1My00YzdiLWIxNWUtYjVhNjA2MTI1ODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ96hAltIbaE7tAbLKU3Vy4xpOcPa/tvdptp knRbzowfCd/+5mJ/znV3xgEzIzp7bilAQcBWXd9MF6s2TZdcMxwb7Al5rrKnxEBK giDXu62idV7afse5jyc8WdI5pxZK/LlhoVm0W1AehtTvz56zn3ngEXg+Sy76rT6W whGadpemk1Fh5v9zAbW7nBa5No4474RjIPMhg22CYULyauPNmwguKSWfQ2k1KCP3 zns72IZCSh6pCddziXiTekuZ9ItTcvwLLmVctaHuwLX7SvDtXbpSHhx218vXJ2MZ TqDvuIN04YS3I90QGMSmkOQQu1Cq87/T1J3X9oJjRk6ZeyHr9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnQ8folIzldZkL5pv0Pxaoyma9TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzJiNTUwNWEtMjg5Mi0z Y2M1LWFmYjUtNGI5NmI0ZmU1OTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBR5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqLT3H7eOrprcovjIgBCyTipa8md/wE2kGe2KIcGv/JNXStD4cUrFtC srccQUY7ul4+HJjscEFJ56wDBieoiFx0iSFY1sFnZz9rKN66lXhjub7k3yOhdVct PnzRFWlwmSnoXwXjlfnv9l371aLw+ZYsSjcEIlz9gCgbzeg+/o9JukP6qX76XLmw 33GnqkyRIpq7dRsoh0W+ULwijn6eVjAZ/6MwWPV52xwm5dicE0jB4z5cauLEcYY1 vKh6rQoKve585eA7GXkoyIuZbTZQsYAOYiTW+bs9hOaSpUUQSjgo6eVasAMLD832 jRqZ8JF8qcsUQXvw2HJyMtV7auCVYHo= -----END CERTIFICATE-----Generated at Sat Apr 12 00:02:57 2025 by rpki-client