$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd68d46d-6e2f-37ff-b32a-084e6db98637.roa File: cd68d46d-6e2f-37ff-b32a-084e6db98637.roa (raw, json) Hash identifier: uIrrEA7vrPVDZNwXhoVMaRa/GRWUL8qp5wbJQdf7Sls= Subject key identifier: DF:A3:5E:FB:9D:B0:86:5C:7B:93:CC:40:EE:FD:B2:13:9D:07:4E:B5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581528B3CB23CC66329A7C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd68d46d-6e2f-37ff-b32a-084e6db98637.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.20.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:52:8b:3c:b2:3c:c6:63:29:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=c6feba7d-e0a4-4e05-8810-8a4bd97c46ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c0:03:73:d8:0a:d3:99:0a:fd:b2:d6:96:0c: d5:0e:7d:62:d7:04:59:a7:ab:38:e8:56:4e:ce:e7: 51:92:57:12:e0:fe:7e:f2:20:ba:ec:44:68:41:f1: 56:70:b6:08:df:52:5d:ce:0b:e2:7b:d5:cb:68:f1: 60:b2:c4:26:2b:b7:5c:d3:8a:d3:d3:3a:2c:21:be: 16:2c:79:06:0d:b6:d5:05:f5:2f:ed:e1:f4:ea:84: 3b:b1:1c:45:3d:58:97:c1:2c:2e:01:1e:cd:aa:40: 32:e9:31:45:9a:36:40:79:c1:9e:02:2e:17:f8:4c: 55:98:d1:c0:60:d6:11:19:a8:f8:8a:69:6f:6a:43: 2e:28:11:47:c2:04:6a:12:82:2f:54:c0:64:0b:39: b5:38:5e:66:ba:84:99:7b:c1:01:13:0f:51:89:b6: cd:15:23:d5:00:80:b9:09:c1:f8:56:ba:d3:90:e8: a4:f2:49:33:16:9b:cb:53:8e:ed:71:11:55:04:c2: 23:b6:92:d1:64:1f:8d:c1:00:60:87:a9:89:aa:8a: d1:6e:d1:87:a8:59:39:d9:d1:5b:9b:c8:4f:93:ad: 2c:63:ff:01:0a:45:7d:d5:0b:58:ca:81:f1:38:a8: 36:70:f9:6c:4b:71:91:53:c6:e2:e8:6a:0a:0d:e3: ec:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A3:5E:FB:9D:B0:86:5C:7B:93:CC:40:EE:FD:B2:13:9D:07:4E:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd68d46d-6e2f-37ff-b32a-084e6db98637.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:a9:d9:15:c3:8e:ab:a3:22:e6:e2:8e:fd:fa:de:29:f9:75: 5f:06:24:e5:35:33:08:d9:58:ca:6d:cb:d6:84:b5:50:a1:75: 14:e8:5b:69:5c:79:49:db:5e:fe:0f:c7:1d:07:67:db:77:b9: e8:1e:99:3e:63:75:cd:88:56:fa:88:bc:c9:05:a4:6f:49:d8: 07:3b:84:eb:3d:33:98:76:26:3b:6e:b1:36:1a:51:5e:d8:54: bf:62:6e:b3:25:f7:b5:89:4d:54:b3:97:c0:51:7d:4f:71:ce: c6:5f:a3:51:98:4b:02:aa:ab:bf:0e:92:df:d7:fd:1b:bb:76: 8d:7e:2f:c9:bb:cd:bc:db:05:6b:41:9c:a2:f7:ab:c9:dd:db: 61:12:9b:33:79:55:e6:16:26:73:55:3f:f5:2e:1c:2e:df:92: 5d:1f:64:9f:84:e5:61:ef:ec:7d:38:ab:f5:91:12:2f:83:fc: fd:9b:03:ac:31:df:db:32:cb:6a:24:f5:fd:d9:d5:19:07:d9: f0:ae:53:11:a1:3b:e9:8b:56:5d:2c:d1:05:97:c6:cd:11:bd: 85:78:64:67:b3:d6:0f:1a:5f:9d:ab:20:4c:77:2f:66:4b:cb: 0b:0b:1c:cf:81:c9:b8:4d:85:89:de:b2:7f:72:bc:04:dc:3a: ad:75:64:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVKLPLI8xmMpp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YzZmZWJhN2QtZTBhNC00ZTA1LTg4MTAtOGE0YmQ5N2M0NmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsADc9gK05kK/bLWlgzVDn1i1wRZp6s46FZO zudRklcS4P5+8iC67ERoQfFWcLYI31Jdzgvie9XLaPFgssQmK7dc04rT0zosIb4W LHkGDbbVBfUv7eH06oQ7sRxFPViXwSwuAR7NqkAy6TFFmjZAecGeAi4X+ExVmNHA YNYRGaj4imlvakMuKBFHwgRqEoIvVMBkCzm1OF5muoSZe8EBEw9RibbNFSPVAIC5 CcH4VrrTkOik8kkzFpvLU47tcRFVBMIjtpLRZB+NwQBgh6mJqorRbtGHqFk52dFb m8hPk60sY/8BCkV91QtYyoHxOKg2cPlsS3GRU8bi6GoKDePs7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+jXvudsIZce5PMQO79shOdB061MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2Q2OGQ0NmQtNmUyZi0z N2ZmLWIzMmEtMDg0ZTZkYjk4NjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBRWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+p2RXDjqujIubijv363in5dV8GJOU1MwjZWMpty9aEtVChdRToW2lc eUnbXv4Pxx0HZ9t3uegemT5jdc2IVvqIvMkFpG9J2Ac7hOs9M5h2JjtusTYaUV7Y VL9ibrMl97WJTVSzl8BRfU9xzsZfo1GYSwKqq78Okt/X/Ru7do1+L8m7zbzbBWtB nKL3q8nd22ESmzN5VeYWJnNVP/UuHC7fkl0fZJ+E5WHv7H04q/WREi+D/P2bA6wx 39syy2ok9f3Z1RkH2fCuUxGhO+mLVl0s0QWXxs0RvYV4ZGez1g8aX52rIEx3L2ZL ywsLHM+BybhNhYnesn9yvATcOq11ZHI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:03 2025 by rpki-client