$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cdae5772-6506-3942-8c26-88e625a98419.roa File: cdae5772-6506-3942-8c26-88e625a98419.roa (raw, json) Hash identifier: 36XvV7WuH8X6I+j1iGpbyyhoHFULvn7OuVv6N0xVtG4= Subject key identifier: C8:A6:51:71:DB:6C:81:86:1F:C9:29:96:E1:51:BF:50:2F:F7:FA:D0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581608977CFDDF740034D80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cdae5772-6506-3942-8c26-88e625a98419.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.62.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:60:89:77:cf:dd:f7:40:03:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=ea2cb65b-b2c4-4f58-87d9-4fe3cc4dbb24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:62:1b:c1:7b:80:f6:16:1e:cb:c2:2c:f7:66: 61:89:6c:a6:ba:2a:78:a0:1e:29:1f:4f:3f:6b:7e: aa:93:15:dc:1f:75:48:ee:d1:4d:f1:1c:ee:83:dc: b5:f1:c5:58:d5:38:02:7e:0a:d1:34:9b:21:4a:a5: 3c:a3:99:22:cb:4d:b4:4f:33:63:6f:8a:01:3b:7a: ae:42:73:ef:29:c5:cf:28:42:3c:c6:5f:13:2a:86: d1:d6:02:73:02:d7:52:2e:25:a5:63:ad:4f:1d:9e: f1:10:ed:1d:11:5b:16:00:35:eb:16:33:60:0a:f0: 6f:3a:e7:f2:85:dc:53:94:2c:47:df:d9:bc:ee:02: e2:c8:d4:5f:3f:bf:7f:1a:bc:16:eb:af:21:96:fc: b0:33:09:f4:75:97:09:e8:3c:1e:67:40:99:67:ae: 60:16:6f:d8:68:58:1d:35:dd:6b:34:12:ad:f7:ba: ca:02:bf:00:4a:80:68:36:9d:98:53:06:ed:95:69: d2:b1:2e:9a:95:b6:a2:b7:c0:06:21:de:eb:f3:df: 8c:31:52:63:52:94:5f:e7:47:26:87:dd:2a:a6:5a: 4c:d6:55:10:8c:75:53:2b:c8:64:df:4a:ee:4b:09: ec:4c:69:9b:72:fe:7e:3b:32:26:6c:da:02:40:9a: 1a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A6:51:71:DB:6C:81:86:1F:C9:29:96:E1:51:BF:50:2F:F7:FA:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cdae5772-6506-3942-8c26-88e625a98419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.62.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ea:44:d8:d0:0a:d8:45:8d:35:35:3d:54:a0:43:73:5b:15: 3e:81:da:a6:47:0a:3e:e4:16:5f:cf:bc:fa:ff:5d:85:9d:ef: f9:fa:ea:eb:e3:47:88:15:de:f9:d5:95:eb:43:04:c0:03:ec: bb:0a:8f:85:8f:21:d1:10:5b:7b:4f:84:04:e3:e6:c1:d6:02: 2a:83:98:86:32:48:fa:3d:46:2d:96:d6:3b:29:4c:02:a6:45: c2:c9:9f:87:c1:7f:62:91:a1:40:49:18:6d:e1:c1:1a:d3:2c: 1b:d9:95:c4:35:4e:d9:83:d7:58:cd:1e:b2:89:13:b2:4b:ee: b4:b9:10:2e:5d:41:a0:0c:5a:8e:0e:e5:e4:b8:e5:e8:0d:58: 75:e0:9f:4d:83:96:49:fc:05:c1:d6:a5:c0:9d:b1:60:93:2f: 12:6c:40:fb:31:14:2c:46:f5:dd:87:69:de:6f:38:fb:a8:fa: ec:f8:91:81:23:e8:16:be:14:e9:85:24:23:e9:48:ad:72:8d: f3:5c:40:36:46:c2:4e:75:f5:d3:b9:f3:fe:ef:d0:c8:cd:d9: ea:31:e4:13:30:7f:38:87:f5:f4:ff:ff:e7:50:05:45:a7:51: 69:66:f1:04:80:31:ad:e9:8d:c9:20:a7:52:f3:f0:e7:86:8d: 7d:83:c4:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgWCJd8/d90ADTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWEyY2I2NWItYjJjNC00ZjU4LTg3ZDktNGZlM2NjNGRiYjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGIbwXuA9hYey8Is92ZhiWymuip4oB4pH08/ a36qkxXcH3VI7tFN8Rzug9y18cVY1TgCfgrRNJshSqU8o5kiy020TzNjb4oBO3qu QnPvKcXPKEI8xl8TKobR1gJzAtdSLiWlY61PHZ7xEO0dEVsWADXrFjNgCvBvOufy hdxTlCxH39m87gLiyNRfP79/GrwW668hlvywMwn0dZcJ6DweZ0CZZ65gFm/YaFgd Nd1rNBKt97rKAr8ASoBoNp2YUwbtlWnSsS6albait8AGId7r89+MMVJjUpRf50cm h90qplpM1lUQjHVTK8hk30ruSwnsTGmbcv5+OzImbNoCQJoaHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMimUXHbbIGGH8kpluFRv1Av9/rQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2RhZTU3NzItNjUwNi0z OTQyLThjMjYtODhlNjI1YTk4NDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD57MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3qRNjQCthFjTU1PVSgQ3NbFT6B2qZHCj7kFl/PvPr/XYWd7/n66uvj R4gV3vnVletDBMAD7LsKj4WPIdEQW3tPhATj5sHWAiqDmIYySPo9Ri2W1jspTAKm RcLJn4fBf2KRoUBJGG3hwRrTLBvZlcQ1TtmD11jNHrKJE7JL7rS5EC5dQaAMWo4O 5eS45egNWHXgn02Dlkn8BcHWpcCdsWCTLxJsQPsxFCxG9d2Had5vOPuo+uz4kYEj 6Ba+FOmFJCPpSK1yjfNcQDZGwk519dO58/7v0MjN2eox5BMwfziH9fT//+dQBUWn UWlm8QSAMa3pjckgp1Lz8OeGjX2DxGQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:14 2025 by rpki-client