$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d32fea95-f37c-30db-ad3e-f242a66abbc6.roa File: d32fea95-f37c-30db-ad3e-f242a66abbc6.roa (raw, json) Hash identifier: n5TIWAHwoU2FibgpApm4HmvEA/IuY7E8WJ4+vLRtE4o= Subject key identifier: 5A:AE:AB:83:5D:16:C1:BC:F6:05:49:9C:27:FE:68:8D:EE:83:7D:1E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58154E1B71BE3F39456FEC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d32fea95-f37c-30db-ad3e-f242a66abbc6.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.20.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:54:e1:b7:1b:e3:f3:94:56:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=5f5516e3-88b9-4790-b095-5eb278e20429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:10:ae:08:fe:9b:5c:5d:b1:e6:9f:24:83:7e: da:85:16:e8:9f:78:bb:d0:8e:7e:2c:9d:ce:f1:36: e2:75:be:3b:3b:a5:99:4e:da:10:df:b0:81:fd:39: e5:4a:01:7d:31:cf:7b:b7:85:bc:a3:e0:a3:62:07: 19:e3:fe:03:d8:f8:c4:5e:d9:99:99:67:4f:54:5b: cf:5c:d3:b4:25:2e:5f:c6:2a:95:f6:4f:f2:c2:54: 7c:94:ae:3c:ba:48:d3:d2:81:14:9d:c1:66:be:47: 74:3e:c9:17:71:f3:16:3e:57:9e:ca:da:3e:ba:78: 1f:36:cb:0e:b3:8e:f9:d3:79:38:39:69:e8:09:bb: fa:4a:81:58:01:36:7a:86:92:e6:7c:e1:10:d2:0d: 7a:28:7b:b7:89:8e:7a:ad:9a:c2:0b:b5:79:d4:aa: 2d:bf:6c:bd:9c:25:71:9b:76:0a:55:c0:1f:9e:94: 34:03:5a:0c:b8:bf:b3:dd:1e:18:90:13:bd:0b:93: 36:3d:5e:a3:95:80:4b:28:3c:3f:99:83:c3:9b:47: bb:fa:b8:73:77:a3:00:00:22:6a:53:06:47:ec:5f: ef:c8:1d:fe:9b:73:68:9a:46:18:d8:cd:d0:d8:2b: 18:69:7c:56:85:8e:32:2c:8d:e9:0b:d5:24:c8:6f: fa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AE:AB:83:5D:16:C1:BC:F6:05:49:9C:27:FE:68:8D:EE:83:7D:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d32fea95-f37c-30db-ad3e-f242a66abbc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:cf:b1:c3:d3:d3:02:1b:cd:ee:86:6f:07:26:48:8a:5d:6c: 5a:af:4c:73:1c:8d:d4:18:12:f0:2a:61:a4:27:8a:ab:e5:97: 31:f9:40:95:12:cc:6b:0d:48:66:75:b0:72:e8:ed:88:9b:5a: 72:f5:2b:be:9a:9c:68:09:e9:ee:f3:5c:45:5e:a7:d1:4c:ca: 33:46:d7:0f:1d:f9:1a:38:ca:a1:c0:9f:af:d3:d5:28:99:d4: a5:c7:c8:0c:46:51:a4:96:fe:74:e7:34:59:48:1b:89:bb:ea: db:9e:8d:10:ea:97:80:93:07:d6:a4:74:bc:ad:4a:d1:79:8b: 04:7b:98:e0:cd:a9:49:81:00:e0:1d:98:8e:a8:a5:93:99:4c: ad:db:b5:55:9e:11:a4:67:fa:fe:42:ef:55:01:aa:a3:d6:38: cd:65:9a:8f:a2:cf:7a:63:b7:15:62:9b:60:dc:e9:3d:d0:5b: 49:b3:7c:1b:2d:ce:25:2d:da:d8:24:e7:00:7e:a3:8f:10:ea: ca:33:bf:ef:e6:83:f1:bf:4e:0f:b7:6e:f2:a2:02:31:41:cf: fd:7c:32:b9:df:52:eb:42:2e:d9:19:20:d9:db:a0:43:99:91: 71:a9:af:1e:72:3b:d3:e7:65:ce:68:f0:6c:eb:ea:7f:e1:b1: 08:77:b9:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVThtxvj85RW/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NWY1NTE2ZTMtODhiOS00NzkwLWIwOTUtNWViMjc4ZTIwNDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxCuCP6bXF2x5p8kg37ahRbon3i70I5+LJ3O 8Tbidb47O6WZTtoQ37CB/TnlSgF9Mc97t4W8o+CjYgcZ4/4D2PjEXtmZmWdPVFvP XNO0JS5fxiqV9k/ywlR8lK48ukjT0oEUncFmvkd0PskXcfMWPleeyto+ungfNssO s47503k4OWnoCbv6SoFYATZ6hpLmfOEQ0g16KHu3iY56rZrCC7V51Kotv2y9nCVx m3YKVcAfnpQ0A1oMuL+z3R4YkBO9C5M2PV6jlYBLKDw/mYPDm0e7+rhzd6MAACJq UwZH7F/vyB3+m3NomkYY2M3Q2CsYaXxWhY4yLI3pC9UkyG/6WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFquq4NdFsG89gVJnCf+aI3ug30eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDMyZmVhOTUtZjM3Yy0z MGRiLWFkM2UtZjI0MmE2NmFiYmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLPscPT0wIbze6GbwcmSIpdbFqvTHMcjdQYEvAqYaQniqvllzH5QJUS zGsNSGZ1sHLo7YibWnL1K76anGgJ6e7zXEVep9FMyjNG1w8d+Ro4yqHAn6/T1SiZ 1KXHyAxGUaSW/nTnNFlIG4m76tuejRDql4CTB9akdLytStF5iwR7mODNqUmBAOAd mI6opZOZTK3btVWeEaRn+v5C71UBqqPWOM1lmo+iz3pjtxVim2Dc6T3QW0mzfBst ziUt2tgk5wB+o48Q6sozv+/mg/G/Tg+3bvKiAjFBz/18MrnfUutCLtkZINnboEOZ kXGprx5yO9PnZc5o8Gzr6n/hsQh3uXU= -----END CERTIFICATE-----Generated at Fri Apr 11 23:37:58 2025 by rpki-client