$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffe746d9-a4f5-3bfa-8324-f6cfd7a3d580.roa File: ffe746d9-a4f5-3bfa-8324-f6cfd7a3d580.roa (raw, json) Hash identifier: 7O0JFWv9arwclRq0u3JkibBRl9S3t8hFt7UgKTmcnW4= Subject key identifier: B5:88:7E:97:14:18:91:29:90:6E:1A:A0:FC:E5:10:80:C7:58:F5:F6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58156A99FB1BC817A284680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffe746d9-a4f5-3bfa-8324-f6cfd7a3d580.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.21.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:56:a9:9f:b1:bc:81:7a:28:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=0485e57e-d2e8-4ced-a78c-69cf11df58b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c1:2d:8d:35:03:35:90:b1:57:2a:0a:c6:c4: 13:0f:40:17:8b:60:32:59:fc:7f:a7:eb:a0:0c:9e: c7:47:3b:97:c4:fa:13:10:ae:0f:ce:cc:62:f2:2b: 60:26:9e:19:f7:02:f3:69:e2:ba:62:12:ff:20:14: 81:ea:97:63:54:73:a6:69:b8:f4:d8:5d:8b:18:33: d7:6a:96:84:58:01:eb:94:8a:6a:e9:1a:ee:9e:bd: 82:8b:5a:2b:72:7d:16:38:2e:07:b8:da:9d:4b:d8: 76:b7:5f:88:cf:2e:9b:22:db:c3:ac:07:c8:b0:ea: ac:d2:bd:ba:3b:b8:f9:66:fe:bb:37:c4:86:af:ef: 80:4e:2f:6e:9c:60:99:1b:65:33:b4:3c:42:e8:90: e6:20:ce:0a:99:32:51:77:18:02:4a:20:40:33:3d: d6:be:66:cc:78:80:1f:ad:3f:d0:c6:cf:4f:55:87: 10:98:b8:fc:05:0f:1c:94:76:83:cd:18:aa:bb:95: 40:ae:69:31:e8:16:47:1d:60:9f:60:43:48:9d:9b: 85:6c:0d:7f:98:35:94:56:bc:6d:35:14:18:79:c1: dd:c5:0e:8e:94:d6:b5:78:de:c0:aa:d9:7f:f6:8f: 98:60:0c:56:6c:10:d2:e5:7c:2d:7b:02:ba:31:2e: 1d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:88:7E:97:14:18:91:29:90:6E:1A:A0:FC:E5:10:80:C7:58:F5:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffe746d9-a4f5-3bfa-8324-f6cfd7a3d580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:9b:7f:3f:78:ea:ca:31:5f:bd:0b:9a:e5:f8:6a:7e:42:f9: d3:7b:91:0e:c0:80:d2:2a:20:ce:a8:c5:7a:7b:18:6e:43:40: 53:70:a0:b4:75:29:8e:0f:bc:e7:f8:e0:66:66:19:5b:0b:8a: 50:4e:7a:56:75:e9:98:7e:f0:00:0c:59:3b:94:3e:64:f4:5f: 30:d8:ea:e4:8a:5d:b1:2a:00:55:c9:22:aa:d2:26:67:86:d7: e3:74:4b:cc:9d:d9:5c:ff:a2:57:51:0a:db:de:84:2a:4b:45: 14:ef:ea:dc:4d:4e:5a:86:69:a2:5f:b0:48:14:5c:56:72:f0: c5:95:95:d0:0d:96:f0:ec:df:68:67:10:4e:02:cb:a3:15:77: e8:9a:6e:4b:d7:51:cd:00:6b:ed:85:aa:64:f3:08:66:09:db: 0b:3d:b7:21:3b:ad:92:85:72:c5:54:a3:f4:79:b0:a3:7b:a9: 89:22:e7:77:e6:e2:65:39:9d:91:bc:76:f4:9c:8c:98:0b:7d: 9b:3f:c9:15:41:27:5c:e2:92:10:ab:9e:35:13:7a:d3:07:e0: 21:39:f5:31:13:bb:36:d6:5c:ee:8e:06:71:5c:bc:f5:f5:94: 40:8e:f7:ca:ad:37:9e:61:64:95:3e:0f:f1:de:94:3f:27:3f: 19:a3:04:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVapn7G8gXooRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MDQ4NWU1N2UtZDJlOC00Y2VkLWE3OGMtNjljZjExZGY1OGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8EtjTUDNZCxVyoKxsQTD0AXi2AyWfx/p+ug DJ7HRzuXxPoTEK4Pzsxi8itgJp4Z9wLzaeK6YhL/IBSB6pdjVHOmabj02F2LGDPX apaEWAHrlIpq6Rrunr2Ci1orcn0WOC4HuNqdS9h2t1+Izy6bItvDrAfIsOqs0r26 O7j5Zv67N8SGr++ATi9unGCZG2UztDxC6JDmIM4KmTJRdxgCSiBAMz3WvmbMeIAf rT/Qxs9PVYcQmLj8BQ8clHaDzRiqu5VArmkx6BZHHWCfYENInZuFbA1/mDWUVrxt NRQYecHdxQ6OlNa1eN7Aqtl/9o+YYAxWbBDS5XwtewK6MS4dGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWIfpcUGJEpkG4aoPzlEIDHWPX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmZlNzQ2ZDktYTRmNS0z YmZhLTgzMjQtZjZjZmQ3YTNkNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBUVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGybfz946soxX70LmuX4an5C+dN7kQ7AgNIqIM6oxXp7GG5DQFNwoLR1 KY4PvOf44GZmGVsLilBOelZ16Zh+8AAMWTuUPmT0XzDY6uSKXbEqAFXJIqrSJmeG 1+N0S8yd2Vz/oldRCtvehCpLRRTv6txNTlqGaaJfsEgUXFZy8MWVldANlvDs32hn EE4Cy6MVd+iabkvXUc0Aa+2FqmTzCGYJ2ws9tyE7rZKFcsVUo/R5sKN7qYki53fm 4mU5nZG8dvScjJgLfZs/yRVBJ1zikhCrnjUTetMH4CE59TETuzbWXO6OBnFcvPX1 lECO98qtN55hZJU+D/HelD8nPxmjBPw= -----END CERTIFICATE-----Generated at Sat Apr 12 02:34:33 2025 by rpki-client