$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16342bc6-fd21-3e7a-83f5-a3d4be105daf.roa File: 16342bc6-fd21-3e7a-83f5-a3d4be105daf.roa (raw, json) Hash identifier: oQ6lpFbyCBAjtxoIZBwYQPnJ+3IWFDzoTv7v0HNiAWM= Subject key identifier: 14:5C:AB:0D:C2:74:B5:4E:12:33:21:D3:C2:56:31:0C:67:33:6F:4F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9D362E356E3898588C00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16342bc6-fd21-3e7a-83f5-a3d4be105daf.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.20.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:9d:36:2e:35:6e:38:98:58:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7542151b-6579-49d3-884a-6e98b1937f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8b:6b:c9:ab:19:91:e8:13:85:4e:e3:85:db: 69:04:f6:e3:44:09:26:8c:da:ca:c0:51:97:0b:3c: 01:b6:78:dd:ba:4a:73:ad:e2:81:c7:8f:d4:91:06: 2d:3a:f0:dc:8d:3d:f4:f2:42:8a:83:c9:38:1c:db: d1:b8:e1:e3:05:a9:f3:7f:07:7d:7e:fd:91:f2:94: 9f:b6:76:4e:63:7f:e0:b1:1f:0c:13:c2:92:52:3c: 9a:c4:2d:4d:45:fc:de:66:86:49:66:a8:55:48:7c: 6c:10:d9:ed:bc:6e:c9:2a:3c:04:3c:fa:2e:f8:3a: 06:09:26:a9:02:dc:c0:43:ad:8f:bf:59:76:cb:ba: da:c3:c9:68:94:cb:aa:d3:f0:64:dd:99:1d:70:c1: 76:39:e8:b7:a1:66:45:49:e8:e1:17:ee:2d:75:d2: 74:48:62:b2:15:14:64:ef:16:ba:09:9b:3a:0c:9a: 92:cb:9b:87:b7:bd:f8:aa:9f:75:18:d6:8e:6d:bd: 43:78:a8:5e:eb:5e:ad:cf:0a:41:8f:e1:3a:b4:91: 22:fa:fd:10:bd:bf:82:61:91:bb:c5:e3:23:1d:f3: c0:94:88:1c:9e:17:10:a3:ad:35:89:97:58:c3:a0: ff:3a:c6:bd:59:74:0c:ff:7a:4f:12:ce:ef:ef:1e: 45:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5C:AB:0D:C2:74:B5:4E:12:33:21:D3:C2:56:31:0C:67:33:6F:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16342bc6-fd21-3e7a-83f5-a3d4be105daf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:8a:79:10:6c:01:8d:9f:c4:dd:48:cc:ef:ab:b8:6f:67:c3: 1b:8e:d1:67:4e:50:66:74:8d:ad:e7:e4:51:f2:b8:56:71:cc: 81:a0:f5:a4:6f:bd:3c:06:1d:91:82:36:0a:77:22:74:74:bb: a8:cc:f7:de:2f:d3:65:25:ff:21:4a:db:d6:25:47:be:4e:29: e5:d8:41:16:d2:62:b1:37:ed:6d:d1:05:ce:d6:4e:57:30:16: c0:6d:34:52:3a:01:32:22:17:fc:e8:a4:01:50:79:23:69:a6: 83:94:f5:4a:9b:72:94:e4:d4:0b:82:aa:b4:a1:38:68:b8:93: 11:12:5e:1c:e7:4f:1c:2b:4e:57:41:1a:e4:7b:51:19:41:d4: 39:e8:1e:fa:29:50:47:a0:3a:24:07:ce:7b:92:82:d2:79:ce: 1e:8b:78:cd:f5:3c:4d:e3:db:ed:88:d6:68:7e:29:a8:63:aa: f2:d1:bc:fa:ae:12:92:a8:38:03:74:29:74:2a:f6:01:3f:88: a8:e0:3b:3e:4c:66:f4:35:0f:74:9e:4b:f3:c5:9f:50:17:9f: 94:3d:ce:a3:55:38:a3:31:71:00:c9:5f:e2:3a:d4:a8:17:d2: f5:06:3d:b3:d5:fe:37:1c:ac:d2:75:c3:98:9c:ff:1e:0b:4c: 69:8c:2c:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkup02LjVuOJhYjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzU0MjE1MWItNjU3OS00OWQzLTg4NGEtNmU5OGIxOTM3ZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYtryasZkegThU7jhdtpBPbjRAkmjNrKwFGX CzwBtnjdukpzreKBx4/UkQYtOvDcjT308kKKg8k4HNvRuOHjBanzfwd9fv2R8pSf tnZOY3/gsR8ME8KSUjyaxC1NRfzeZoZJZqhVSHxsENntvG7JKjwEPPou+DoGCSap AtzAQ62Pv1l2y7raw8lolMuq0/Bk3ZkdcMF2Oei3oWZFSejhF+4tddJ0SGKyFRRk 7xa6CZs6DJqSy5uHt734qp91GNaObb1DeKhe616tzwpBj+E6tJEi+v0Qvb+CYZG7 xeMjHfPAlIgcnhcQo601iZdYw6D/Osa9WXQM/3pPEs7v7x5FZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRcqw3CdLVOEjMh08JWMQxnM29PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTYzNDJiYzYtZmQyMS0z ZTdhLTgzZjUtYTNkNGJlMTA1ZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2KeRBsAY2fxN1IzO+ruG9nwxuO0WdOUGZ0ja3n5FHyuFZxzIGg9aRv vTwGHZGCNgp3InR0u6jM994v02Ul/yFK29YlR75OKeXYQRbSYrE37W3RBc7WTlcw FsBtNFI6ATIiF/zopAFQeSNppoOU9UqbcpTk1AuCqrShOGi4kxESXhznTxwrTldB GuR7URlB1DnoHvopUEegOiQHznuSgtJ5zh6LeM31PE3j2+2I1mh+KahjqvLRvPqu EpKoOAN0KXQq9gE/iKjgOz5MZvQ1D3SeS/PFn1AXn5Q9zqNVOKMxcQDJX+I61KgX 0vUGPbPV/jccrNJ1w5ic/x4LTGmMLNc= -----END CERTIFICATE-----Generated at Tue May 6 03:06:57 2025 by rpki-client