$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b20849d-7deb-343b-a92f-51032655f0a5.roa File: 2b20849d-7deb-343b-a92f-51032655f0a5.roa (raw, json) Hash identifier: VhzHkp2BOTJlzEgK5l7tvgeH2ik1z5OAHT/AbXn0Pdk= Subject key identifier: 3A:28:6D:09:62:92:09:39:C6:63:23:24:A4:64:F0:BF:2E:4D:58:3F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA51F0A955ED8E8666C080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b20849d-7deb-343b-a92f-51032655f0a5.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 40306 IP address blocks: 184.20.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:51:f0:a9:55:ed:8e:86:66:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=02b5f179-39fb-4b30-a71b-f3d04aab9ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a0:61:b9:08:a3:36:b2:f3:e2:4a:77:88:13: 82:da:ed:1e:f7:ca:9f:4c:06:67:65:ec:47:f9:32: de:59:ed:a1:fd:af:98:29:4f:15:a9:eb:e1:a3:e7: a5:09:80:c9:31:0d:c0:3b:f5:71:bd:f7:f0:71:f3: 63:78:2c:82:e2:d6:57:8f:ba:11:c1:a4:03:a3:41: 63:fa:76:1a:59:b3:dd:fd:3f:5d:93:79:7d:83:b8: 30:f5:18:31:66:32:38:8d:c8:ed:52:dc:58:fa:83: fb:a1:cc:db:8a:10:05:d1:a7:8a:5a:f8:0c:01:6e: 9b:aa:e6:f5:f7:4b:dc:17:9c:62:7f:8e:ef:1d:8c: 02:f3:b0:2d:66:e0:60:81:0a:17:c8:c8:dd:5b:10: d8:bf:c7:c6:85:70:cc:65:a8:20:67:5f:c7:9a:75: 40:07:62:06:0c:1d:54:4b:ae:8f:e2:65:36:86:95: 87:18:f3:4e:4e:fb:84:77:c8:52:7f:65:d5:30:2d: c2:10:53:be:0e:f9:7c:2e:c3:74:c1:c4:ec:58:e2: 28:c7:b1:aa:03:91:ec:a3:ba:18:d0:00:c9:a3:37: 07:19:e6:2d:20:c1:65:10:7a:f6:d7:a5:82:54:80: 4d:2d:87:9e:0e:e7:b2:e6:84:0c:aa:8a:74:0e:c2: 38:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:28:6D:09:62:92:09:39:C6:63:23:24:A4:64:F0:BF:2E:4D:58:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b20849d-7deb-343b-a92f-51032655f0a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:6d:f7:fc:36:d1:b5:e5:88:69:b4:bb:26:b3:c2:a3:72:cb: 88:71:df:1c:cf:98:51:00:63:41:1f:95:88:b5:a8:98:28:27: b8:b3:30:74:0d:90:ee:5c:54:f9:42:f0:5d:90:8e:40:8f:9c: 49:e1:94:50:62:98:df:56:61:37:4b:a6:bf:d7:2f:db:cb:6a: c3:4a:0d:b0:4c:86:ce:4d:a8:cf:79:0d:7d:52:4d:e2:95:36: eb:25:0d:28:d6:b8:ae:ea:c2:94:05:c4:c6:2f:18:e0:b6:9c: 2f:25:03:aa:1e:db:60:1a:bb:37:81:d4:33:f1:ef:b5:d6:fc: c7:42:79:7f:73:4c:cd:f6:d3:be:51:00:63:98:3a:86:28:d7: d5:d0:9c:db:9e:8c:dc:4e:58:c9:64:5f:c5:31:d8:ef:ea:30: 97:94:98:ff:99:4a:d4:68:66:2f:3c:09:78:83:3f:b8:cc:32: d9:fa:d2:6c:8f:44:21:f3:48:d6:25:c7:67:df:8b:94:9f:a1: 45:be:da:34:97:ce:26:ed:2e:56:68:35:a1:fa:7c:67:db:56: 0e:25:92:04:e9:88:e8:18:21:36:bb:07:96:16:b3:78:ee:69: 14:bd:88:b3:06:16:14:6f:bc:aa:ab:f7:0b:51:b5:5d:89:42: 07:6c:17:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulHwqVXtjoZmwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDJiNWYxNzktMzlmYi00YjMwLWE3MWItZjNkMDRhYWI5Y2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaBhuQijNrLz4kp3iBOC2u0e98qfTAZnZexH +TLeWe2h/a+YKU8Vqevho+elCYDJMQ3AO/VxvffwcfNjeCyC4tZXj7oRwaQDo0Fj +nYaWbPd/T9dk3l9g7gw9RgxZjI4jcjtUtxY+oP7oczbihAF0aeKWvgMAW6bqub1 90vcF5xif47vHYwC87AtZuBggQoXyMjdWxDYv8fGhXDMZaggZ1/HmnVAB2IGDB1U S66P4mU2hpWHGPNOTvuEd8hSf2XVMC3CEFO+Dvl8LsN0wcTsWOIox7GqA5Hso7oY 0ADJozcHGeYtIMFlEHr216WCVIBNLYeeDuey5oQMqop0DsI4HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoobQlikgk5xmMjJKRk8L8uTVg/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmIyMDg0OWQtN2RlYi0z NDNiLWE5MmYtNTEwMzI2NTVmMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBQdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMpt9/w20bXliGm0uyazwqNyy4hx3xzPmFEAY0EflYi1qJgoJ7izMHQN kO5cVPlC8F2QjkCPnEnhlFBimN9WYTdLpr/XL9vLasNKDbBMhs5NqM95DX1STeKV NuslDSjWuK7qwpQFxMYvGOC2nC8lA6oe22AauzeB1DPx77XW/MdCeX9zTM32075R AGOYOoYo19XQnNuejNxOWMlkX8Ux2O/qMJeUmP+ZStRoZi88CXiDP7jMMtn60myP RCHzSNYlx2ffi5SfoUW+2jSXzibtLlZoNaH6fGfbVg4lkgTpiOgYITa7B5YWs3ju aRS9iLMGFhRvvKqr9wtRtV2JQgdsF1A= -----END CERTIFICATE-----Generated at Fri May 9 02:43:59 2025 by rpki-client