$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3074b3d3-1a9a-32c8-b57f-b5c55c32b672.roa File: 3074b3d3-1a9a-32c8-b57f-b5c55c32b672.roa (raw, json) Hash identifier: +lue8kIjp+OWxvB6Dv+TZg0BKfSVv6nTny6B5xQqPp8= Subject key identifier: A7:93:21:6C:C5:B4:A9:02:A1:C5:94:54:A9:26:5C:27:2C:33:83:55 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAA54A47586164AEF78F40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3074b3d3-1a9a-32c8-b57f-b5c55c32b672.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:a5:4a:47:58:61:64:ae:f7:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1ec07c53-3c01-4ecc-a5cf-d26720e632f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cf:74:9d:b1:a8:a7:f9:7f:1a:d2:64:9d:04: 58:95:05:cc:68:cc:5a:7e:0d:df:5f:06:58:06:d2: 41:13:a7:94:46:ec:84:73:7c:b2:91:6c:a4:cf:06: d3:64:82:67:42:f4:4f:b4:38:e4:9c:cc:4e:e4:df: 2b:22:f9:e3:aa:8a:e4:e2:c6:c1:31:d2:41:25:86: 26:0f:b8:97:9e:69:21:f1:fe:ff:79:43:02:3b:4a: b1:64:1a:4b:ce:2c:62:2b:64:53:90:5e:08:d2:d9: 4f:30:0e:e2:46:06:6f:16:b7:a8:98:78:0f:d5:fd: f9:04:2d:47:11:a0:56:b3:a0:1a:c6:2c:e9:0a:cc: df:9b:d9:e4:68:aa:92:9c:94:e8:05:00:bb:b8:b2: eb:89:25:96:cd:93:ad:b8:0b:6e:03:6a:92:5a:37: 9a:06:f2:0a:06:c3:26:13:07:6e:7c:6a:88:5e:b3: ea:68:b6:6e:f1:4a:81:44:6f:4b:57:17:38:a4:0f: d6:25:cc:92:a9:00:e8:85:f7:13:c2:50:e8:94:ae: db:b3:61:0c:b9:be:ec:69:61:20:78:9b:51:5a:8f: 20:47:65:0c:cc:63:27:4e:50:3f:55:64:b8:f8:c6: 0d:56:34:6b:8f:2c:12:78:8d:3f:9c:6f:72:08:3d: 77:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:93:21:6C:C5:B4:A9:02:A1:C5:94:54:A9:26:5C:27:2C:33:83:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3074b3d3-1a9a-32c8-b57f-b5c55c32b672.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:7f:cd:ee:64:67:ff:6a:2f:47:64:e6:26:8a:61:a4:d8:6a: 13:92:c9:fa:da:cc:ba:0a:af:ed:ed:ef:2e:fa:ff:28:bf:f3: 1b:eb:23:5e:9e:88:b0:5d:95:65:9f:e3:4c:50:95:98:2f:8e: f6:6d:7b:02:3d:6a:ff:d1:c6:cf:68:14:1f:1a:f5:fe:1f:b7: 50:4d:4e:8e:86:73:2f:0d:00:da:2e:f0:96:9a:c5:e8:7d:d5: 03:19:90:72:ac:66:39:2b:04:3b:b2:2a:a2:14:4d:17:d6:d0: 20:64:2f:3b:7b:4b:9c:de:d0:21:43:91:f9:e8:ef:7a:41:75: 1d:92:46:33:b2:14:89:15:35:b7:c1:e9:21:1f:d0:fb:8f:6d: db:ee:ef:b5:33:60:b3:db:01:c0:6c:b1:67:a2:bb:17:44:5e: 55:90:a8:b0:d5:bb:0f:27:b0:7c:47:f0:fe:32:c6:0c:8d:92: 43:a0:cb:4f:a0:10:0b:21:6e:b8:5c:89:04:d2:b9:36:ab:80: cd:27:e6:1c:96:29:ef:90:04:d7:80:e7:92:8e:31:0f:b9:7c: 2e:6c:69:aa:0e:ac:9d:34:67:8b:3c:9a:c5:ac:99:a4:f2:80: 0f:32:22:4a:d7:e1:2b:d9:ad:26:d8:06:47:84:a2:8c:ab:05: ee:31:a9:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuqVKR1hhZK73j0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MWVjMDdjNTMtM2MwMS00ZWNjLWE1Y2YtZDI2NzIwZTYzMmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss90nbGop/l/GtJknQRYlQXMaMxafg3fXwZY BtJBE6eURuyEc3yykWykzwbTZIJnQvRPtDjknMxO5N8rIvnjqork4sbBMdJBJYYm D7iXnmkh8f7/eUMCO0qxZBpLzixiK2RTkF4I0tlPMA7iRgZvFreomHgP1f35BC1H EaBWs6AaxizpCszfm9nkaKqSnJToBQC7uLLriSWWzZOtuAtuA2qSWjeaBvIKBsMm EwdufGqIXrPqaLZu8UqBRG9LVxc4pA/WJcySqQDohfcTwlDolK7bs2EMub7saWEg eJtRWo8gR2UMzGMnTlA/VWS4+MYNVjRrjywSeI0/nG9yCD13+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeTIWzFtKkCocWUVKkmXCcsM4NVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzA3NGIzZDMtMWE5YS0z MmM4LWI1N2YtYjVjNTVjMzJiNjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ/ze5kZ/9qL0dk5iaKYaTYahOSyfrazLoKr+3t7y76/yi/8xvrI16e iLBdlWWf40xQlZgvjvZtewI9av/Rxs9oFB8a9f4ft1BNTo6Gcy8NANou8Jaaxeh9 1QMZkHKsZjkrBDuyKqIUTRfW0CBkLzt7S5ze0CFDkfno73pBdR2SRjOyFIkVNbfB 6SEf0PuPbdvu77UzYLPbAcBssWeiuxdEXlWQqLDVuw8nsHxH8P4yxgyNkkOgy0+g EAshbrhciQTSuTargM0n5hyWKe+QBNeA55KOMQ+5fC5saaoOrJ00Z4s8msWsmaTy gA8yIkrX4SvZrSbYBkeEooyrBe4xqWk= -----END CERTIFICATE-----Generated at Tue May 6 10:21:47 2025 by rpki-client