$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4aa49ec5-3654-39dd-92ab-16765f31e857.roa File: 4aa49ec5-3654-39dd-92ab-16765f31e857.roa (raw, json) Hash identifier: +HL3ZUxHF+e1h6pfcrUdAV/JakLdO5zypyNqtwAdbo0= Subject key identifier: 6E:F7:38:C7:CA:9A:61:4D:70:9E:E1:B9:8D:67:4C:11:C2:5A:04:5C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB49DFFD71FA5B470FF4C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4aa49ec5-3654-39dd-92ab-16765f31e857.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:49:df:fd:71:fa:5b:47:0f:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ff6d533a-6a97-490d-a9c8-e488d092ccac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:57:63:08:b0:26:f7:a3:4a:5c:90:9f:38:e4: d5:41:64:3d:1b:93:f5:46:6a:8a:3b:5e:d1:e3:3f: 93:42:42:81:43:19:10:0c:0c:1f:f5:df:fe:57:2a: 46:71:1a:21:48:ee:4f:13:e0:db:02:d2:fa:eb:a4: 5b:cc:91:b1:af:52:61:64:24:18:a2:9f:2b:d7:bf: bc:20:f1:13:55:fb:62:dd:02:05:eb:df:9d:8d:87: b0:fd:2e:74:99:00:04:18:85:2a:d5:07:0e:46:bc: 39:3c:77:4a:92:5f:30:b9:01:9c:b4:16:c4:96:3d: ee:3c:0a:20:50:57:51:93:55:16:85:95:ba:c5:38: 89:f0:47:49:fb:40:9d:b0:db:82:7d:46:b9:7e:1d: 35:65:d1:2a:09:26:64:44:22:54:8c:99:55:c7:5b: d6:85:fa:bd:a6:f5:3b:55:25:26:34:7f:8d:51:8f: 61:92:63:af:4c:6a:74:2b:cc:a1:8b:bd:ce:01:91: 84:b7:e9:b5:dc:50:07:a7:d6:b8:40:62:4a:68:f3: b1:f2:33:3e:71:f0:80:24:15:83:a7:0b:fb:41:b5: 96:bd:d4:19:47:80:9d:1a:e2:d7:2c:33:a6:cd:fc: 75:e8:4a:7a:96:b0:9b:3e:de:c6:9c:58:4e:3e:2d: 72:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F7:38:C7:CA:9A:61:4D:70:9E:E1:B9:8D:67:4C:11:C2:5A:04:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4aa49ec5-3654-39dd-92ab-16765f31e857.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:5f:60:89:01:f2:20:9a:23:98:10:4f:3e:0d:2d:0c:57:0c: b8:a3:d4:32:a6:f5:fd:b4:bf:28:04:f5:78:c7:4e:83:ad:46: b4:4c:84:43:2f:cf:01:ae:f7:bf:8c:4b:da:90:fa:8a:3e:d6: f1:a7:cd:4a:68:87:84:f7:f5:7f:e1:c1:49:5e:38:fa:7d:bb: 91:ad:a4:7d:9a:a8:18:f5:65:c3:91:96:2c:4a:ba:7a:55:07: 9d:03:c2:09:b1:e2:cf:2a:0e:b2:d4:5f:40:31:71:fa:99:dd: bf:ce:fa:bf:3f:21:74:ca:e1:31:d1:57:6e:49:aa:9b:36:31: 00:08:80:f5:08:6c:aa:46:c5:ff:3b:be:b0:fd:74:0d:bc:8d: 1e:54:53:9f:ea:75:07:6e:c1:f0:15:70:6f:ad:33:22:81:79: ba:bc:87:7c:8f:a2:e6:37:18:b9:41:4f:30:5b:3b:52:eb:f3: 4b:d6:26:b7:c5:8a:3c:61:9e:51:ce:c5:b6:b9:8d:14:c4:7d: 0c:0d:f9:fd:80:2e:d6:32:7d:fe:fd:ef:43:bf:c2:8b:3c:d9: f1:c6:be:51:35:fb:9f:97:ab:16:c0:14:dd:03:c1:b4:73:30: ef:74:e2:13:0a:d4:53:93:f4:f4:b5:60:19:f0:b5:dd:f7:b8: bb:82:0c:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku0nf/XH6W0cP9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmY2ZDUzM2EtNmE5Ny00OTBkLWE5YzgtZTQ4OGQwOTJjY2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VdjCLAm96NKXJCfOOTVQWQ9G5P1RmqKO17R 4z+TQkKBQxkQDAwf9d/+VypGcRohSO5PE+DbAtL666RbzJGxr1JhZCQYop8r17+8 IPETVfti3QIF69+djYew/S50mQAEGIUq1QcORrw5PHdKkl8wuQGctBbElj3uPAog UFdRk1UWhZW6xTiJ8EdJ+0CdsNuCfUa5fh01ZdEqCSZkRCJUjJlVx1vWhfq9pvU7 VSUmNH+NUY9hkmOvTGp0K8yhi73OAZGEt+m13FAHp9a4QGJKaPOx8jM+cfCAJBWD pwv7QbWWvdQZR4CdGuLXLDOmzfx16Ep6lrCbPt7GnFhOPi1yAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG73OMfKmmFNcJ7huY1nTBHCWgRcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGFhNDllYzUtMzY1NC0z OWRkLTkyYWItMTY3NjVmMzFlODU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBfYIkB8iCaI5gQTz4NLQxXDLij1DKm9f20vygE9XjHToOtRrRMhEMv zwGu97+MS9qQ+oo+1vGnzUpoh4T39X/hwUleOPp9u5GtpH2aqBj1ZcORlixKunpV B50Dwgmx4s8qDrLUX0AxcfqZ3b/O+r8/IXTK4THRV25Jqps2MQAIgPUIbKpGxf87 vrD9dA28jR5UU5/qdQduwfAVcG+tMyKBebq8h3yPouY3GLlBTzBbO1Lr80vWJrfF ijxhnlHOxba5jRTEfQwN+f2ALtYyff7970O/wos82fHGvlE1+5+XqxbAFN0DwbRz MO904hMK1FOT9PS1YBnwtd33uLuCDE0= -----END CERTIFICATE-----Generated at Sun May 11 09:05:11 2025 by rpki-client