$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a770091b-6e90-3116-93ad-5bc6885a391b.roa File: a770091b-6e90-3116-93ad-5bc6885a391b.roa (raw, json) Hash identifier: qFtfZUTI4KPXmkd2S5C9vFthtc/gHXRomC8c9qr22m4= Subject key identifier: 7B:B7:B6:7D:52:5A:CC:1C:84:C1:21:E2:D2:4B:95:2C:BB:5E:70:0C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAA63AF472B94330C2B220 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a770091b-6e90-3116-93ad-5bc6885a391b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.21.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:a6:3a:f4:72:b9:43:30:c2:b2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d5060304-3828-482f-a00d-9128da77ab70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ff:29:c5:6f:bc:96:2f:96:fc:e3:28:2b:ec: 76:cc:55:f8:88:f1:6c:59:e5:c0:0b:66:1f:6a:03: ea:7e:ee:95:05:78:64:94:09:34:14:24:97:fe:e4: b3:41:f6:e9:26:34:17:ca:9f:be:9b:2f:17:73:d9: 45:eb:11:40:f6:8b:3c:a4:6f:e2:21:c2:61:ce:a5: 27:c3:23:02:95:80:76:3f:a0:a4:cd:45:27:62:99: 63:4d:15:77:56:b9:c9:44:1f:00:69:88:f1:8d:69: e5:a7:99:ea:60:0c:04:e1:ac:ff:ef:4d:5f:c0:fd: 42:42:7d:6b:00:4c:c1:74:12:c3:2c:31:55:1f:9e: dd:9a:c8:ff:de:a9:9c:ba:c4:49:43:2a:d8:0e:45: 26:aa:d8:e9:e0:6c:a9:e0:9c:7a:fb:20:ee:92:8e: 7a:46:ce:fa:e9:58:5d:0c:10:80:8b:4d:5f:6c:96: 8b:04:46:51:b8:a9:df:3f:fc:4a:7a:23:0a:e7:f5: eb:ed:60:0e:49:23:b8:67:cc:ec:7f:75:65:43:61: 58:77:7e:0b:fa:4e:07:12:8d:07:a8:cd:e4:a8:59: 38:2d:f2:ab:6b:ec:57:20:1d:50:34:b2:b2:6a:93: 70:e4:e2:63:aa:27:36:aa:83:ee:64:9c:47:81:66: 38:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B7:B6:7D:52:5A:CC:1C:84:C1:21:E2:D2:4B:95:2C:BB:5E:70:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a770091b-6e90-3116-93ad-5bc6885a391b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:3a:2f:42:6d:60:4c:fc:fe:9a:4d:0e:1b:95:ad:a6:a6:9d: 90:f7:bc:df:d3:cd:1d:21:20:bc:9a:82:5b:f9:a9:10:cb:a5: f5:1f:0a:aa:4c:b2:bb:5e:32:e4:53:54:35:27:d7:9f:00:b9: 07:66:4c:75:11:fb:8d:38:e2:d7:23:36:56:b1:45:9d:7c:35: 29:56:aa:9d:4c:cf:f3:2f:08:dd:37:48:ce:13:10:5a:07:92: 5b:e4:ac:34:17:e2:93:5b:42:c4:48:81:ae:1c:f0:db:eb:74: a1:13:fa:63:40:9c:dd:ae:3f:49:81:2d:c8:d5:c2:2f:1d:72: 34:0e:98:55:83:10:1d:46:d5:47:f9:d7:aa:a8:b2:a2:73:ac: 08:a4:f2:b3:9f:2d:73:cd:21:0e:9c:9b:31:d9:11:bc:fd:b2: 9e:08:01:75:47:cd:e3:67:7b:e1:0d:61:15:0d:2a:76:4c:6f: 58:d5:ff:e5:b7:bc:d6:6e:77:9e:70:11:67:7b:91:1c:54:21: c9:ae:95:b6:3d:c8:99:af:22:4a:21:cb:3d:68:50:d2:19:c7: 2c:80:86:0e:e2:de:97:63:03:6f:75:41:ce:34:57:ee:3a:94: 0c:2e:c3:aa:8b:25:bc:a6:a8:e3:b9:4e:50:89:21:26:cb:2b: f9:87:44:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuqY69HK5QzDCsiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDUwNjAzMDQtMzgyOC00ODJmLWEwMGQtOTEyOGRhNzdhYjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/8pxW+8li+W/OMoK+x2zFX4iPFsWeXAC2Yf agPqfu6VBXhklAk0FCSX/uSzQfbpJjQXyp++my8Xc9lF6xFA9os8pG/iIcJhzqUn wyMClYB2P6CkzUUnYpljTRV3VrnJRB8AaYjxjWnlp5nqYAwE4az/701fwP1CQn1r AEzBdBLDLDFVH57dmsj/3qmcusRJQyrYDkUmqtjp4Gyp4Jx6+yDuko56Rs766Vhd DBCAi01fbJaLBEZRuKnfP/xKeiMK5/Xr7WAOSSO4Z8zsf3VlQ2FYd34L+k4HEo0H qM3kqFk4LfKra+xXIB1QNLKyapNw5OJjqic2qoPuZJxHgWY4VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHu3tn1SWswchMEh4tJLlSy7XnAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTc3MDA5MWItNmU5MC0z MTE2LTkzYWQtNWJjNjg4NWEzOTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg6L0JtYEz8/ppNDhuVraamnZD3vN/TzR0hILyaglv5qRDLpfUfCqpM srteMuRTVDUn158AuQdmTHUR+4044tcjNlaxRZ18NSlWqp1Mz/MvCN03SM4TEFoH klvkrDQX4pNbQsRIga4c8NvrdKET+mNAnN2uP0mBLcjVwi8dcjQOmFWDEB1G1Uf5 16qosqJzrAik8rOfLXPNIQ6cmzHZEbz9sp4IAXVHzeNne+ENYRUNKnZMb1jV/+W3 vNZud55wEWd7kRxUIcmulbY9yJmvIkohyz1oUNIZxyyAhg7i3pdjA291Qc40V+46 lAwuw6qLJbymqOO5TlCJISbLK/mHRGA= -----END CERTIFICATE-----Generated at Sun May 11 04:37:12 2025 by rpki-client