$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00972889-865e-3056-8d7d-c16e5e4ecb32.roa File: 00972889-865e-3056-8d7d-c16e5e4ecb32.roa (raw, json) Hash identifier: 7YnMt+zm+z1S5tKgW7DGUsxUZnxFUET4NaQISOzzN6k= Subject key identifier: 13:77:F1:CF:29:87:33:16:1F:6D:38:88:7E:AA:C3:03:FB:A7:47:55 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAB7BC85FFB2FB532FF740 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00972889-865e-3056-8d7d-c16e5e4ecb32.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 198.45.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:b7:bc:85:ff:b2:fb:53:2f:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ecb89d76-5264-4ec3-a598-3c53cee160b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f8:fd:17:14:26:0c:69:29:80:4b:13:e5:ba: a9:63:82:ff:53:6d:63:22:da:63:56:9e:0e:88:12: 60:b1:50:c8:6b:aa:b6:10:27:ba:9c:c2:00:0a:68: 7a:cf:2f:55:7a:ba:de:8c:1a:e7:c6:82:f8:17:05: 34:7f:d3:5f:68:01:3b:c2:fa:99:7d:85:34:68:fe: e0:00:28:65:d9:be:16:2e:b6:24:d8:1a:99:0c:bc: c0:85:ea:56:f1:1c:3a:47:c7:1a:9e:13:9a:cf:08: 5d:61:30:56:74:1d:d0:da:34:f5:32:1b:b4:bb:c8: 5a:dc:87:09:55:fd:44:1e:ac:3b:bd:34:c2:3e:36: a8:66:bb:26:28:b3:af:ba:26:73:59:0b:dc:50:28: 36:6e:be:76:ed:d8:f7:42:73:31:9c:03:13:1f:2a: 1d:88:f1:f4:6a:99:0b:20:4a:3b:aa:a3:1a:07:7e: 28:9d:78:1f:ed:4f:e0:12:50:67:26:de:8b:f9:e6: dc:d7:8e:26:8e:97:4a:67:1f:2d:5c:06:63:21:79: 2b:98:e1:16:c3:ed:55:c3:c4:95:f5:61:dd:6a:0c: cb:a8:d5:3d:c2:45:0b:28:68:49:52:31:9e:3e:00: 78:50:5c:31:dc:20:ca:1d:57:1c:14:d3:dd:7b:9f: 11:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:77:F1:CF:29:87:33:16:1F:6D:38:88:7E:AA:C3:03:FB:A7:47:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00972889-865e-3056-8d7d-c16e5e4ecb32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e7:d2:86:32:5a:c1:75:80:4b:81:f2:83:5e:e2:01:01:64: fd:e4:03:92:34:ee:58:24:da:f0:21:54:47:9e:d1:62:54:3c: 1b:b3:83:1f:87:3d:92:7e:fa:b4:11:11:c1:f6:f9:ea:a0:1c: 35:16:94:e5:1f:b8:75:6b:f4:cf:47:ce:94:6c:89:bd:f8:70: 95:c8:e8:5b:ee:ee:0b:b5:46:28:10:4e:53:4a:5d:51:7c:94: 2b:ad:e2:4a:08:7d:fe:0d:6f:22:50:f8:0c:0f:e7:b4:4a:14: d7:58:e7:1a:a3:ad:29:84:f3:5f:42:99:d3:95:f4:f9:4f:e4: d9:19:35:b6:42:7c:53:71:80:9e:d3:78:3c:0a:ef:bb:44:0e: 8d:0a:18:41:c3:98:66:bc:66:ec:77:29:af:05:62:75:c0:09: cd:5b:56:59:7b:9e:f4:24:cc:9a:91:d6:f9:f0:17:5e:d6:a8: 1c:c1:74:45:d4:5b:ea:6c:b4:a4:af:57:9a:af:c0:3f:b3:bf: 88:33:15:8a:0e:14:fe:e3:85:12:fa:c0:ee:42:1b:ed:c0:ce: 01:c3:7b:9d:0f:33:eb:95:83:db:f0:e6:6c:5a:7f:51:34:82: 96:95:45:e4:7b:c5:d6:83:62:f8:47:2f:87:4b:6b:e5:c5:64: 1f:55:7f:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkure8hf+y+1Mv90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZWNiODlkNzYtNTI2NC00ZWMzLWE1OTgtM2M1M2NlZTE2MGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvj9FxQmDGkpgEsT5bqpY4L/U21jItpjVp4O iBJgsVDIa6q2ECe6nMIACmh6zy9VerrejBrnxoL4FwU0f9NfaAE7wvqZfYU0aP7g AChl2b4WLrYk2BqZDLzAhepW8Rw6R8canhOazwhdYTBWdB3Q2jT1Mhu0u8ha3IcJ Vf1EHqw7vTTCPjaoZrsmKLOvuiZzWQvcUCg2br527dj3QnMxnAMTHyodiPH0apkL IEo7qqMaB34onXgf7U/gElBnJt6L+ebc144mjpdKZx8tXAZjIXkrmOEWw+1Vw8SV 9WHdagzLqNU9wkULKGhJUjGePgB4UFwx3CDKHVccFNPde58RKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBN38c8phzMWH204iH6qwwP7p0dVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDA5NzI4ODktODY1ZS0z MDU2LThkN2QtYzE2ZTVlNGVjYjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi39MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTn0oYyWsF1gEuB8oNe4gEBZP3kA5I07lgk2vAhVEee0WJUPBuzgx+H PZJ++rQREcH2+eqgHDUWlOUfuHVr9M9HzpRsib34cJXI6Fvu7gu1RigQTlNKXVF8 lCut4koIff4NbyJQ+AwP57RKFNdY5xqjrSmE819CmdOV9PlP5NkZNbZCfFNxgJ7T eDwK77tEDo0KGEHDmGa8Zux3Ka8FYnXACc1bVll7nvQkzJqR1vnwF17WqBzBdEXU W+pstKSvV5qvwD+zv4gzFYoOFP7jhRL6wO5CG+3AzgHDe50PM+uVg9vw5mxaf1E0 gpaVReR7xdaDYvhHL4dLa+XFZB9Vf4M= -----END CERTIFICATE-----Generated at Sun May 11 00:45:28 2025 by rpki-client