$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8498f23-a82c-3ccc-b4f1-9fa37a79a9fa.roa File: c8498f23-a82c-3ccc-b4f1-9fa37a79a9fa.roa (raw, json) Hash identifier: rWFEqcz4LdcjuMtWsMRGexL2WD3MBEVUUs9WaCQbCK4= Subject key identifier: 9D:48:11:91:B3:F6:65:3D:50:DF:CF:4A:4B:A3:B3:83:D6:ED:E9:B7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAB52B82A867254C40C180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8498f23-a82c-3ccc-b4f1-9fa37a79a9fa.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 198.45.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:b5:2b:82:a8:67:25:4c:40:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=879a2e1f-719d-4e17-84e8-e45c0d0a65f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d7:1a:76:b9:b0:21:6a:a5:e4:d2:63:71:a3: 91:68:8e:6f:6f:ef:83:fd:e8:32:37:76:e2:bf:a6: 7a:89:2a:26:35:ac:14:fe:4f:a1:33:72:e1:82:36: e0:72:93:e6:78:1f:17:23:bd:f9:25:04:a4:01:70: 5e:30:42:10:31:8b:d5:91:15:1b:a2:3b:03:09:fb: f6:5f:30:46:1e:1e:39:f8:f5:c8:df:80:e6:22:7e: 27:b8:d6:e2:31:ad:b8:eb:43:64:fa:a6:e6:b9:fd: 24:0e:a3:5c:cd:53:c1:82:af:82:7a:95:73:93:f2: 19:66:8a:fd:a7:1c:36:56:e1:69:d4:27:40:f0:d9: 43:25:ba:8d:76:bd:ec:bf:4d:1d:67:c5:c6:a9:54: a0:5b:5a:e9:8f:44:36:52:ba:36:42:ac:69:6f:24: d9:f9:1d:a3:34:08:de:e4:0a:07:f8:c5:82:8e:cd: 2c:cc:9b:ac:0f:b3:82:b9:0c:7a:c8:a0:86:24:7f: fd:01:93:8c:d1:a0:5e:91:a7:75:a8:7e:5e:58:f4: 4c:37:22:63:ef:38:40:5c:d6:3d:f7:c5:61:2c:99: 07:97:10:fa:22:a7:f4:df:db:d3:3f:47:d8:b2:ed: 14:e8:09:6f:f1:d9:e9:f9:cc:7c:59:db:d5:89:8f: 8e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:48:11:91:B3:F6:65:3D:50:DF:CF:4A:4B:A3:B3:83:D6:ED:E9:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8498f23-a82c-3ccc-b4f1-9fa37a79a9fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:ef:81:f5:fc:ba:19:09:8a:48:d2:cd:dd:06:37:68:0d:fa: 79:dd:7c:4c:b6:f1:ba:0d:56:7a:52:fd:44:ea:0c:df:58:87: 38:0a:41:2e:47:68:21:90:6b:d0:2b:c1:65:05:77:a2:eb:95: cd:e9:a3:fe:96:8e:4a:9e:89:1c:36:98:6b:58:8f:d6:dd:12: 97:44:13:ab:c9:62:ad:af:94:14:92:ab:5d:b7:a5:e5:a7:4c: b6:cd:e9:d7:7e:c4:6d:db:cb:30:ba:3b:07:8d:02:fc:3d:3d: b1:a9:60:6c:48:fb:be:98:bd:0c:4b:9b:96:de:8a:06:c5:82: 9e:21:d4:55:0e:28:54:57:ff:26:2a:2d:9c:ba:fe:37:29:eb: 26:d8:31:d1:29:e1:8e:ad:74:95:9e:4a:03:86:0d:31:77:fb: 7a:2c:23:80:c7:eb:50:97:2f:c7:88:4d:5a:91:39:8c:39:6f: 14:7b:2f:1a:04:90:be:06:42:dd:5e:aa:11:f0:96:ab:fb:01: 6b:a7:c4:a6:6e:ca:b7:4f:60:2f:19:9c:72:3d:be:c4:9b:e3: 12:c8:42:4f:9d:d3:cc:5a:8d:f6:bc:a1:9f:3c:b4:a7:64:07: 8c:17:70:47:f9:10:4c:3a:96:58:b1:47:ad:84:10:d9:a9:d8: 0a:73:b7:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurUrgqhnJUxAwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODc5YTJlMWYtNzE5ZC00ZTE3LTg0ZTgtZTQ1YzBkMGE2NWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydcadrmwIWql5NJjcaORaI5vb++D/egyN3bi v6Z6iSomNawU/k+hM3LhgjbgcpPmeB8XI735JQSkAXBeMEIQMYvVkRUbojsDCfv2 XzBGHh45+PXI34DmIn4nuNbiMa2460Nk+qbmuf0kDqNczVPBgq+CepVzk/IZZor9 pxw2VuFp1CdA8NlDJbqNdr3sv00dZ8XGqVSgW1rpj0Q2Uro2QqxpbyTZ+R2jNAje 5AoH+MWCjs0szJusD7OCuQx6yKCGJH/9AZOM0aBekad1qH5eWPRMNyJj7zhAXNY9 98VhLJkHlxD6Iqf039vTP0fYsu0U6Alv8dnp+cx8WdvViY+O3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1IEZGz9mU9UN/PSkujs4PW7em3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzg0OThmMjMtYTgyYy0z Y2NjLWI0ZjEtOWZhMzdhNzlhOWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXvgfX8uhkJikjSzd0GN2gN+nndfEy28boNVnpS/UTqDN9YhzgKQS5H aCGQa9ArwWUFd6Lrlc3po/6WjkqeiRw2mGtYj9bdEpdEE6vJYq2vlBSSq123peWn TLbN6dd+xG3byzC6OweNAvw9PbGpYGxI+76YvQxLm5beigbFgp4h1FUOKFRX/yYq LZy6/jcp6ybYMdEp4Y6tdJWeSgOGDTF3+3osI4DH61CXL8eITVqROYw5bxR7LxoE kL4GQt1eqhHwlqv7AWunxKZuyrdPYC8ZnHI9vsSb4xLIQk+d08xajfa8oZ88tKdk B4wXcEf5EEw6llixR62EENmp2Apztys= -----END CERTIFICATE-----Generated at Tue May 6 03:07:06 2025 by rpki-client