$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d874f7f7-d118-3d67-ac93-8842acd7ca86.roa File: d874f7f7-d118-3d67-ac93-8842acd7ca86.roa (raw, json) Hash identifier: 5AfjZPxO5bJJWxALT82JYh941AmxnaTQpU8KAikP6mI= Subject key identifier: C6:28:1F:9F:49:28:E6:C0:D1:32:20:B7:90:0A:97:FA:6C:CE:3B:06 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB5893CC224450622599C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d874f7f7-d118-3d67-ac93-8842acd7ca86.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 198.45.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:58:93:cc:22:44:50:62:25:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2ec18d48-12a5-4d5b-a8b6-8de6c445b823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:17:dd:21:5e:35:de:61:a4:ee:9c:dd:f0:ed: 95:e5:85:d2:69:34:ba:53:d8:63:41:31:93:bb:32: 78:02:e1:ca:c3:42:09:c5:c7:16:da:7f:8e:2c:76: 42:fa:6e:b5:59:1d:3e:91:14:d2:e1:d2:7b:d7:e0: e1:aa:3f:b0:9f:93:86:e3:c7:4b:76:ec:0c:dd:79: e0:df:30:3d:f3:47:27:1f:bd:24:2b:4e:90:5a:18: 11:58:ba:fa:5b:2f:23:35:b4:6b:a6:0e:14:0d:db: f5:17:c8:2c:07:b9:76:1a:3e:d7:46:9a:55:87:d2: cf:32:b7:c1:b8:5a:86:7a:7a:52:1c:83:73:b6:96: fb:b3:7c:35:81:46:dd:4a:3a:c7:92:75:61:a1:ef: 0e:77:50:0a:25:04:cb:92:3a:13:82:2e:df:63:4e: c3:cd:a7:b1:1c:a0:ee:33:72:af:5d:b2:e9:61:40: fb:57:88:c0:0e:bb:04:72:21:21:82:14:d3:0c:50: 02:f1:7c:1a:d4:70:4d:e7:4f:74:73:14:9d:e5:50: 54:b3:6f:4b:a3:ee:12:80:c2:69:b4:26:6f:d4:db: b8:67:e8:fb:f4:37:16:d8:1b:a8:22:37:73:f0:90: 37:5d:78:a0:83:e5:34:bd:b8:09:3b:9d:11:98:9d: 38:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:28:1F:9F:49:28:E6:C0:D1:32:20:B7:90:0A:97:FA:6C:CE:3B:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d874f7f7-d118-3d67-ac93-8842acd7ca86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:9c:f7:18:3d:24:05:ef:02:c8:5b:23:20:a9:6a:93:6d:72: ec:29:78:f3:07:87:53:d6:a3:85:12:03:26:7d:14:99:1b:3b: 8f:e7:23:e6:5c:b9:c1:19:98:bc:d8:f1:3f:44:54:c6:87:45: 95:14:15:47:d4:14:2e:d9:25:fa:df:c4:02:0a:37:b5:1d:d6: 2e:2a:8e:0b:32:da:64:68:93:86:af:de:16:e2:77:6d:83:9e: c5:4b:51:41:d9:e8:66:0d:4c:c0:fd:2a:84:ef:24:a9:d8:8a: 72:f9:9d:c0:f6:db:cf:33:62:2f:e9:1c:b2:e3:ec:f0:2f:33: 2b:fd:8c:83:69:82:37:0d:4d:a6:46:ee:4a:c0:3d:d3:38:aa: 07:13:13:0d:71:d6:ce:f4:8d:70:91:16:ff:3e:24:1b:1d:8d: 52:a7:1e:91:94:97:1f:f6:45:25:05:83:26:1d:21:78:c6:01: 09:1d:d9:c9:8a:0e:ed:7d:d8:ec:a4:8d:5d:2e:36:eb:ad:ba: 23:41:e1:5c:ee:f8:fe:09:7f:64:35:d7:ee:31:fe:79:83:48: 13:55:2a:99:4a:d1:4b:3c:8c:1a:f7:3a:c0:ce:5d:df:25:4a: 73:9a:82:7c:eb:63:d2:a8:d6:9e:2b:e9:2d:33:56:ef:0a:c9: 64:49:98:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1iTzCJEUGIlmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmVjMThkNDgtMTJhNS00ZDViLWE4YjYtOGRlNmM0NDViODIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhfdIV413mGk7pzd8O2V5YXSaTS6U9hjQTGT uzJ4AuHKw0IJxccW2n+OLHZC+m61WR0+kRTS4dJ71+Dhqj+wn5OG48dLduwM3Xng 3zA980cnH70kK06QWhgRWLr6Wy8jNbRrpg4UDdv1F8gsB7l2Gj7XRppVh9LPMrfB uFqGenpSHINztpb7s3w1gUbdSjrHknVhoe8Od1AKJQTLkjoTgi7fY07DzaexHKDu M3KvXbLpYUD7V4jADrsEciEhghTTDFAC8Xwa1HBN5090cxSd5VBUs29Lo+4SgMJp tCZv1Nu4Z+j79DcW2BuoIjdz8JA3XXigg+U0vbgJO50RmJ04BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYoH59JKObA0TIgt5AKl/pszjsGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDg3NGY3ZjctZDExOC0z ZDY3LWFjOTMtODg0MmFjZDdjYTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2c9xg9JAXvAshbIyCpapNtcuwpePMHh1PWo4USAyZ9FJkbO4/nI+Zc ucEZmLzY8T9EVMaHRZUUFUfUFC7ZJfrfxAIKN7Ud1i4qjgsy2mRok4av3hbid22D nsVLUUHZ6GYNTMD9KoTvJKnYinL5ncD2288zYi/pHLLj7PAvMyv9jINpgjcNTaZG 7krAPdM4qgcTEw1x1s70jXCRFv8+JBsdjVKnHpGUlx/2RSUFgyYdIXjGAQkd2cmK Du192OykjV0uNuutuiNB4Vzu+P4Jf2Q11+4x/nmDSBNVKplK0Us8jBr3OsDOXd8l SnOagnzrY9Ko1p4r6S0zVu8KyWRJmIw= -----END CERTIFICATE-----Generated at Thu May 8 00:47:11 2025 by rpki-client