$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2dcaddd7-5406-3583-af09-5bb2496ce200.roa File: 2dcaddd7-5406-3583-af09-5bb2496ce200.roa (raw, json) Hash identifier: Hfg0RH6Dtj+9xZ1gH37V23My4/kj6NJjfISV7OPFbaI= Subject key identifier: 0F:37:82:DD:5F:71:7D:3D:1A:5E:7C:92:20:A1:7E:A9:89:76:9D:BC Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F43285849B14A0A04F15D6F15869C9EC0 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2dcaddd7-5406-3583-af09-5bb2496ce200.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 2559 IP address blocks: 198.241.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:0a:04:f1:5d:6f:15:86:9c:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=bd23957c-d03b-4902-b5bc-ac05ba5b02aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e8:3a:77:7c:a5:af:5f:39:c0:45:87:f6:95: db:b2:45:7e:ed:25:05:06:6b:e3:ac:01:11:47:c9: d8:c2:3d:78:78:c5:0c:42:df:ff:72:78:66:74:23: f9:21:de:1e:56:a9:c0:db:a2:93:a5:57:b4:25:85: 1c:e1:88:5d:f8:08:88:11:84:d6:68:84:3a:84:3f: 87:93:77:e2:c7:af:7e:7a:7f:14:22:e2:44:7a:0a: d7:a3:1d:53:b1:91:cc:59:aa:78:90:67:d9:9e:7e: 21:00:8b:72:1f:a1:e2:10:7e:0b:4e:5e:bd:1b:c5: 47:d3:13:42:7c:4e:77:f6:c1:e2:3a:12:15:b6:95: 02:6e:cc:25:10:9d:90:b5:a7:61:5e:84:e0:79:2c: 60:9b:ec:ea:36:f1:b0:64:c3:8a:64:ce:db:fe:06: a9:87:fd:94:85:7c:76:7b:29:d1:06:51:3f:6a:de: 73:0e:ce:bc:71:66:ca:6c:f4:d1:d2:68:43:15:5a: de:af:ca:15:c3:b0:ec:e9:b6:12:78:49:a9:e0:3b: 25:99:53:93:b4:ba:ee:cc:3d:9f:d8:72:c8:bb:a9: 61:ba:be:d2:09:18:a9:79:c2:e8:2a:b9:71:e1:9a: c0:30:35:b6:3d:1e:d9:95:06:75:f4:af:38:66:c3: 0f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:37:82:DD:5F:71:7D:3D:1A:5E:7C:92:20:A1:7E:A9:89:76:9D:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2dcaddd7-5406-3583-af09-5bb2496ce200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:55:e0:bd:ac:f2:8d:db:21:12:44:5c:79:ad:ce:f5:18:78: 0b:9e:cd:68:dd:c9:18:22:15:f8:90:58:88:05:d3:78:1e:82: 63:69:9a:d1:97:0e:ed:b7:c0:4b:c4:98:2e:2a:14:c1:34:df: 99:2b:94:ea:6c:68:31:31:6b:cb:24:31:64:17:26:0b:2c:22: 79:c0:67:a6:5d:3e:ea:1d:61:06:0c:e7:7f:1a:75:1f:1b:c3: d6:f0:23:e8:a3:fb:47:9e:28:03:28:dc:01:77:6d:29:bf:eb: 12:0f:ac:02:06:81:77:8e:de:29:ae:74:72:af:0f:6c:fb:ad: e8:8a:0e:19:e3:c0:5d:f7:2d:b6:5f:66:d1:d0:f5:a9:25:5b: 2f:cf:8f:61:fd:2f:c6:55:4a:91:4a:1b:ac:73:87:6c:05:ab: e1:06:4f:b6:8c:d0:b0:a6:09:b6:48:3f:3b:9f:8a:16:d1:af: f8:d7:e6:fa:28:9a:a1:f7:8c:5c:1b:f8:c3:77:91:65:fe:a4: af:e6:ef:5c:e4:8c:74:2a:af:cc:b0:04:e0:34:57:98:db:75: 1c:86:71:4b:d9:1a:ed:81:12:68:c0:36:13:d2:95:ce:ff:aa: 2a:7d:da:b6:e2:e0:22:e0:b0:9b:e7:8c:98:1c:b8:e7:cf:e7: 9f:f5:1a:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgoE8V1vFYacnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YmQyMzk1N2MtZDAzYi00OTAyLWI1YmMtYWMwNWJhNWIwMmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeg6d3ylr185wEWH9pXbskV+7SUFBmvjrAER R8nYwj14eMUMQt//cnhmdCP5Id4eVqnA26KTpVe0JYUc4Yhd+AiIEYTWaIQ6hD+H k3fix69+en8UIuJEegrXox1TsZHMWap4kGfZnn4hAItyH6HiEH4LTl69G8VH0xNC fE539sHiOhIVtpUCbswlEJ2QtadhXoTgeSxgm+zqNvGwZMOKZM7b/gaph/2UhXx2 eynRBlE/at5zDs68cWbKbPTR0mhDFVrer8oVw7Ds6bYSeEmp4DslmVOTtLruzD2f 2HLIu6lhur7SCRipecLoKrlx4ZrAMDW2PR7ZlQZ19K84ZsMPNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA83gt1fcX09Gl58kiChfqmJdp28MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvMmRjYWRkZDctNTQwNi0z NTgzLWFmMDktNWJiMjQ5NmNlMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvGVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBV4L2s8o3bIRJEXHmtzvUYeAuezWjdyRgiFfiQWIgF03gegmNpmtGX Du23wEvEmC4qFME035krlOpsaDExa8skMWQXJgssInnAZ6ZdPuodYQYM538adR8b w9bwI+ij+0eeKAMo3AF3bSm/6xIPrAIGgXeO3imudHKvD2z7reiKDhnjwF33LbZf ZtHQ9aklWy/Pj2H9L8ZVSpFKG6xzh2wFq+EGT7aM0LCmCbZIPzufihbRr/jX5voo mqH3jFwb+MN3kWX+pK/m71zkjHQqr8ywBOA0V5jbdRyGcUvZGu2BEmjANhPSlc7/ qip92rbi4CLgsJvnjJgcuOfP55/1GmA= -----END CERTIFICATE-----Generated at Sat May 10 14:35:52 2025 by rpki-client