$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f2d3a97-8f3a-3ccf-a614-86427bdb9c44.roa File: 2f2d3a97-8f3a-3ccf-a614-86427bdb9c44.roa (raw, json) Hash identifier: pomkS4I7GngE5cbo1bf9kejFW71vFsujgWn+GmLRRlw= Subject key identifier: F9:85:E9:84:6C:D1:F6:ED:5A:B2:1E:ED:02:D4:2A:64:74:3B:CD:B7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB56BE5313A854F984E900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f2d3a97-8f3a-3ccf-a614-86427bdb9c44.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 198.45.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:56:be:53:13:a8:54:f9:84:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ccbb110f-5025-4339-b54c-5735a16ac06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9b:f6:32:3b:2f:30:c0:ec:70:f2:81:57:08: e1:96:c8:46:44:8d:fd:ad:70:81:8c:77:89:71:62: db:17:bc:60:34:44:91:85:d5:43:3c:ac:e3:92:f8: b9:f6:08:09:cb:a0:66:80:e5:5b:7b:de:b2:88:41: 0f:50:51:d5:70:58:d8:c1:bf:d5:20:6d:1f:3b:3d: 04:5d:9b:ec:1a:14:57:ff:5b:6f:55:c1:08:f1:f8: f9:37:24:40:0e:21:4b:11:92:83:f8:ea:39:8e:21: 4c:e4:e9:90:b0:d4:a3:ff:44:67:08:db:cd:a5:0b: 1a:d9:b0:48:96:32:8d:5b:a3:2f:27:0e:ba:fe:67: cf:d4:e8:65:43:81:84:4c:d6:f2:5d:2e:fa:74:de: cd:a5:aa:18:07:b0:b3:59:53:85:d3:2e:cf:54:44: d3:e7:e1:8f:f2:32:35:b0:79:33:47:56:49:97:ba: 7f:15:d2:49:19:fd:12:72:26:f8:b4:fc:c4:21:9f: f9:38:c7:8c:ec:90:66:c0:c2:25:60:d9:71:ad:d9: 73:5e:75:61:1d:74:51:3c:e7:dc:8f:d9:b6:ed:ec: c3:9f:45:02:cd:1a:60:a8:1f:26:cd:fb:c1:79:1e: 70:0e:07:3c:26:07:80:f1:24:51:f6:c8:dc:69:9a: 17:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:85:E9:84:6C:D1:F6:ED:5A:B2:1E:ED:02:D4:2A:64:74:3B:CD:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f2d3a97-8f3a-3ccf-a614-86427bdb9c44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:84:19:7d:9a:42:fb:be:f3:a1:a9:ef:ef:b6:21:89:9e:07: ca:f1:94:ab:7d:97:62:ce:fc:98:e8:37:ad:e6:0a:8b:9e:8f: 69:a0:ef:19:f4:f0:75:ca:5e:fa:98:4b:0d:56:50:7c:de:32: dc:f8:e4:11:3a:5f:13:cf:28:4a:0f:6e:67:41:8c:1f:3a:03: 00:aa:9a:f5:bb:05:fe:8f:1f:51:5b:60:53:37:9f:a1:2d:d6: b7:89:51:e8:58:87:12:e8:79:bc:57:ec:cc:2f:e3:b8:eb:70: 95:6b:e5:f9:cd:e8:37:5d:ac:75:20:4c:5a:0f:8a:aa:db:45: b3:e9:06:33:e6:eb:e8:32:a5:ad:6e:53:46:04:af:4e:af:37: b7:af:7e:8e:c9:9e:32:47:30:fe:aa:e0:d0:57:4b:8b:1c:af: d0:96:9a:00:9b:10:a3:c3:f3:fe:23:21:03:f5:2e:50:ec:3e: 69:52:eb:e8:3f:34:0a:b8:11:13:93:91:d7:2c:23:b2:c2:4e: a5:0c:55:29:1d:07:9b:8c:7c:3e:ff:9e:eb:44:04:19:05:dc: a4:df:74:68:e8:64:d9:3d:3d:66:d1:03:f0:ec:e9:c6:78:09: 3f:3f:0b:38:4e:ad:4e:4a:0d:7c:53:00:b0:0c:68:80:a4:55: ca:d0:9d:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1a+UxOoVPmE6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2NiYjExMGYtNTAyNS00MzM5LWI1NGMtNTczNWExNmFjMDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5v2MjsvMMDscPKBVwjhlshGRI39rXCBjHeJ cWLbF7xgNESRhdVDPKzjkvi59ggJy6BmgOVbe96yiEEPUFHVcFjYwb/VIG0fOz0E XZvsGhRX/1tvVcEI8fj5NyRADiFLEZKD+Oo5jiFM5OmQsNSj/0RnCNvNpQsa2bBI ljKNW6MvJw66/mfP1OhlQ4GETNbyXS76dN7NpaoYB7CzWVOF0y7PVETT5+GP8jI1 sHkzR1ZJl7p/FdJJGf0Scib4tPzEIZ/5OMeM7JBmwMIlYNlxrdlzXnVhHXRRPOfc j9m27ezDn0UCzRpgqB8mzfvBeR5wDgc8JgeA8SRR9sjcaZoX0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmF6YRs0fbtWrIe7QLUKmR0O823MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmYyZDNhOTctOGYzYS0z Y2NmLWE2MTQtODY0MjdiZGI5YzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmEGX2aQvu+86Gp7++2IYmeB8rxlKt9l2LO/JjoN63mCouej2mg7xn0 8HXKXvqYSw1WUHzeMtz45BE6XxPPKEoPbmdBjB86AwCqmvW7Bf6PH1FbYFM3n6Et 1reJUehYhxLoebxX7Mwv47jrcJVr5fnN6DddrHUgTFoPiqrbRbPpBjPm6+gypa1u U0YEr06vN7evfo7JnjJHMP6q4NBXS4scr9CWmgCbEKPD8/4jIQP1LlDsPmlS6+g/ NAq4EROTkdcsI7LCTqUMVSkdB5uMfD7/nutEBBkF3KTfdGjoZNk9PWbRA/Ds6cZ4 CT8/CzhOrU5KDXxTALAMaICkVcrQnUU= -----END CERTIFICATE-----Generated at Sun Apr 27 05:47:01 2025 by rpki-client