$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/392a9f4b-5cd9-3c4b-9a74-c43411b9e131.roa File: 392a9f4b-5cd9-3c4b-9a74-c43411b9e131.roa (raw, json) Hash identifier: nK2nQ1+5xHkm/w0/25bz4+Xs/TOT2mnEAfgsu2dyAYs= Subject key identifier: 26:B8:D7:7C:27:3B:1E:33:07:84:EF:36:98:E6:EA:DD:0C:A9:41:74 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAB70F0C79C6E728F5FA80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/392a9f4b-5cd9-3c4b-9a74-c43411b9e131.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 198.45.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:b7:0f:0c:79:c6:e7:28:f5:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c5e6e6e6-250d-462b-8c1c-706f3a4166d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0f:52:67:e6:a2:ac:aa:46:46:3d:ac:0a:d1: aa:24:7f:aa:6d:d7:c6:75:60:da:77:9d:58:9f:54: 53:10:36:d8:69:ac:4e:21:03:f3:d2:27:17:f4:28: 2d:74:89:2d:3c:c2:75:af:b2:5c:7b:27:56:70:51: f7:37:96:ff:18:c7:9f:7b:d4:9f:44:0f:6d:a3:75: 4f:de:c4:38:b5:43:4f:87:f4:ef:96:b5:b7:7f:26: a4:f6:cb:40:65:1a:e3:11:d2:20:cb:9f:51:87:87: cc:b1:ca:b8:28:84:c6:09:f5:19:13:33:c8:e0:32: 25:27:38:54:f9:d6:f0:7c:37:e3:cc:25:9b:13:2d: a2:87:cd:84:94:31:07:a4:cf:34:0d:88:04:6d:85: 17:a4:ae:39:8f:e1:10:fc:ca:42:df:4b:be:40:24: 48:bb:8c:4a:49:37:36:05:63:04:e1:7b:7d:be:e9: a8:89:29:6b:05:a6:2e:64:05:a4:84:65:93:58:30: 07:75:bf:3e:de:71:b5:a7:03:40:40:09:c0:51:8f: de:1c:47:6c:cd:3b:16:65:6f:0b:e6:95:03:9b:01: 14:14:0b:12:d0:be:5c:9d:4b:98:e0:a7:aa:7b:0b: f7:3c:f8:51:90:4e:97:9c:4e:0c:f7:4d:88:ef:2d: bf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B8:D7:7C:27:3B:1E:33:07:84:EF:36:98:E6:EA:DD:0C:A9:41:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/392a9f4b-5cd9-3c4b-9a74-c43411b9e131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:c0:5d:dc:08:38:63:a5:b0:4c:70:9c:36:2e:82:bf:28:05: 11:1d:af:87:94:4b:fa:79:c7:2d:fb:0b:b0:aa:db:97:e7:1b: 13:e3:99:2e:26:a2:55:00:97:cf:a6:62:21:0f:fa:00:69:d2: f1:29:82:ff:31:b2:c4:5e:7b:ef:3a:95:9e:ac:a7:78:ca:c6: 4e:7b:b8:51:8e:d2:0d:09:c5:ab:4c:95:66:26:85:02:da:1e: 35:49:02:15:b2:08:54:19:1e:e2:5c:d5:2b:9a:37:6d:23:6a: 3a:f7:ef:42:82:c4:fc:97:05:f8:13:7f:42:18:c0:5e:b2:96: ba:50:9c:89:a5:d0:11:9c:5c:1d:7e:48:61:8a:2c:01:bb:2b: 86:c2:91:29:06:8d:3a:21:7c:ee:a8:34:09:0b:f2:7a:3c:a7: fc:d9:08:1b:8e:ba:44:44:9b:9c:ac:47:0f:12:2f:2a:07:de: f0:66:75:18:96:97:34:91:8f:a5:19:7b:e5:b3:4f:94:34:ec: ae:46:f9:8e:b2:44:0d:52:3d:b4:c2:9e:79:c0:f2:33:09:94: 25:72:a1:6c:a1:75:bb:93:ee:03:6d:93:10:de:21:a8:b3:1c: ec:ee:18:eb:07:09:ad:41:23:79:ba:a6:24:94:63:3b:3d:6d: 61:09:cf:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurcPDHnG5yj1+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzVlNmU2ZTYtMjUwZC00NjJiLThjMWMtNzA2ZjNhNDE2NmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg9SZ+airKpGRj2sCtGqJH+qbdfGdWDad51Y n1RTEDbYaaxOIQPz0icX9CgtdIktPMJ1r7JceydWcFH3N5b/GMefe9SfRA9to3VP 3sQ4tUNPh/TvlrW3fyak9stAZRrjEdIgy59Rh4fMscq4KITGCfUZEzPI4DIlJzhU +dbwfDfjzCWbEy2ih82ElDEHpM80DYgEbYUXpK45j+EQ/MpC30u+QCRIu4xKSTc2 BWME4Xt9vumoiSlrBaYuZAWkhGWTWDAHdb8+3nG1pwNAQAnAUY/eHEdszTsWZW8L 5pUDmwEUFAsS0L5cnUuY4Keqewv3PPhRkE6XnE4M902I7y2/FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCa413wnOx4zB4TvNpjm6t0MqUF0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzkyYTlmNGItNWNkOS0z YzRiLTlhNzQtYzQzNDExYjllMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrAXdwIOGOlsExwnDYugr8oBREdr4eUS/p5xy37C7Cq25fnGxPjmS4m olUAl8+mYiEP+gBp0vEpgv8xssRee+86lZ6sp3jKxk57uFGO0g0JxatMlWYmhQLa HjVJAhWyCFQZHuJc1SuaN20jajr370KCxPyXBfgTf0IYwF6ylrpQnIml0BGcXB1+ SGGKLAG7K4bCkSkGjTohfO6oNAkL8no8p/zZCBuOukREm5ysRw8SLyoH3vBmdRiW lzSRj6UZe+WzT5Q07K5G+Y6yRA1SPbTCnnnA8jMJlCVyoWyhdbuT7gNtkxDeIaiz HOzuGOsHCa1BI3m6piSUYzs9bWEJzzo= -----END CERTIFICATE-----Generated at Sun Apr 27 05:49:36 2025 by rpki-client