$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ef6a7c5-5dab-3fd4-971d-fa15aa968c91.roa File: 4ef6a7c5-5dab-3fd4-971d-fa15aa968c91.roa (raw, json) Hash identifier: H6TL4Q4d/sRTuzGywhokp+P6PTz9t1WWBtQRg1NyYYc= Subject key identifier: 58:E6:3B:FC:F3:0C:1E:88:73:8E:A8:E1:71:8C:D3:91:7D:08:60:C3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB576E8CF0056D895BA480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ef6a7c5-5dab-3fd4-971d-fa15aa968c91.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 198.45.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:57:6e:8c:f0:05:6d:89:5b:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a693f958-e5e1-40ce-8352-75c070a39baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fd:da:f3:2b:60:7a:9e:62:34:b9:1a:ff:b4: e4:8b:56:9d:dc:d3:9c:cc:c8:cd:49:d0:c1:e9:ad: 02:ea:5f:ef:0f:67:42:d1:7b:33:10:80:1c:08:63: 1c:90:4f:23:b0:f1:9a:1a:02:41:8f:ec:aa:f2:70: 24:ff:7b:13:1f:86:1e:ef:82:09:c2:1a:a4:79:ba: 2b:5b:76:50:4d:5b:5e:a6:0a:83:a4:82:70:75:ea: af:0e:e9:2b:66:09:03:f7:fe:d7:65:56:6f:ef:f0: 24:92:5b:fa:e5:a1:61:94:c5:39:ad:40:a8:33:cd: ad:5a:a9:39:12:45:a8:55:01:3e:3e:5e:8a:c0:25: c2:71:a6:e1:3b:5e:1c:47:6b:49:ee:91:a4:26:0d: 3f:3d:62:5f:5c:0d:0a:1d:40:83:bb:4a:2f:2b:89: dd:b7:09:7a:96:03:60:e2:c6:45:0a:92:88:12:e9: 85:54:73:f3:ff:c9:21:02:bd:6d:f4:18:1d:e6:80: ec:14:42:22:f7:f6:98:53:79:ab:1d:f9:a4:80:d7: cb:f9:d4:bd:16:a1:a0:34:53:ec:4f:5e:d3:e0:bb: ab:2e:e9:35:b3:f3:f9:b6:d6:f9:25:aa:ac:5e:1c: af:10:60:2c:39:38:20:0f:fc:f6:af:e8:6f:84:fb: 53:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E6:3B:FC:F3:0C:1E:88:73:8E:A8:E1:71:8C:D3:91:7D:08:60:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ef6a7c5-5dab-3fd4-971d-fa15aa968c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:f6:9a:9c:24:23:b5:b6:97:06:20:d7:da:28:7b:e8:a2:a6: d3:d1:68:9e:72:55:9f:a3:a7:0c:48:5b:02:c2:1e:04:90:a8: 61:05:e0:c4:c0:5b:fb:24:5b:1c:aa:55:e7:aa:4f:31:04:14: f7:2a:b1:cc:d4:84:f6:a2:e8:0d:8c:f5:c3:26:39:49:9d:30: 27:c1:f4:bc:03:15:b4:79:cf:13:f7:cd:e7:7d:63:84:4d:65: b2:93:d7:69:44:75:b2:35:72:5b:e5:a2:2f:48:67:2d:27:3e: ff:f8:70:f5:c6:2a:d5:21:80:29:23:6c:e4:c4:98:89:ca:c9: 22:70:14:5a:3b:48:ec:ad:4f:5d:c1:f4:31:2f:da:d3:03:be: 91:b6:d8:20:0c:6f:dc:dd:71:73:05:05:8e:cc:57:94:9f:f8: c1:84:ea:f6:b1:04:87:c5:a6:a5:44:a9:1e:7a:c7:06:a3:0d: bf:62:43:b6:05:62:34:7a:3d:0a:1b:3d:56:f7:9d:98:75:fc: b8:11:55:2e:5c:89:b0:8d:99:25:d1:e6:ae:95:ec:7b:1b:89: 10:d9:cf:f7:24:f1:48:72:1a:d5:86:e9:7e:54:c1:64:39:b0: 2d:b8:48:6c:b5:a9:29:bb:ed:0c:aa:7e:7f:b5:d5:e9:4f:e8: a9:44:ce:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1dujPAFbYlbpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTY5M2Y5NTgtZTVlMS00MGNlLTgzNTItNzVjMDcwYTM5YmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf3a8ytgep5iNLka/7Tki1ad3NOczMjNSdDB 6a0C6l/vD2dC0XszEIAcCGMckE8jsPGaGgJBj+yq8nAk/3sTH4Ye74IJwhqkebor W3ZQTVtepgqDpIJwdeqvDukrZgkD9/7XZVZv7/Akklv65aFhlMU5rUCoM82tWqk5 EkWoVQE+Pl6KwCXCcabhO14cR2tJ7pGkJg0/PWJfXA0KHUCDu0ovK4ndtwl6lgNg 4sZFCpKIEumFVHPz/8khAr1t9Bgd5oDsFEIi9/aYU3mrHfmkgNfL+dS9FqGgNFPs T17T4LurLuk1s/P5ttb5JaqsXhyvEGAsOTggD/z2r+hvhPtTfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjmO/zzDB6Ic46o4XGM05F9CGDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGVmNmE3YzUtNWRhYi0z ZmQ0LTk3MWQtZmExNWFhOTY4YzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/2mpwkI7W2lwYg19ooe+iiptPRaJ5yVZ+jpwxIWwLCHgSQqGEF4MTA W/skWxyqVeeqTzEEFPcqsczUhPai6A2M9cMmOUmdMCfB9LwDFbR5zxP3zed9Y4RN ZbKT12lEdbI1clvloi9IZy0nPv/4cPXGKtUhgCkjbOTEmInKySJwFFo7SOytT13B 9DEv2tMDvpG22CAMb9zdcXMFBY7MV5Sf+MGE6vaxBIfFpqVEqR56xwajDb9iQ7YF YjR6PQobPVb3nZh1/LgRVS5cibCNmSXR5q6V7HsbiRDZz/ck8UhyGtWG6X5UwWQ5 sC24SGy1qSm77Qyqfn+11elP6KlEzsE= -----END CERTIFICATE-----Generated at Sun Apr 27 01:02:53 2025 by rpki-client