$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5050e10f-3603-3531-ae6a-2649953d3026.roa File: 5050e10f-3603-3531-ae6a-2649953d3026.roa (raw, json) Hash identifier: iIbp+UIPObPyflFNfVPSTU7DKbX8+4sOLtv0jBjOr7E= Subject key identifier: 28:14:19:0F:8C:88:C6:5B:2D:CC:AB:96:B4:79:E2:D5:63:70:19:B5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB5940BBB5DDF9C56D2780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5050e10f-3603-3531-ae6a-2649953d3026.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 198.45.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:59:40:bb:b5:dd:f9:c5:6d:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=985cecc3-4539-4689-9aa4-4a471103fa1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a8:f1:92:ca:63:0d:ee:ae:2d:50:12:dc:3a: b4:7b:42:41:9b:61:3a:20:e4:3e:cc:23:39:f8:c3: 9a:e5:c1:b9:21:3c:b2:4d:f6:4a:bc:fe:95:9b:5e: f2:fc:c0:ca:41:0a:40:16:67:a3:2c:43:f1:f6:03: e4:4b:7f:87:de:f2:d6:b8:7c:04:41:ba:41:74:54: 14:d8:44:a4:a3:a2:35:13:da:5a:d1:00:dc:5a:af: 6d:5b:8d:09:d9:43:d4:2e:c6:f2:3b:47:29:30:94: 7c:41:c7:5c:46:e7:a3:a2:03:ba:64:b0:88:da:eb: 5e:7c:76:24:9a:02:54:89:33:a5:e3:b9:57:65:f0: 58:cd:77:29:16:01:e5:f9:0c:a7:39:21:74:4b:25: 7f:27:60:25:a9:62:40:65:76:21:d2:e0:b1:cf:a5: a6:0d:c7:59:83:66:ab:65:77:bd:21:8a:e1:8d:42: e7:16:31:ea:d2:5a:52:c5:b2:f9:e6:12:99:4d:f3: 9f:6d:8a:82:d3:6f:b2:38:65:ce:cd:39:06:52:7c: a8:fa:0c:8a:3e:a7:ad:4d:7e:47:ab:6a:c9:2a:cc: bf:ff:d6:aa:02:27:b8:77:d4:4f:73:0c:a1:1b:4b: 1a:4b:49:eb:8a:0e:1f:ff:06:9a:cd:16:54:96:1a: 47:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:14:19:0F:8C:88:C6:5B:2D:CC:AB:96:B4:79:E2:D5:63:70:19:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5050e10f-3603-3531-ae6a-2649953d3026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:74:4d:28:9c:1c:00:81:8b:45:ce:29:ca:fe:fe:c4:71:dd: e4:d3:4d:61:e4:5c:40:b1:30:ef:2e:80:3b:df:a6:cd:20:84: 76:5b:8f:30:62:d6:be:5a:84:4f:71:b6:fe:12:21:93:93:15: 47:3d:65:43:14:55:d4:6c:9a:40:5b:4d:b3:ce:95:56:72:bb: 7b:d3:20:bd:ad:66:a3:eb:c3:c2:1b:b8:f2:35:62:ec:cc:9c: cb:47:ea:f6:f4:a4:32:a5:24:a2:46:d8:87:99:a3:e9:83:00: 00:d2:7a:12:d7:7c:b8:6a:54:df:39:79:d1:02:22:f7:a3:d0: 67:60:d8:f4:31:5a:66:16:b6:62:7e:8f:3a:0c:77:aa:f9:ea: 43:25:ee:08:24:64:5b:66:f6:3b:4e:9d:d5:d9:08:0b:f8:7a: ee:f1:e1:0b:be:f5:9f:59:bb:84:28:31:e7:50:c3:61:3e:38: 58:03:81:bb:67:19:7c:5d:dc:e6:b9:46:08:0e:5d:4e:41:49: 11:60:3c:3f:4d:e0:4b:ef:f7:6b:e4:a1:f3:72:28:66:04:99: e2:cb:08:74:57:48:b6:49:47:a6:30:9e:0b:0c:26:b3:cb:87: f3:f8:fb:30:15:32:65:ea:57:58:27:e9:c1:20:93:e3:b9:19: 9c:9c:41:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1lAu7Xd+cVtJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTg1Y2VjYzMtNDUzOS00Njg5LTlhYTQtNGE0NzExMDNmYTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgajxkspjDe6uLVAS3Dq0e0JBm2E6IOQ+zCM5 +MOa5cG5ITyyTfZKvP6Vm17y/MDKQQpAFmejLEPx9gPkS3+H3vLWuHwEQbpBdFQU 2ESko6I1E9pa0QDcWq9tW40J2UPULsbyO0cpMJR8QcdcRuejogO6ZLCI2utefHYk mgJUiTOl47lXZfBYzXcpFgHl+QynOSF0SyV/J2AlqWJAZXYh0uCxz6WmDcdZg2ar ZXe9IYrhjULnFjHq0lpSxbL55hKZTfOfbYqC02+yOGXOzTkGUnyo+gyKPqetTX5H q2rJKsy//9aqAie4d9RPcwyhG0saS0nrig4f/waazRZUlhpHNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgUGQ+MiMZbLcyrlrR54tVjcBm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTA1MGUxMGYtMzYwMy0z NTMxLWFlNmEtMjY0OTk1M2QzMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB0TSicHACBi0XOKcr+/sRx3eTTTWHkXECxMO8ugDvfps0ghHZbjzBi 1r5ahE9xtv4SIZOTFUc9ZUMUVdRsmkBbTbPOlVZyu3vTIL2tZqPrw8IbuPI1YuzM nMtH6vb0pDKlJKJG2IeZo+mDAADSehLXfLhqVN85edECIvej0Gdg2PQxWmYWtmJ+ jzoMd6r56kMl7ggkZFtm9jtOndXZCAv4eu7x4Qu+9Z9Zu4QoMedQw2E+OFgDgbtn GXxd3Oa5RggOXU5BSRFgPD9N4Evv92vkofNyKGYEmeLLCHRXSLZJR6YwngsMJrPL h/P4+zAVMmXqV1gn6cEgk+O5GZycQb4= -----END CERTIFICATE-----Generated at Sun Apr 27 03:59:53 2025 by rpki-client