$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5475a117-2b6e-3627-8b42-d86d2cd504e4.roa File: 5475a117-2b6e-3627-8b42-d86d2cd504e4.roa (raw, json) Hash identifier: tOv2/X303BhzEl1wjXH8Qi0sGfbewQdta5gcBYG7Kd8= Subject key identifier: A6:69:E5:A6:EF:01:69:C1:09:7C:BB:E4:AD:B1:16:9F:53:22:CB:78 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAB673720BA95FCE7F4550 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5475a117-2b6e-3627-8b42-d86d2cd504e4.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 198.45.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:b6:73:72:0b:a9:5f:ce:7f:45:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4bda0be8-2aae-4631-b746-b9aace02d93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f0:f5:8d:12:2b:b3:cc:a9:a7:1c:eb:12:ac: de:25:03:a0:ae:c9:29:c6:6e:dc:ad:62:2b:54:24: 66:7f:1d:66:48:fd:39:b6:12:fe:93:e2:0f:ee:ed: 5c:4f:7f:7d:d5:da:d0:d2:12:3a:68:c2:81:87:d7: a6:dd:44:96:9b:56:30:69:df:20:29:11:f9:d5:c7: c8:01:08:51:ea:c8:14:13:1f:8b:f9:6b:49:ba:68: 40:60:47:b6:9e:70:d8:81:56:42:32:86:29:01:6e: 4a:72:0b:93:c0:7d:e6:9b:d1:0b:e6:86:3d:1d:8e: ef:57:4b:36:e2:b3:2f:11:e1:e1:10:51:7a:a5:ca: 5e:18:0c:e6:bc:be:0c:5b:e0:36:31:eb:b9:16:7c: 60:c3:2d:38:43:c3:60:76:a2:1c:c4:6c:43:4e:4f: 2d:06:8f:07:74:8f:f4:2f:92:ac:e2:d0:33:ab:cd: f7:91:58:83:1e:ee:95:d1:5c:52:2a:30:71:f8:cc: 73:15:9b:f3:5a:33:a0:2b:02:cd:e2:ca:49:28:cd: 06:c8:20:cf:e8:ec:67:6a:7c:8f:30:47:9d:15:e2: 3f:f1:19:0b:c9:c2:ed:41:33:2b:bc:fd:6d:c8:7c: 46:26:e5:d3:c7:22:ff:a2:82:93:6c:6a:33:7f:bf: 3d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:69:E5:A6:EF:01:69:C1:09:7C:BB:E4:AD:B1:16:9F:53:22:CB:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5475a117-2b6e-3627-8b42-d86d2cd504e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:41:de:ba:fc:38:b6:12:6b:06:7b:df:34:4c:97:3b:ea:ac: 6d:22:a6:75:a9:97:fe:ad:82:27:11:93:29:3e:76:7a:24:bd: 6a:c1:a0:bb:20:3a:47:a9:45:5c:39:16:98:8b:05:44:b8:c9: a1:9f:5d:a4:99:89:87:94:87:fa:b1:ec:61:19:46:26:10:f7: 1c:ad:4c:9d:e3:e0:10:40:04:4f:1e:04:ea:52:b8:e6:8a:5b: 7a:3e:c1:a8:b1:c5:69:9b:45:93:13:b7:07:1c:ad:a2:e3:6b: ae:1e:35:9d:10:1e:69:be:9d:a9:b3:8a:74:1a:09:97:00:0a: 64:1d:d0:2b:44:fa:b4:a0:be:36:16:da:ba:63:23:d3:71:2f: 8b:2f:9a:af:7f:18:e0:36:1c:8f:8e:08:0d:62:f5:f7:69:74: b0:e4:d7:12:5e:2a:1f:dc:a0:75:73:71:58:06:1d:70:82:37: 4c:d9:7c:f0:0d:2b:89:2f:1b:8c:cb:b0:e5:b8:87:89:c6:35: b8:da:ad:ef:72:7b:5d:7f:72:52:a3:29:39:51:59:a4:9d:03: 6a:c1:73:e1:0f:77:1b:13:13:a9:9d:f3:4d:9a:8e:62:10:93: 22:2d:3f:d2:f2:a8:d1:a5:ea:1b:9e:4d:2b:c0:bb:af:b9:ff: ea:f4:54:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurZzcgupX85/RVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NGJkYTBiZTgtMmFhZS00NjMxLWI3NDYtYjlhYWNlMDJkOTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvD1jRIrs8yppxzrEqzeJQOgrskpxm7crWIr VCRmfx1mSP05thL+k+IP7u1cT3991drQ0hI6aMKBh9em3USWm1Ywad8gKRH51cfI AQhR6sgUEx+L+WtJumhAYEe2nnDYgVZCMoYpAW5KcguTwH3mm9EL5oY9HY7vV0s2 4rMvEeHhEFF6pcpeGAzmvL4MW+A2Meu5Fnxgwy04Q8NgdqIcxGxDTk8tBo8HdI/0 L5Ks4tAzq833kViDHu6V0VxSKjBx+MxzFZvzWjOgKwLN4spJKM0GyCDP6OxnanyP MEedFeI/8RkLycLtQTMrvP1tyHxGJuXTxyL/ooKTbGozf789zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZp5abvAWnBCXy75K2xFp9TIst4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTQ3NWExMTctMmI2ZS0z NjI3LThiNDItZDg2ZDJjZDUwNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANZB3rr8OLYSawZ73zRMlzvqrG0ipnWpl/6tgicRkyk+dnokvWrBoLsg OkepRVw5FpiLBUS4yaGfXaSZiYeUh/qx7GEZRiYQ9xytTJ3j4BBABE8eBOpSuOaK W3o+waixxWmbRZMTtwccraLja64eNZ0QHmm+namzinQaCZcACmQd0CtE+rSgvjYW 2rpjI9NxL4svmq9/GOA2HI+OCA1i9fdpdLDk1xJeKh/coHVzcVgGHXCCN0zZfPAN K4kvG4zLsOW4h4nGNbjare9ye11/clKjKTlRWaSdA2rBc+EPdxsTE6md802ajmIQ kyItP9LyqNGl6hueTSvAu6+5/+r0VCM= -----END CERTIFICATE-----Generated at Mon Apr 28 06:47:00 2025 by rpki-client