$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6646a65a-deae-385f-b11d-7194742f2873.roa File: 6646a65a-deae-385f-b11d-7194742f2873.roa (raw, json) Hash identifier: P6MjwT/1I4SZyanDnDpzYsRyPJ6NS5FswNL9ghVwdMc= Subject key identifier: F9:52:C0:93:D2:F1:4C:88:F2:99:AA:99:E7:A4:ED:95:C3:65:FA:41 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB594C23468B7FA949ED00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6646a65a-deae-385f-b11d-7194742f2873.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 198.45.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:59:4c:23:46:8b:7f:a9:49:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a1d4f31c-8dee-42d0-bd31-d3a283e8ec06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:fe:e9:87:85:4f:28:d7:6a:f6:5f:98:4b: 98:53:3a:82:77:59:28:07:89:33:ee:2d:f1:5f:3d: 7b:0a:8e:a8:68:0b:7b:64:74:33:a3:f2:a2:02:77: cf:2f:4d:c7:c8:1c:55:73:22:43:20:54:65:65:ca: d4:7a:19:49:7f:b7:ce:00:c5:c2:5c:74:2e:a8:94: 35:7f:a9:5c:b5:2e:cf:ee:4c:9d:87:ad:b2:92:c6: 73:28:b1:57:2e:cd:a1:11:1b:5d:74:7c:44:13:f7: d9:d1:4d:16:17:6f:d4:3b:fc:e4:a5:b7:ed:26:f5: 7c:d9:4d:79:b7:d9:a9:c3:bd:74:52:a9:c7:ef:31: ac:8a:94:d3:51:fa:0a:1a:be:4e:79:a9:e8:7b:c9: e3:d5:ac:e6:a3:ec:1a:34:31:50:33:bb:94:db:1a: 67:d4:0c:8e:36:a0:b6:39:86:0b:2e:40:d1:f6:f4: 36:41:d4:b7:e2:04:ba:6d:43:bf:99:12:07:9a:f8: 18:95:76:1d:77:68:e5:56:95:7f:c4:e6:00:b8:e6: 29:80:4f:f7:3c:31:e8:d8:4d:ba:00:46:2f:e5:92: 20:68:4f:3e:53:96:77:97:53:55:b8:ea:55:49:92: dc:dc:d4:47:b0:30:e5:d3:ec:04:b1:37:89:86:48: 86:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:52:C0:93:D2:F1:4C:88:F2:99:AA:99:E7:A4:ED:95:C3:65:FA:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6646a65a-deae-385f-b11d-7194742f2873.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:a4:68:18:35:e1:9d:84:91:74:d9:88:70:f4:be:16:06:3b: 9f:0e:6b:19:c9:5f:80:a3:25:f4:52:97:40:8f:dc:4c:99:79: 7f:31:db:f1:6e:77:98:fe:8d:c8:40:2c:f6:d8:bf:9b:73:07: cd:72:bf:99:da:c8:8f:a2:e3:29:38:ef:8e:21:6b:ac:fd:ed: b9:19:2f:ff:61:fb:27:0a:68:89:8c:f6:14:73:0b:74:8b:58: 12:1d:2c:ec:77:d8:48:45:b0:a9:a2:6a:00:44:e2:a3:b0:1e: 8e:d9:99:3e:62:8c:38:a3:a3:f2:fa:55:bb:d1:29:17:e0:f5: 39:22:a1:89:ad:5e:e8:3b:4c:ce:df:33:07:61:23:3a:b4:76: fd:b6:6f:e3:5f:ba:90:dd:5e:2e:2b:34:7a:ea:39:a4:f3:10: 09:69:1e:ef:bb:01:9b:1e:37:89:e1:be:2f:ab:46:8a:0b:8f: 47:44:a6:95:4b:2f:5d:17:a2:b7:50:41:45:63:e4:04:81:8a: 5c:1c:cd:2b:89:14:f5:01:e3:8b:08:32:98:4c:f9:ef:76:a8: 97:3e:61:51:12:d6:6b:0b:f5:a0:4f:24:ef:e2:ce:33:43:d0: a6:cc:db:1d:a3:4e:56:3c:4c:cb:84:f4:cb:05:c6:8d:f0:a1: 78:cb:ea:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1lMI0aLf6lJ7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTFkNGYzMWMtOGRlZS00MmQwLWJkMzEtZDNhMjgzZThlYzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTr+6YeFTyjXavZfmEuYUzqCd1koB4kz7i3x Xz17Co6oaAt7ZHQzo/KiAnfPL03HyBxVcyJDIFRlZcrUehlJf7fOAMXCXHQuqJQ1 f6lctS7P7kydh62yksZzKLFXLs2hERtddHxEE/fZ0U0WF2/UO/zkpbftJvV82U15 t9mpw710UqnH7zGsipTTUfoKGr5Oeanoe8nj1azmo+waNDFQM7uU2xpn1AyONqC2 OYYLLkDR9vQ2QdS34gS6bUO/mRIHmvgYlXYdd2jlVpV/xOYAuOYpgE/3PDHo2E26 AEYv5ZIgaE8+U5Z3l1NVuOpVSZLc3NRHsDDl0+wEsTeJhkiGwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlSwJPS8UyI8pmqmeek7ZXDZfpBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjY0NmE2NWEtZGVhZS0z ODVmLWIxMWQtNzE5NDc0MmYyODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWkaBg14Z2EkXTZiHD0vhYGO58OaxnJX4CjJfRSl0CP3EyZeX8x2/Fu d5j+jchALPbYv5tzB81yv5nayI+i4yk4744ha6z97bkZL/9h+ycKaImM9hRzC3SL WBIdLOx32EhFsKmiagBE4qOwHo7ZmT5ijDijo/L6VbvRKRfg9TkioYmtXug7TM7f MwdhIzq0dv22b+NfupDdXi4rNHrqOaTzEAlpHu+7AZseN4nhvi+rRooLj0dEppVL L10XordQQUVj5ASBilwczSuJFPUB44sIMphM+e92qJc+YVES1msL9aBPJO/izjND 0KbM2x2jTlY8TMuE9MsFxo3woXjL6j8= -----END CERTIFICATE-----Generated at Tue Apr 29 16:35:03 2025 by rpki-client