$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c20f17c-b098-339d-a498-8bb2ec06ebed.roa File: 9c20f17c-b098-339d-a498-8bb2ec06ebed.roa (raw, json) Hash identifier: q16SKZV8UgbgODJ26kE4/tOVIQBtwQLkxtp7M8SfeMM= Subject key identifier: 09:CA:D8:85:62:30:13:6A:CB:AF:19:8A:37:34:6D:DE:D2:5F:E6:7A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB5919B8B3ECD47FD43080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c20f17c-b098-339d-a498-8bb2ec06ebed.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 198.45.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:59:19:b8:b3:ec:d4:7f:d4:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=aa2ba40c-00a9-4286-ad5d-5109e5b3a7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:92:6b:fb:00:07:37:90:74:ec:0d:d4:f0:95: e7:ab:9f:ff:31:db:cb:8b:fe:9b:8a:3e:69:fd:78: 76:8e:0d:c2:3d:cc:ca:e0:40:1f:5d:55:bb:44:e2: 72:58:66:d0:b9:bd:7e:05:ae:47:71:5c:ea:6b:df: 74:13:0c:fa:5b:f7:76:f9:b1:ba:c8:54:df:b1:57: a6:0a:c7:7e:d9:47:02:5e:be:07:ee:e2:e9:aa:7b: 09:25:a5:57:68:fc:99:0a:47:35:6f:13:5c:a5:9c: 30:77:45:98:f5:4e:16:38:23:b9:32:fe:61:3f:d0: ad:7b:ee:0a:99:40:cf:f4:3f:82:53:17:f7:2e:f7: dd:a3:53:f8:e9:5d:74:a7:cf:7d:65:67:b2:36:40: bb:30:1d:09:3c:8f:77:a8:ec:85:8d:f8:ee:31:11: 1b:52:97:09:93:0b:2e:26:09:2f:ab:b4:db:bf:9c: 78:e5:ab:c8:af:d7:ba:7d:30:3c:5e:72:3d:64:98: d6:66:41:d8:84:8f:b2:2b:2d:c5:3e:5e:c0:db:9c: c2:c5:51:b9:9d:18:0f:ff:19:35:44:ea:7c:55:ee: a9:ba:cb:c6:83:89:6c:d0:f5:05:14:f1:43:d3:53: 1b:11:1a:d1:9f:8f:19:e3:1f:8d:24:13:58:dd:c5: 31:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CA:D8:85:62:30:13:6A:CB:AF:19:8A:37:34:6D:DE:D2:5F:E6:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c20f17c-b098-339d-a498-8bb2ec06ebed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:4b:44:2e:60:88:e6:86:f3:0d:90:b6:10:63:4b:3c:73:ff: 90:bb:1e:ee:7b:cb:b0:62:2c:7a:eb:88:dc:7f:f5:64:62:43: 6b:cf:5d:eb:12:80:36:86:eb:97:1a:1f:68:f1:a0:7b:54:41: e6:cd:15:84:a4:a0:d3:a9:b2:3d:7c:aa:01:78:b2:29:c7:28: 90:e8:94:31:e0:f7:02:ca:3d:38:a9:f6:fe:89:31:7d:fb:b3: 19:84:6f:81:61:e8:3b:6d:97:d1:39:e2:b3:e8:8b:c0:ea:a6: ec:23:0b:79:ac:6a:b2:e2:24:09:ca:d1:57:49:25:c9:a3:ed: 60:d9:1f:fc:27:72:d5:17:bc:2d:4f:24:24:50:2a:bb:08:92: 5c:63:46:a3:95:98:8d:c4:9b:b4:0b:5e:50:ef:86:2e:7b:b4: 43:07:f4:88:c3:fc:dd:57:e8:1b:d8:be:8e:d5:5d:a5:37:de: bc:4f:0e:cd:d5:33:f8:44:0c:62:34:d1:bb:76:80:e9:be:ed: 3c:79:6a:26:4e:f3:d6:ad:b7:88:0c:c0:1d:18:b9:f5:5f:da: a6:b1:1a:29:75:2a:c4:ba:14:c1:b1:29:b8:f3:f7:d2:10:fb: 1c:14:7d:7c:d5:b3:8a:60:04:09:57:16:c8:87:13:3c:28:cd: ac:97:96:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1kZuLPs1H/UMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWEyYmE0MGMtMDBhOS00Mjg2LWFkNWQtNTEwOWU1YjNhN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZJr+wAHN5B07A3U8JXnq5//MdvLi/6bij5p /Xh2jg3CPczK4EAfXVW7ROJyWGbQub1+Ba5HcVzqa990Ewz6W/d2+bG6yFTfsVem Csd+2UcCXr4H7uLpqnsJJaVXaPyZCkc1bxNcpZwwd0WY9U4WOCO5Mv5hP9Cte+4K mUDP9D+CUxf3Lvfdo1P46V10p899ZWeyNkC7MB0JPI93qOyFjfjuMREbUpcJkwsu Jgkvq7Tbv5x45avIr9e6fTA8XnI9ZJjWZkHYhI+yKy3FPl7A25zCxVG5nRgP/xk1 ROp8Ve6pusvGg4ls0PUFFPFD01MbERrRn48Z4x+NJBNY3cUxkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnK2IViMBNqy68Zijc0bd7SX+Z6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWMyMGYxN2MtYjA5OC0z MzlkLWE0OTgtOGJiMmVjMDZlYmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNLRC5giOaG8w2QthBjSzxz/5C7Hu57y7BiLHrriNx/9WRiQ2vPXesS gDaG65caH2jxoHtUQebNFYSkoNOpsj18qgF4sinHKJDolDHg9wLKPTip9v6JMX37 sxmEb4Fh6Dttl9E54rPoi8DqpuwjC3msarLiJAnK0VdJJcmj7WDZH/wnctUXvC1P JCRQKrsIklxjRqOVmI3Em7QLXlDvhi57tEMH9IjD/N1X6BvYvo7VXaU33rxPDs3V M/hEDGI00bt2gOm+7Tx5aiZO89att4gMwB0YufVf2qaxGil1KsS6FMGxKbjz99IQ +xwUfXzVs4pgBAlXFsiHEzwozayXlng= -----END CERTIFICATE-----Generated at Sun Apr 27 22:23:26 2025 by rpki-client