$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9e29835-8977-3975-ae14-1a75a5763318.roa File: b9e29835-8977-3975-ae14-1a75a5763318.roa (raw, json) Hash identifier: PAglN6K795/dc0L/r0KyhM5eESnRDtLPmlLYIMk3BKo= Subject key identifier: 53:29:CB:FB:97:2C:D1:1F:39:FE:97:6C:2D:CE:7D:29:B1:31:3E:EC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB59037A9466C32FB971C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9e29835-8977-3975-ae14-1a75a5763318.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 198.45.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:59:03:7a:94:66:c3:2f:b9:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7a686ece-768e-4bb0-ae4b-d12f37e39b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a4:7c:89:33:5b:86:d8:69:4a:dd:9e:5d:d4: 9b:80:a2:45:db:a7:4e:7a:3f:7d:20:48:ee:7f:28: 18:13:c0:be:00:08:02:8e:7f:46:4c:a5:79:e0:63: 0d:d5:88:bb:d1:4d:c3:22:3b:79:0d:4a:95:ea:50: 66:59:3f:59:15:b6:d1:41:43:35:54:fa:01:96:9d: 77:fe:83:64:eb:5f:01:cc:c4:01:86:69:3f:19:74: 34:a6:7a:ff:97:ed:2b:78:cd:a8:31:61:c3:09:b8: db:4e:61:aa:9e:89:8f:99:dd:70:dd:6d:47:e7:94: 72:7e:4c:8a:a4:9a:c0:26:a9:6f:18:5a:35:f7:55: 5e:5c:d1:f3:6e:85:a5:2d:10:58:a7:54:42:db:4d: de:6c:a7:91:38:7a:49:b0:26:e3:7a:40:64:ef:fb: 5e:dc:49:ca:f5:35:ed:08:2f:77:14:84:79:9d:20: 51:09:9a:c4:2a:b6:89:35:53:2b:41:e3:a1:48:f2: 31:26:33:66:8d:81:e1:70:cb:a0:db:45:f1:f8:2c: 43:d8:c3:56:ec:9d:b7:ab:8d:e0:aa:44:14:7e:3e: b4:67:0e:17:f2:bd:4f:94:0f:29:f1:68:75:c8:30: 37:0a:a8:47:07:5b:b1:79:bd:c5:31:d7:92:2e:2b: b5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:29:CB:FB:97:2C:D1:1F:39:FE:97:6C:2D:CE:7D:29:B1:31:3E:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9e29835-8977-3975-ae14-1a75a5763318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:be:67:82:74:9f:68:95:fe:ab:e8:be:5b:7f:77:7d:89:47: 53:71:41:70:19:cb:d1:92:d8:50:77:43:bf:82:96:72:17:95: 3d:e5:f3:97:4f:b0:c9:40:eb:c9:53:e6:b1:b7:7e:a6:74:c2: 55:cf:96:13:23:de:53:b0:f2:d3:bc:40:43:05:0b:a0:7e:6b: 0a:8e:a0:d6:dd:5c:2a:93:f2:40:b2:67:d4:9a:fe:90:c8:0f: 74:3c:0c:df:36:5f:75:7c:c9:f3:74:c4:fc:7a:0a:59:50:f9: 74:bf:fc:92:ba:bc:61:da:e0:49:53:14:ea:54:7b:5d:5f:4f: 5e:b2:d9:12:b5:13:90:38:ec:e4:ba:42:1b:dc:e1:06:1f:81: 76:a3:41:64:c5:55:d5:66:65:c4:96:96:fd:17:62:38:75:9e: 68:bb:7d:b3:e7:27:c1:26:99:5a:2d:2d:74:ac:c9:ce:5b:af: 79:f3:b6:21:0e:e0:35:bd:d9:e7:ef:66:86:8e:ae:e0:c9:cf: 4d:df:63:32:98:f6:8b:e0:73:86:02:4c:7b:d3:9c:34:45:1f: 36:87:a2:52:89:a2:71:c6:60:9b:a3:62:05:4d:47:d9:62:07: 66:c5:32:d4:26:81:bc:64:b9:8c:ac:c3:aa:53:0f:3b:20:f7: 4f:4d:ed:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1kDepRmwy+5ccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2E2ODZlY2UtNzY4ZS00YmIwLWFlNGItZDEyZjM3ZTM5YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKR8iTNbhthpSt2eXdSbgKJF26dOej99IEju fygYE8C+AAgCjn9GTKV54GMN1Yi70U3DIjt5DUqV6lBmWT9ZFbbRQUM1VPoBlp13 /oNk618BzMQBhmk/GXQ0pnr/l+0reM2oMWHDCbjbTmGqnomPmd1w3W1H55RyfkyK pJrAJqlvGFo191VeXNHzboWlLRBYp1RC203ebKeROHpJsCbjekBk7/te3EnK9TXt CC93FIR5nSBRCZrEKraJNVMrQeOhSPIxJjNmjYHhcMug20Xx+CxD2MNW7J23q43g qkQUfj60Zw4X8r1PlA8p8Wh1yDA3CqhHB1uxeb3FMdeSLiu1EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMpy/uXLNEfOf6XbC3OfSmxMT7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjllMjk4MzUtODk3Ny0z OTc1LWFlMTQtMWE3NWE1NzYzMzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALO+Z4J0n2iV/qvovlt/d32JR1NxQXAZy9GS2FB3Q7+ClnIXlT3l85dP sMlA68lT5rG3fqZ0wlXPlhMj3lOw8tO8QEMFC6B+awqOoNbdXCqT8kCyZ9Sa/pDI D3Q8DN82X3V8yfN0xPx6CllQ+XS//JK6vGHa4ElTFOpUe11fT16y2RK1E5A47OS6 Qhvc4QYfgXajQWTFVdVmZcSWlv0XYjh1nmi7fbPnJ8EmmVotLXSsyc5br3nztiEO 4DW92efvZoaOruDJz03fYzKY9ovgc4YCTHvTnDRFHzaHolKJonHGYJujYgVNR9li B2bFMtQmgbxkuYysw6pTDzsg909N7YA= -----END CERTIFICATE-----Generated at Sun Apr 27 04:07:36 2025 by rpki-client