$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c25c0ef8-71a4-30c6-af4a-7607f4389d99.roa File: c25c0ef8-71a4-30c6-af4a-7607f4389d99.roa (raw, json) Hash identifier: QmX+Q21jKVPMn4TW93rBeUPlFNBzD1fNtE2suasFOws= Subject key identifier: 42:E9:40:2C:5B:29:86:BD:42:89:02:15:41:F7:C5:AB:ED:57:0D:64 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB57A7FAB1AD7F92089FA0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c25c0ef8-71a4-30c6-af4a-7607f4389d99.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 198.45.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:57:a7:fa:b1:ad:7f:92:08:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=063064f7-8818-446b-b5e2-f2fb2057db7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4e:cd:dc:e4:92:6d:50:b0:95:3b:2d:f3:e2: 1f:6d:68:f1:f6:09:c2:04:74:e2:61:13:89:c6:83: 45:d0:69:c2:ac:80:06:16:24:34:f2:a7:63:12:a0: 50:6f:ab:17:61:b2:78:07:c8:b0:79:8d:bd:70:a0: 9f:40:7e:20:c9:25:ac:8a:04:16:0e:e3:c7:49:15: 2a:26:f4:fe:5c:ff:d7:ba:0d:76:9e:0e:02:d8:73: a1:8b:2e:87:c7:10:18:91:93:70:87:07:0c:1f:30: 94:ba:e5:ab:01:60:4d:c4:81:88:a9:44:30:4b:28: 76:36:9d:2a:d8:19:0a:6a:38:74:38:da:65:fc:0f: 80:b9:15:f2:de:68:56:00:5d:46:ab:29:67:38:7a: 70:e2:46:d4:12:4a:c4:7f:c8:ff:39:b9:70:66:87: e0:fc:18:ab:71:a9:ce:58:04:3c:ac:97:83:74:ed: cf:d5:27:2f:2c:19:73:6a:b0:0c:6c:2c:e1:4a:f6: d0:40:c4:5b:ac:0b:e8:2c:f0:0e:76:18:d2:e3:0f: cb:48:59:4a:d7:72:70:2c:f9:5c:d4:da:a1:61:5a: 2c:c0:14:02:29:40:2a:0a:72:39:a2:7e:af:28:b4: 44:31:1c:da:a9:f8:bd:35:d8:84:d6:3e:d9:de:c9: 0e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E9:40:2C:5B:29:86:BD:42:89:02:15:41:F7:C5:AB:ED:57:0D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c25c0ef8-71a4-30c6-af4a-7607f4389d99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:e6:26:a0:b6:71:62:58:39:c1:d3:45:4c:1d:c0:b6:18:70: 3e:22:58:23:34:ab:f0:7b:a2:91:5f:c6:94:7d:eb:39:da:8f: 75:f9:98:01:84:b9:13:82:59:e1:7b:e3:8f:37:0f:8c:87:ae: 8e:30:86:0c:76:18:ba:24:85:c6:d3:ac:cc:bb:b8:73:07:a8: 7c:28:c4:be:4e:cd:21:0d:c1:48:d4:1c:f6:55:45:e1:0d:c2: 1f:cb:d7:28:ef:89:b2:00:07:1d:51:6c:5a:70:79:e2:ae:2e: e3:20:12:86:31:b6:51:b8:95:95:a5:bf:08:16:78:2d:08:d0: e3:57:3b:64:8e:da:81:7f:93:09:e1:91:da:f7:1e:7a:56:9c: 4b:25:92:1a:c6:3f:18:02:f3:ae:83:ef:7d:52:45:c0:40:5d: fd:59:f0:f1:28:4b:d3:c2:c8:81:bf:b4:cd:21:02:38:b1:9a: 69:e6:e3:fa:a6:a8:37:5f:ff:27:f7:19:a2:0a:e8:56:39:b7: 21:00:97:95:f2:cf:07:0a:9f:06:c9:17:20:ff:bb:c8:2a:0d: 1f:c6:e5:41:dc:42:42:4b:d3:30:03:c8:93:01:1b:14:19:23: f1:9c:94:53:fe:2d:5f:64:f0:4f:cd:0a:6f:d0:86:9c:8c:cf: c1:ba:27:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1en+rGtf5IIn6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDYzMDY0ZjctODgxOC00NDZiLWI1ZTItZjJmYjIwNTdkYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi07N3OSSbVCwlTst8+IfbWjx9gnCBHTiYROJ xoNF0GnCrIAGFiQ08qdjEqBQb6sXYbJ4B8iweY29cKCfQH4gySWsigQWDuPHSRUq JvT+XP/Xug12ng4C2HOhiy6HxxAYkZNwhwcMHzCUuuWrAWBNxIGIqUQwSyh2Np0q 2BkKajh0ONpl/A+AuRXy3mhWAF1GqylnOHpw4kbUEkrEf8j/OblwZofg/BircanO WAQ8rJeDdO3P1ScvLBlzarAMbCzhSvbQQMRbrAvoLPAOdhjS4w/LSFlK13JwLPlc 1NqhYVoswBQCKUAqCnI5on6vKLREMRzaqfi9NdiE1j7Z3skOTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELpQCxbKYa9QokCFUH3xavtVw1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzI1YzBlZjgtNzFhNC0z MGM2LWFmNGEtNzYwN2Y0Mzg5ZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANfmJqC2cWJYOcHTRUwdwLYYcD4iWCM0q/B7opFfxpR96znaj3X5mAGE uROCWeF74483D4yHro4whgx2GLokhcbTrMy7uHMHqHwoxL5OzSENwUjUHPZVReEN wh/L1yjvibIABx1RbFpweeKuLuMgEoYxtlG4lZWlvwgWeC0I0ONXO2SO2oF/kwnh kdr3HnpWnEslkhrGPxgC866D731SRcBAXf1Z8PEoS9PCyIG/tM0hAjixmmnm4/qm qDdf/yf3GaIK6FY5tyEAl5XyzwcKnwbJFyD/u8gqDR/G5UHcQkJL0zADyJMBGxQZ I/GclFP+LV9k8E/NCm/QhpyMz8G6J6w= -----END CERTIFICATE-----Generated at Mon Apr 28 12:32:21 2025 by rpki-client