$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c611ddbb-6481-35af-a11b-802d403abce8.roa File: c611ddbb-6481-35af-a11b-802d403abce8.roa (raw, json) Hash identifier: 7R20CKWIvazQjDiXRNJ5WjrPUFAeqcjqtifmf3Nft3E= Subject key identifier: 14:E7:C5:2C:F4:F3:5B:1F:C1:11:71:5C:EC:22:C1:EF:43:0E:3F:6F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB5785474E4823D8E81680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c611ddbb-6481-35af-a11b-802d403abce8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 198.45.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:57:85:47:4e:48:23:d8:e8:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=bd5ff1f2-f0dd-491f-9050-37d6ed384e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:11:eb:8f:9d:68:36:4a:27:ae:17:1d:56:8e: 37:af:f4:5c:6c:5d:20:7d:6f:df:39:e2:ac:2f:79: 02:ca:cf:81:55:d5:6b:58:92:a6:41:e1:c8:b5:eb: 50:0e:ff:a4:0a:2d:be:6c:6c:09:d2:37:b0:b7:6e: d9:16:47:aa:6c:64:8b:6b:3f:a5:fc:e9:69:75:b4: 37:8c:c1:f5:b3:21:db:84:ee:da:78:5d:ea:84:ef: 18:2c:b2:28:6f:79:e9:67:f8:ce:f1:5a:59:c1:1f: f6:93:d7:b1:ba:c0:49:3c:d9:82:2e:2d:44:c4:30: 55:1e:cf:fc:86:99:ba:4e:ac:f3:a7:85:5f:8d:fa: 34:45:e5:c7:68:1e:62:e7:bc:f2:78:18:8b:05:3f: ab:a0:c3:b0:4e:49:44:37:f0:76:9f:e2:4e:fc:7b: 9f:fe:1d:76:93:41:94:dc:f7:3d:f6:2a:10:65:30: 73:6c:52:9f:08:59:58:1c:19:38:e2:f6:a0:f2:5c: 36:24:3d:a8:a8:c8:c3:67:32:90:11:17:0b:a7:14: a1:1d:55:89:3e:10:99:04:45:d5:9c:d5:f0:b8:e4: 51:11:93:9f:2c:39:cd:22:00:d1:f6:28:3b:1f:1c: fa:74:aa:15:04:44:b3:13:a7:99:29:e2:d5:cd:47: 96:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E7:C5:2C:F4:F3:5B:1F:C1:11:71:5C:EC:22:C1:EF:43:0E:3F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c611ddbb-6481-35af-a11b-802d403abce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:d3:e8:39:e9:a7:7c:16:30:1a:b5:9a:9f:90:5c:31:d1:c6: 43:25:6c:95:b0:41:c7:eb:bd:a4:75:e5:8b:0f:22:83:7e:1f: c9:98:74:16:fd:dd:ae:ac:09:f9:93:37:25:d8:1f:85:26:82: 19:50:19:b4:94:a3:dc:6b:2c:7d:b9:44:d6:be:d0:bb:07:96: c9:de:9b:55:ed:28:63:08:4c:a3:6e:c4:dc:27:d4:a3:7a:92: ba:7c:f0:2a:8d:27:52:a3:7e:2c:ce:2b:6d:6a:65:cc:fc:ff: 39:a5:35:a6:f0:f9:e9:9b:b0:d7:13:2f:ae:3b:27:54:af:af: 11:82:79:4d:55:62:ff:94:ec:f1:9f:b3:35:4c:fc:31:8a:e6: bf:93:54:49:e8:60:9f:64:38:23:0e:6d:93:4b:14:d1:f5:92: 4a:3a:5d:e7:45:20:e9:a1:69:42:52:c8:5b:87:77:98:53:b5: fd:45:62:f1:10:73:1d:f9:97:36:11:bf:33:e1:4b:86:f8:15: cc:98:bc:ad:e5:f3:df:e2:4d:9c:6b:d2:00:21:3d:e3:2c:b9: 26:e4:31:37:17:76:16:7c:10:ee:94:d1:35:98:4b:5e:19:94: b3:1f:6a:94:d0:df:14:7f:b7:72:9a:2f:1f:48:73:41:b3:6d: df:84:37:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1eFR05II9joFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YmQ1ZmYxZjItZjBkZC00OTFmLTkwNTAtMzdkNmVkMzg0ZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxHrj51oNkonrhcdVo43r/RcbF0gfW/fOeKs L3kCys+BVdVrWJKmQeHItetQDv+kCi2+bGwJ0jewt27ZFkeqbGSLaz+l/OlpdbQ3 jMH1syHbhO7aeF3qhO8YLLIob3npZ/jO8VpZwR/2k9exusBJPNmCLi1ExDBVHs/8 hpm6Tqzzp4Vfjfo0ReXHaB5i57zyeBiLBT+roMOwTklEN/B2n+JO/Huf/h12k0GU 3Pc99ioQZTBzbFKfCFlYHBk44vag8lw2JD2oqMjDZzKQERcLpxShHVWJPhCZBEXV nNXwuORREZOfLDnNIgDR9ig7Hxz6dKoVBESzE6eZKeLVzUeWrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTnxSz081sfwRFxXOwiwe9DDj9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzYxMWRkYmItNjQ4MS0z NWFmLWExMWItODAyZDQwM2FiY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3T6Dnpp3wWMBq1mp+QXDHRxkMlbJWwQcfrvaR15YsPIoN+H8mYdBb9 3a6sCfmTNyXYH4UmghlQGbSUo9xrLH25RNa+0LsHlsnem1XtKGMITKNuxNwn1KN6 krp88CqNJ1KjfizOK21qZcz8/zmlNabw+embsNcTL647J1SvrxGCeU1VYv+U7PGf szVM/DGK5r+TVEnoYJ9kOCMObZNLFNH1kko6XedFIOmhaUJSyFuHd5hTtf1FYvEQ cx35lzYRvzPhS4b4FcyYvK3l89/iTZxr0gAhPeMsuSbkMTcXdhZ8EO6U0TWYS14Z lLMfapTQ3xR/t3KaLx9Ic0Gzbd+ENyc= -----END CERTIFICATE-----Generated at Sun Apr 27 00:19:29 2025 by rpki-client