$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8949a05-b098-32fe-99a1-fafcf7a51e72.roa File: c8949a05-b098-32fe-99a1-fafcf7a51e72.roa (raw, json) Hash identifier: lvVPfCrE5tISpwg9BCbv66QyXd+lHXJIZTAJkcUI1eg= Subject key identifier: 1C:C3:BF:5C:72:F3:3A:26:6D:A3:E7:C4:41:7E:03:BF:12:94:55:3E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB56423558938A3F93D000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8949a05-b098-32fe-99a1-fafcf7a51e72.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 198.45.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:56:42:35:58:93:8a:3f:93:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8e63a028-f83c-4cfa-b41a-a5077722e99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:90:10:bb:6c:8e:c8:5e:23:6a:e1:87:9f:70: cc:fc:b8:5a:33:6d:5a:47:e5:6b:35:e1:5d:45:82: 44:cb:40:e7:4e:9e:7d:9d:c6:b9:48:ef:32:4a:ca: e1:ea:49:ab:d3:97:fe:0e:09:4e:2b:01:5b:bd:1c: 53:b1:3f:ad:5a:68:a0:23:ab:16:82:02:c9:4a:f0: 13:ea:01:ac:db:e5:65:ab:c9:23:41:c5:db:b6:99: 92:55:3b:ad:dc:1a:0a:ff:81:ef:d3:67:c7:25:0e: 5c:58:11:69:eb:12:46:c8:34:aa:d4:30:68:ef:5f: de:a6:cc:39:30:e4:c5:9c:d1:37:52:d4:14:53:fb: 48:d7:4e:e5:5f:10:22:10:58:39:a1:ba:f9:7b:ff: 5f:a4:3e:26:12:1a:75:63:b4:b9:9e:5c:b3:5b:3b: c9:71:b7:6c:c6:c9:61:6a:35:55:f8:07:7c:02:3b: 2f:c5:95:7d:34:ad:ae:fe:87:ab:13:e5:e2:61:00: 27:ee:97:48:9a:41:ce:3c:8e:a7:6b:11:87:8d:7f: ea:cb:23:98:1e:7a:c5:f3:aa:47:2b:11:06:69:0c: d8:a5:c2:6a:25:6d:fe:54:7e:de:e6:d1:62:12:75: 95:66:f7:4d:99:73:5d:ba:0c:1e:37:bc:bd:e8:ec: c1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C3:BF:5C:72:F3:3A:26:6D:A3:E7:C4:41:7E:03:BF:12:94:55:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8949a05-b098-32fe-99a1-fafcf7a51e72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:1c:9a:94:4c:43:8e:92:b9:e0:66:20:5c:c0:00:c6:0e:b8: d9:f1:3d:c2:54:00:40:30:b3:0b:54:3f:7e:47:7c:d0:a6:84: 5c:e4:cb:aa:81:0b:8f:2d:d9:e0:43:b6:47:62:bb:46:f2:1f: ca:c4:a2:69:2c:d1:22:39:e7:fc:94:9f:a4:5f:ff:43:70:a7: 81:fb:51:34:83:12:a7:9b:a1:02:7d:6a:36:5b:98:c8:a7:04: ac:70:e1:48:cf:d7:34:ea:35:ec:9d:7d:66:0f:c5:b0:27:ca: 32:87:5f:b3:bd:b9:f6:b0:e4:84:a3:be:05:7a:eb:c7:00:36: 01:2a:83:87:15:9e:7a:fd:09:97:6b:28:74:44:f8:19:ba:ba: 41:d7:3b:0e:d4:d2:19:f2:ea:e2:86:ca:b5:04:cb:98:e6:60: cb:f7:1b:26:1a:14:fc:92:16:69:e9:bf:d4:f6:df:e8:96:c7: c3:a8:73:e7:11:37:7b:8b:18:03:70:ea:33:b7:35:3b:d0:9f: cd:b7:4e:5a:68:f6:15:4b:48:0f:b8:81:e5:f6:0b:1c:4d:94: ef:14:70:64:c3:a7:99:34:64:03:ba:cd:c3:43:1d:24:a8:a0: 89:eb:b7:21:91:13:47:23:ad:cf:6c:cf:37:f9:bd:65:7a:90: 30:f1:fb:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1ZCNViTij+T0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGU2M2EwMjgtZjgzYy00Y2ZhLWI0MWEtYTUwNzc3MjJlOTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5AQu2yOyF4jauGHn3DM/LhaM21aR+VrNeFd RYJEy0DnTp59nca5SO8ySsrh6kmr05f+DglOKwFbvRxTsT+tWmigI6sWggLJSvAT 6gGs2+Vlq8kjQcXbtpmSVTut3BoK/4Hv02fHJQ5cWBFp6xJGyDSq1DBo71/epsw5 MOTFnNE3UtQUU/tI107lXxAiEFg5obr5e/9fpD4mEhp1Y7S5nlyzWzvJcbdsxslh ajVV+Ad8AjsvxZV9NK2u/oerE+XiYQAn7pdImkHOPI6naxGHjX/qyyOYHnrF86pH KxEGaQzYpcJqJW3+VH7e5tFiEnWVZvdNmXNdugweN7y96OzBTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzDv1xy8zombaPnxEF+A78SlFU+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzg5NDlhMDUtYjA5OC0z MmZlLTk5YTEtZmFmY2Y3YTUxZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMEcmpRMQ46SueBmIFzAAMYOuNnxPcJUAEAwswtUP35HfNCmhFzky6qB C48t2eBDtkdiu0byH8rEomks0SI55/yUn6Rf/0Nwp4H7UTSDEqeboQJ9ajZbmMin BKxw4UjP1zTqNeydfWYPxbAnyjKHX7O9ufaw5ISjvgV668cANgEqg4cVnnr9CZdr KHRE+Bm6ukHXOw7U0hny6uKGyrUEy5jmYMv3GyYaFPySFmnpv9T23+iWx8Ooc+cR N3uLGANw6jO3NTvQn823Tlpo9hVLSA+4geX2CxxNlO8UcGTDp5k0ZAO6zcNDHSSo oInrtyGRE0cjrc9szzf5vWV6kDDx+7g= -----END CERTIFICATE-----Generated at Mon Apr 28 01:59:33 2025 by rpki-client