$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd1c8e68-8d92-3fe1-9a51-65ca1877abad.roa File: cd1c8e68-8d92-3fe1-9a51-65ca1877abad.roa (raw, json) Hash identifier: 0oAAEH4+O1kNxJsYpGBn6/fef7cMDONnH7BmkQ0igQ8= Subject key identifier: 24:F9:64:90:B7:28:EF:72:B4:EC:13:49:C1:4D:E3:DF:C3:BA:55:13 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAB619771137814F724C40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd1c8e68-8d92-3fe1-9a51-65ca1877abad.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 198.45.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:b6:19:77:11:37:81:4f:72:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=0ab28ee1-38a5-4b1b-a488-95530f2ee28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f9:46:29:ac:d2:ba:5c:67:ef:13:46:c9:20: 10:af:cb:de:d6:21:43:97:f6:f6:eb:75:ea:94:05: 3b:33:48:27:72:d8:1f:cd:ea:85:a3:0f:9f:d5:9e: 99:8a:3b:3f:c9:61:9f:be:96:e9:ea:a5:44:a4:6d: 54:5d:a2:0f:b2:e1:e9:6f:a9:4e:8e:87:32:0a:41: 81:38:4d:75:73:eb:2a:49:a6:c7:89:10:14:59:79: 5f:40:e0:b0:41:85:cf:22:b8:c2:91:0c:98:cd:5a: 07:a0:01:2d:94:3d:12:93:d7:d0:0b:19:82:fa:35: be:4d:ab:eb:0f:da:17:d3:7f:54:d4:cb:37:e6:c1: 80:af:37:67:66:2a:06:f0:0f:7e:3a:e5:db:fd:3f: 71:fe:f6:6b:a8:79:6b:d6:f2:d9:5b:d4:df:80:62: e1:41:ac:6d:07:f4:b0:07:e6:15:a6:21:20:32:8f: e9:7c:04:d4:7b:a5:33:b7:b9:9c:4d:2d:f5:ce:34: ae:5d:1d:21:f4:b6:bd:fd:8c:36:68:6a:28:79:44: d6:dd:0a:90:f5:fd:1e:ed:24:ad:b9:17:bc:06:09: 29:ed:42:a0:41:5b:e4:72:d2:a5:22:49:e9:29:16: bc:17:08:79:4e:d6:66:71:be:9d:07:d1:08:cd:44: b3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F9:64:90:B7:28:EF:72:B4:EC:13:49:C1:4D:E3:DF:C3:BA:55:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd1c8e68-8d92-3fe1-9a51-65ca1877abad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:c1:e6:04:0f:ba:c5:9a:02:e8:81:bb:ef:39:9a:a7:bb:ac: 32:84:a9:c2:fb:01:b3:fa:97:9a:a3:40:2f:1a:1a:ac:d5:50: f2:91:61:65:0c:94:02:c7:c8:9f:5c:20:b3:ea:ed:1c:85:ae: b9:45:07:09:5f:7e:56:70:ba:2b:82:ab:8a:f0:96:96:0a:a4: 1f:57:2b:8d:10:05:35:b2:9a:3b:8e:e0:0a:1e:e9:f5:5c:58: f7:68:62:26:df:6c:aa:74:10:d8:d5:37:a2:36:dc:6b:ae:c9: e7:ea:6c:8f:62:d4:53:23:c6:85:38:65:ae:c8:36:af:4a:bd: ed:f8:85:a6:7f:19:ff:6d:f2:88:12:66:8e:76:29:04:35:20: cc:ae:69:4c:19:81:4c:b9:a5:6c:1a:5f:76:a3:b7:ef:06:56: 32:6d:72:3e:54:c5:a1:c9:38:eb:ed:25:d6:cb:63:eb:a7:1d: c3:1e:c7:97:9a:7e:0a:4b:c6:30:a8:d7:7c:15:31:26:1c:97: 7e:a8:b7:61:49:76:ea:57:3b:8b:7d:06:14:2b:ea:e1:31:07: 1e:49:83:a0:df:99:8b:8b:6e:85:13:a7:a3:f9:1d:d3:50:e6: c3:08:26:7d:25:19:d0:39:96:d9:74:28:fe:bb:82:77:6c:75: 80:29:85:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurYZdxE3gU9yTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MGFiMjhlZTEtMzhhNS00YjFiLWE0ODgtOTU1MzBmMmVlMjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/lGKazSulxn7xNGySAQr8ve1iFDl/b263Xq lAU7M0gnctgfzeqFow+f1Z6Zijs/yWGfvpbp6qVEpG1UXaIPsuHpb6lOjocyCkGB OE11c+sqSabHiRAUWXlfQOCwQYXPIrjCkQyYzVoHoAEtlD0Sk9fQCxmC+jW+Tavr D9oX039U1Ms35sGArzdnZioG8A9+OuXb/T9x/vZrqHlr1vLZW9TfgGLhQaxtB/Sw B+YVpiEgMo/pfATUe6Uzt7mcTS31zjSuXR0h9La9/Yw2aGooeUTW3QqQ9f0e7SSt uRe8Bgkp7UKgQVvkctKlIknpKRa8Fwh5TtZmcb6dB9EIzUSzZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCT5ZJC3KO9ytOwTScFN49/DulUTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2QxYzhlNjgtOGQ5Mi0z ZmUxLTlhNTEtNjVjYTE4NzdhYmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi24MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPB5gQPusWaAuiBu+85mqe7rDKEqcL7AbP6l5qjQC8aGqzVUPKRYWUM lALHyJ9cILPq7RyFrrlFBwlfflZwuiuCq4rwlpYKpB9XK40QBTWymjuO4Aoe6fVc WPdoYibfbKp0ENjVN6I23GuuyefqbI9i1FMjxoU4Za7INq9Kve34haZ/Gf9t8ogS Zo52KQQ1IMyuaUwZgUy5pWwaX3ajt+8GVjJtcj5UxaHJOOvtJdbLY+unHcMex5ea fgpLxjCo13wVMSYcl36ot2FJdupXO4t9BhQr6uExBx5Jg6DfmYuLboUTp6P5HdNQ 5sMIJn0lGdA5ltl0KP67gndsdYAphWo= -----END CERTIFICATE-----Generated at Sun Apr 27 04:02:02 2025 by rpki-client