$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1671f9d-2621-3e74-b626-eef07cfa82cb.roa File: d1671f9d-2621-3e74-b626-eef07cfa82cb.roa (raw, json) Hash identifier: x0oxDGnE2emrjoFg/7YTrz8rhlRSTyFGpZoNV74GcTo= Subject key identifier: 7E:2F:4D:35:D4:5B:1E:14:87:9B:B6:66:25:89:80:4F:52:84:F7:A2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB5871A14537267A229040 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1671f9d-2621-3e74-b626-eef07cfa82cb.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 198.45.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:58:71:a1:45:37:26:7a:22:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=136f4ba1-a54e-472e-aa98-b96db7298263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:81:23:7d:d7:91:b7:ea:b3:ab:8d:aa:1c:c2: 9f:56:cf:82:72:cf:8f:8f:72:ec:e4:db:13:66:5c: fc:66:2b:61:62:f6:79:83:5a:d0:53:0c:af:f9:2b: a1:25:1f:43:f9:50:9a:fb:6a:3e:df:ea:21:d8:9a: 9a:5b:65:a5:6a:7c:dd:37:1d:c1:9f:d3:e4:ef:a0: 64:84:9f:8c:51:aa:01:fe:7d:56:6a:2f:45:73:96: aa:27:76:06:ec:31:cb:81:a9:41:05:3f:9a:64:b0: c0:63:66:18:b6:88:0c:3f:ca:4a:bd:f1:f8:58:72: e2:da:bc:a5:de:1f:fc:50:09:04:00:a7:cc:68:16: 23:1a:0a:c2:a6:2f:70:16:5a:d6:61:b7:06:0b:8c: 57:14:7d:50:4d:14:77:a8:7b:2b:88:93:f4:55:22: e9:38:63:0e:0b:4f:21:12:04:48:5e:aa:ba:51:a2: 91:0f:88:54:c5:d3:64:43:90:e2:e0:fb:7c:7e:20: 59:7a:1d:65:23:80:52:35:10:d1:20:f1:69:6a:5c: d8:06:15:2b:13:24:0e:04:e9:8f:4c:d1:29:95:1c: 3e:eb:43:6f:01:5a:57:a7:b3:10:77:4c:88:9c:5a: e6:fb:7f:34:25:0b:66:79:8b:af:49:ed:94:38:98: 7e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2F:4D:35:D4:5B:1E:14:87:9B:B6:66:25:89:80:4F:52:84:F7:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1671f9d-2621-3e74-b626-eef07cfa82cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:c4:c1:15:f3:c8:30:ce:50:bb:a1:72:a9:72:86:da:6e:45: 02:76:9a:6b:5d:17:b4:85:60:06:fd:10:10:16:ec:fb:0f:ef: ab:12:07:ae:3a:a6:02:99:3c:bd:7d:7c:5e:98:e6:84:18:f0: 21:e4:bc:32:26:a6:f8:51:a5:a8:84:f6:ad:db:1c:a3:8c:fe: 32:6c:05:bc:da:88:fa:0e:76:47:1a:b1:b0:c5:86:31:cd:42: ab:66:6c:f5:82:09:90:da:e2:62:69:84:81:21:df:49:72:46: a4:09:08:89:3b:d7:d5:05:eb:ba:e3:1a:32:c2:33:4d:92:d2: 15:68:8b:69:bd:c3:8a:69:5f:52:3a:00:02:2f:43:58:aa:01: 8a:f0:b7:5f:6c:24:2a:82:11:fc:29:60:72:db:6d:26:66:ef: c0:06:e4:12:c7:7b:96:3f:63:e7:85:ef:0a:8f:1a:11:34:0d: ed:42:60:57:67:0f:e2:50:9c:77:14:f9:d0:45:d7:20:e8:9b: 79:17:98:66:c6:25:cf:73:9a:5b:71:9a:d9:74:b6:46:a4:79: 5b:1f:be:3c:64:21:24:a8:35:4c:e9:cb:86:fe:65:69:44:6c: 76:f3:7e:8e:ba:17:01:e1:2c:98:86:44:93:47:6a:86:ef:77: 46:b4:e8:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1hxoUU3JnoikEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTM2ZjRiYTEtYTU0ZS00NzJlLWFhOTgtYjk2ZGI3Mjk4MjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IEjfdeRt+qzq42qHMKfVs+Ccs+Pj3Ls5NsT Zlz8ZithYvZ5g1rQUwyv+SuhJR9D+VCa+2o+3+oh2JqaW2WlanzdNx3Bn9Pk76Bk hJ+MUaoB/n1Wai9Fc5aqJ3YG7DHLgalBBT+aZLDAY2YYtogMP8pKvfH4WHLi2ryl 3h/8UAkEAKfMaBYjGgrCpi9wFlrWYbcGC4xXFH1QTRR3qHsriJP0VSLpOGMOC08h EgRIXqq6UaKRD4hUxdNkQ5Di4Pt8fiBZeh1lI4BSNRDRIPFpalzYBhUrEyQOBOmP TNEplRw+60NvAVpXp7MQd0yInFrm+380JQtmeYuvSe2UOJh+tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4vTTXUWx4Uh5u2ZiWJgE9ShPeiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDE2NzFmOWQtMjYyMS0z ZTc0LWI2MjYtZWVmMDdjZmE4MmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMXEwRXzyDDOULuhcqlyhtpuRQJ2mmtdF7SFYAb9EBAW7PsP76sSB646 pgKZPL19fF6Y5oQY8CHkvDImpvhRpaiE9q3bHKOM/jJsBbzaiPoOdkcasbDFhjHN QqtmbPWCCZDa4mJphIEh30lyRqQJCIk719UF67rjGjLCM02S0hVoi2m9w4ppX1I6 AAIvQ1iqAYrwt19sJCqCEfwpYHLbbSZm78AG5BLHe5Y/Y+eF7wqPGhE0De1CYFdn D+JQnHcU+dBF1yDom3kXmGbGJc9zmltxmtl0tkakeVsfvjxkISSoNUzpy4b+ZWlE bHbzfo66FwHhLJiGRJNHaobvd0a06EY= -----END CERTIFICATE-----Generated at Sun Apr 27 13:12:35 2025 by rpki-client