$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1590f32-a39a-331e-88e9-b1ae0894683b.roa File: f1590f32-a39a-331e-88e9-b1ae0894683b.roa (raw, json) Hash identifier: CwM1jFAWvAkoi6FqI0v1yyY4qX0H9lxZ4yH5Pz8vii8= Subject key identifier: 06:91:F5:54:71:91:01:69:D8:EA:6E:6A:E8:39:29:43:3B:38:8E:E6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAB6BDB5370B2D05249A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1590f32-a39a-331e-88e9-b1ae0894683b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 198.45.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:b6:bd:b5:37:0b:2d:05:24:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d9201dd3-89bc-4f54-bd7b-3871e4124053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3e:91:f3:de:08:f8:0e:07:fc:81:1b:59:4a: 2e:88:b4:ae:35:4f:c8:28:56:93:3c:6c:34:c8:32: d6:c5:01:87:74:0a:af:33:fc:fc:9f:b2:57:4d:e1: bf:e1:05:73:1b:da:3b:5c:37:a6:7f:61:74:e1:9c: 7f:24:01:78:8b:97:97:14:19:e3:38:8a:93:25:fa: e0:11:e9:85:6c:45:8f:7d:0d:31:63:8c:af:82:dc: f7:0f:8b:f0:dd:52:a2:20:b3:cb:16:41:34:31:b4: 3e:80:16:2f:76:72:20:86:7b:e3:59:ae:b7:f3:5e: 27:68:c0:68:f0:e4:07:96:bd:8b:32:74:de:1a:55: 4f:d4:92:ae:12:e5:59:47:70:8d:40:d7:93:a0:c1: a5:03:96:cf:f3:96:70:73:aa:18:1e:ad:38:28:01: 80:d5:e5:3e:2a:03:bb:d4:ab:5c:8f:2c:e2:65:26: 23:77:f2:fb:5c:ab:82:8b:1a:09:35:85:b6:88:b8: a9:d1:06:d9:94:2b:a0:18:36:9c:9a:a7:54:ff:96: d6:bc:0a:f1:a3:a5:d4:2e:20:b4:b7:83:5c:9a:2a: 68:b9:ec:5a:9d:c1:57:cc:fa:44:9a:1c:d1:4c:26: ae:2e:f5:7f:00:03:83:98:be:a7:fe:91:e9:6e:52: 0d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:91:F5:54:71:91:01:69:D8:EA:6E:6A:E8:39:29:43:3B:38:8E:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1590f32-a39a-331e-88e9-b1ae0894683b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c5:f6:ff:9e:55:10:5c:b0:f5:80:f3:e9:d7:c2:dc:a2:0a: 0f:20:26:ec:0d:7e:0b:63:f8:bf:70:94:8e:93:0d:79:22:38: 44:62:96:79:e7:32:8e:d1:89:cf:a8:5a:d4:a6:20:a0:0d:81: 04:b9:6e:9b:ae:51:e0:bf:38:21:f8:ba:b7:f2:8e:01:29:07: 56:a4:47:08:73:7e:8c:f3:fb:16:f5:0c:b5:8c:bc:55:2e:e0: 31:fc:3b:b9:9d:30:3f:35:68:de:3d:04:c7:c7:18:6b:19:80: f6:0a:90:da:9e:d1:24:53:ab:8d:01:e7:ce:3f:7b:a7:1f:fe: 49:86:d7:a2:00:9f:45:de:13:42:e9:66:bd:10:4f:53:fc:0b: 8e:9a:e2:b3:94:88:89:26:92:16:25:2d:9d:15:03:cd:c6:2e: 22:4a:8c:60:e8:d1:5f:bf:6d:91:77:3e:2e:68:f0:a8:08:fd: 0c:70:f1:8c:fd:80:7b:cd:b9:f8:c1:50:d7:b9:e8:3d:0c:28: 6f:5f:bf:c1:4c:0f:23:7d:cb:27:88:02:b6:5a:b0:b9:38:9d: 58:06:20:e6:b6:76:51:3f:2e:35:a4:9f:d5:56:42:7d:49:1f: 0b:0b:3b:93:1f:58:c2:51:3f:6a:52:04:2b:8a:08:5c:c5:cc: dc:37:7b:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkura9tTcLLQUkmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDkyMDFkZDMtODliYy00ZjU0LWJkN2ItMzg3MWU0MTI0MDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj6R894I+A4H/IEbWUouiLSuNU/IKFaTPGw0 yDLWxQGHdAqvM/z8n7JXTeG/4QVzG9o7XDemf2F04Zx/JAF4i5eXFBnjOIqTJfrg EemFbEWPfQ0xY4yvgtz3D4vw3VKiILPLFkE0MbQ+gBYvdnIghnvjWa63814naMBo 8OQHlr2LMnTeGlVP1JKuEuVZR3CNQNeToMGlA5bP85Zwc6oYHq04KAGA1eU+KgO7 1KtcjyziZSYjd/L7XKuCixoJNYW2iLip0QbZlCugGDacmqdU/5bWvArxo6XULiC0 t4NcmipouexancFXzPpEmhzRTCauLvV/AAODmL6n/pHpblIN8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaR9VRxkQFp2Opuaug5KUM7OI7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjE1OTBmMzItYTM5YS0z MzFlLTg4ZTktYjFhZTA4OTQ2ODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDF9v+eVRBcsPWA8+nXwtyiCg8gJuwNfgtj+L9wlI6TDXkiOERilnnn Mo7Ric+oWtSmIKANgQS5bpuuUeC/OCH4urfyjgEpB1akRwhzfozz+xb1DLWMvFUu 4DH8O7mdMD81aN49BMfHGGsZgPYKkNqe0SRTq40B584/e6cf/kmG16IAn0XeE0Lp Zr0QT1P8C46a4rOUiIkmkhYlLZ0VA83GLiJKjGDo0V+/bZF3Pi5o8KgI/Qxw8Yz9 gHvNufjBUNe56D0MKG9fv8FMDyN9yyeIArZasLk4nVgGIOa2dlE/LjWkn9VWQn1J HwsLO5MfWMJRP2pSBCuKCFzFzNw3e7o= -----END CERTIFICATE-----Generated at Sun Apr 27 12:55:50 2025 by rpki-client