$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa947067-332a-302c-90e6-a9f60107ae87.roa File: fa947067-332a-302c-90e6-a9f60107ae87.roa (raw, json) Hash identifier: 2B6zptpU44RkjR2m2eh+/FvA0NC/wIH6pUl9CEL+i0A= Subject key identifier: F3:07:63:38:0F:5D:31:F0:1B:86:34:6B:73:19:63:77:BC:06:5A:7E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB573ED811BC3D29F73200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa947067-332a-302c-90e6-a9f60107ae87.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 198.45.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:57:3e:d8:11:bc:3d:29:f7:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=cba22c7e-b4f1-40c5-b463-7715d56314fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:64:61:c1:97:cc:35:72:09:df:15:d9:ab: fd:4e:87:56:48:1e:62:2c:6e:8c:99:ea:22:8f:ff: 00:08:10:33:f9:71:74:0d:50:8a:d4:7c:8e:b5:a8: a8:ef:ba:78:64:3f:d4:20:14:2b:31:cf:3b:cf:a6: b5:b0:8d:3e:d6:09:92:a2:40:1b:0f:84:da:e8:fe: f3:81:a2:2d:bd:10:b2:17:bf:02:c3:94:62:30:55: 7c:78:e8:21:13:13:62:d4:2c:f5:ea:26:8e:d0:f9: e1:97:44:4c:8b:07:3f:7e:f6:78:1a:97:b3:24:4b: 91:58:c6:3a:7d:1c:63:99:a8:6d:81:0b:27:ef:e7: a7:b3:4b:4e:bf:15:13:34:1d:70:b7:55:9e:7f:84: 75:a7:8d:7d:40:b6:bd:fb:1c:9d:4c:dc:86:74:dc: e9:da:74:27:c3:11:f8:a4:bc:9b:4b:1d:61:6f:33: e5:12:7c:83:a1:5e:08:4f:b6:7c:eb:df:85:a0:03: 2b:39:92:96:d4:e4:90:f9:66:2e:5b:18:e0:db:f4: e7:f8:c9:a6:da:6c:ce:91:15:4c:a8:1a:b6:88:b3: 2d:81:69:6e:15:4f:09:62:0a:9f:bf:29:20:6f:70: 3a:b3:39:a4:33:5b:ae:83:97:a9:74:38:07:da:81: 3e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:07:63:38:0F:5D:31:F0:1B:86:34:6B:73:19:63:77:BC:06:5A:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa947067-332a-302c-90e6-a9f60107ae87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:3d:6c:26:ae:5b:3e:a4:0d:48:28:c1:5d:d5:be:ed:d5:a9: 96:f5:f3:05:a2:34:61:c7:ea:f2:9f:09:26:c7:62:03:69:91: fa:c7:9a:18:83:35:63:b3:da:91:9a:48:62:6d:61:6d:28:1c: 85:83:10:83:c0:66:5f:10:f3:56:d8:cb:16:9d:7f:45:55:79: f0:fd:5e:bf:68:22:e1:c3:65:f4:3c:f3:cb:a3:53:b2:e6:19: a0:84:ed:0a:66:b4:e5:e5:f3:fd:68:ec:1b:cd:7d:39:d5:bb: 06:0a:5a:cc:b8:bc:37:85:dd:86:68:70:a8:70:f9:e6:d8:8e: 46:3a:d9:94:56:99:9a:19:bc:48:8a:22:7b:22:ce:04:70:31: 2f:66:a6:74:ac:9e:49:d7:79:54:4b:62:25:77:59:6a:ec:8d: 7b:6f:8f:7a:b8:e8:a3:77:7f:c7:ef:4a:49:05:f5:25:10:cc: bb:8c:14:3e:b6:2e:dc:59:e1:a1:cb:7d:e3:a6:2c:71:7d:7f: 17:4b:3b:be:05:41:0c:ce:f3:aa:d3:f1:19:77:ad:4d:89:6a: a6:f5:44:4f:cb:ec:87:9f:47:96:a2:d9:00:0c:a1:55:ee:cf: ad:3d:31:d6:16:5d:02:28:2a:ae:f4:a2:b5:57:96:97:10:55: c9:10:5b:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1c+2BG8PSn3MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2JhMjJjN2UtYjRmMS00MGM1LWI0NjMtNzcxNWQ1NjMxNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq5kYcGXzDVyCd8V2av9TodWSB5iLG6Mmeoi j/8ACBAz+XF0DVCK1HyOtaio77p4ZD/UIBQrMc87z6a1sI0+1gmSokAbD4Ta6P7z gaItvRCyF78Cw5RiMFV8eOghExNi1Cz16iaO0Pnhl0RMiwc/fvZ4GpezJEuRWMY6 fRxjmahtgQsn7+ens0tOvxUTNB1wt1Wef4R1p419QLa9+xydTNyGdNzp2nQnwxH4 pLybSx1hbzPlEnyDoV4IT7Z869+FoAMrOZKW1OSQ+WYuWxjg2/Tn+Mmm2mzOkRVM qBq2iLMtgWluFU8JYgqfvykgb3A6szmkM1uug5epdDgH2oE+gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMHYzgPXTHwG4Y0a3MZY3e8Blp+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmE5NDcwNjctMzMyYS0z MDJjLTkwZTYtYTlmNjAxMDdhZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHA9bCauWz6kDUgowV3Vvu3VqZb18wWiNGHH6vKfCSbHYgNpkfrHmhiD NWOz2pGaSGJtYW0oHIWDEIPAZl8Q81bYyxadf0VVefD9Xr9oIuHDZfQ888ujU7Lm GaCE7QpmtOXl8/1o7BvNfTnVuwYKWsy4vDeF3YZocKhw+ebYjkY62ZRWmZoZvEiK InsizgRwMS9mpnSsnknXeVRLYiV3WWrsjXtvj3q46KN3f8fvSkkF9SUQzLuMFD62 LtxZ4aHLfeOmLHF9fxdLO74FQQzO86rT8Rl3rU2Jaqb1RE/L7IefR5ai2QAMoVXu z609MdYWXQIoKq70orVXlpcQVckQW68= -----END CERTIFICATE-----Generated at Mon Apr 28 19:59:44 2025 by rpki-client