$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2de449e5-904f-314c-ac23-53a52389147d.roa File: 2de449e5-904f-314c-ac23-53a52389147d.roa (raw, json) Hash identifier: HBZzafbn/L6mkD6ATo0ZKObOqHthFqNevVUeblrBk3I= Subject key identifier: EB:CD:C6:60:23:01:2E:1B:6E:C9:01:03:1C:6B:45:64:A8:B8:8D:8E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84121EDFBF5B181DBADBB580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2de449e5-904f-314c-ac23-53a52389147d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 198.45.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:1e:df:bf:5b:18:1d:ba:db:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=39f0a5bc-9e16-4f92-a083-846ad276b98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0f:8b:9d:de:48:5c:1e:31:5d:7f:4f:1c:38: 89:77:bb:a3:0b:43:46:b9:26:61:31:70:60:2e:44: 67:6c:e7:09:d2:6d:d2:36:9b:a7:c7:29:6e:3e:3a: d2:e5:ca:dd:8a:61:8a:f3:68:2e:3d:a0:67:4e:0f: 25:28:02:d1:7d:bc:4f:d5:d5:62:14:cb:e2:c8:ad: fe:e0:dc:61:f1:8b:d2:1c:3d:8f:e4:e9:df:07:8d: 08:1b:52:ed:45:33:f7:ad:df:62:69:bc:6f:9c:4b: 4e:ba:24:f0:f6:f9:c9:c5:67:e8:01:47:20:a2:b4: 94:ef:b8:4e:54:e8:48:15:96:98:05:c1:f6:ec:57: a1:27:59:ae:ef:77:7f:91:ac:57:cf:c1:dd:81:72: f1:4e:01:e8:15:b7:cb:93:e7:e9:cd:8f:fd:e2:a2: 91:19:7b:ba:ea:c1:c4:bc:67:be:85:3d:57:6a:de: d6:b1:93:42:51:b0:80:30:dd:32:00:41:33:9c:47: 81:f6:01:2c:26:c9:6a:d8:47:ad:40:27:29:4b:ed: e5:82:f0:c4:79:33:cf:f3:75:fd:31:6f:3d:59:0b: ee:f0:24:1d:98:de:30:34:c0:82:55:59:98:ad:19: c9:48:54:82:b0:dc:9c:73:2c:88:f9:61:f1:94:b1: 4c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CD:C6:60:23:01:2E:1B:6E:C9:01:03:1C:6B:45:64:A8:B8:8D:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2de449e5-904f-314c-ac23-53a52389147d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:c4:fb:4d:87:04:91:ea:0b:dd:cf:27:34:d4:4f:95:ea:8a: 06:d6:c6:45:97:e8:ac:91:95:e6:b6:80:f7:7b:a5:b3:e1:a2: 68:aa:26:4e:2a:3a:9f:24:c7:49:c9:14:cb:77:f3:0c:13:3a: 18:51:d9:9b:ed:b2:3a:25:35:8c:e5:31:da:54:62:0b:4a:f3: 9b:c0:d3:2f:53:ea:62:9b:13:e2:40:1f:8a:11:b3:7d:d4:98: 11:45:5d:a1:90:a9:7b:ab:c5:6a:a8:e4:53:34:6f:42:2e:8d: 14:15:f0:d3:18:11:ca:be:af:bc:1a:29:7f:8a:49:1f:12:56: e4:d4:f9:f0:e7:d7:8a:02:6d:2b:00:00:22:2b:dd:89:24:ba: 47:cd:1b:4c:f6:bf:2b:9a:7f:3f:be:36:f3:29:8d:4c:23:64: af:d2:86:0a:04:9d:a8:ce:7f:2d:df:34:e4:73:d9:82:16:6a: 2d:f3:83:5c:a3:8f:2d:26:e3:63:92:52:ff:96:ee:ca:1e:a8: 55:f1:2f:25:60:8e:66:91:88:f9:f7:1b:d2:16:73:cb:00:b1: a8:41:9a:50:bf:c1:6d:14:c5:5e:ac:b1:c4:32:d3:01:19:69: 1f:ec:1b:2e:42:16:cb:b5:ba:b9:82:d5:ac:dd:ed:d6:9c:94: 12:69:10:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEh7fv1sYHbrbtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzlmMGE1YmMtOWUxNi00ZjkyLWEwODMtODQ2YWQyNzZiOThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ+Lnd5IXB4xXX9PHDiJd7ujC0NGuSZhMXBg LkRnbOcJ0m3SNpunxyluPjrS5crdimGK82guPaBnTg8lKALRfbxP1dViFMviyK3+ 4Nxh8YvSHD2P5OnfB40IG1LtRTP3rd9iabxvnEtOuiTw9vnJxWfoAUcgorSU77hO VOhIFZaYBcH27FehJ1mu73d/kaxXz8HdgXLxTgHoFbfLk+fpzY/94qKRGXu66sHE vGe+hT1Xat7WsZNCUbCAMN0yAEEznEeB9gEsJslq2EetQCcpS+3lgvDEeTPP83X9 MW89WQvu8CQdmN4wNMCCVVmYrRnJSFSCsNyccyyI+WHxlLFMNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvNxmAjAS4bbskBAxxrRWSouI2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmRlNDQ5ZTUtOTA0Zi0z MTRjLWFjMjMtNTNhNTIzODkxNDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMrE+02HBJHqC93PJzTUT5XqigbWxkWX6KyRlea2gPd7pbPhomiqJk4q Op8kx0nJFMt38wwTOhhR2ZvtsjolNYzlMdpUYgtK85vA0y9T6mKbE+JAH4oRs33U mBFFXaGQqXurxWqo5FM0b0IujRQV8NMYEcq+r7waKX+KSR8SVuTU+fDn14oCbSsA ACIr3YkkukfNG0z2vyuafz++NvMpjUwjZK/ShgoEnajOfy3fNORz2YIWai3zg1yj jy0m42OSUv+W7soeqFXxLyVgjmaRiPn3G9IWc8sAsahBmlC/wW0UxV6sscQy0wEZ aR/sGy5CFsu1urmC1azd7daclBJpENw= -----END CERTIFICATE-----Generated at Sat Jul 26 00:07:35 2025 by rpki-client