$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00972889-865e-3056-8d7d-c16e5e4ecb32.roa File: 00972889-865e-3056-8d7d-c16e5e4ecb32.roa (raw, json) Hash identifier: RWlj+ag96H9ah4Yr5iEfEKKtyu4nlEqpbcphQwJ6DJk= Subject key identifier: D8:C4:E8:29:F4:B0:FF:C4:C6:E6:89:B0:49:6C:9C:A2:43:06:0F:D2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5816CB230C8FCF559516E40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00972889-865e-3056-8d7d-c16e5e4ecb32.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 198.45.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6c:b2:30:c8:fc:f5:59:51:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=6ecdc778-b243-46f0-bbf9-d13c75304d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:32:12:fc:ce:5d:67:24:07:16:a6:78:d0:d4: 38:9a:52:4c:b2:f8:a0:45:4a:12:b8:be:39:e7:35: b3:87:b9:a8:e3:ff:59:0c:ab:74:42:f9:30:3b:92: 06:bc:92:6e:96:c7:fc:b0:e4:d4:04:74:76:57:20: 52:a1:25:37:65:12:3f:be:a5:e1:e2:93:a4:b3:d0: f8:56:70:87:0c:7a:59:f4:8f:fd:6a:95:7b:ea:14: 2d:a8:6a:bb:99:b0:42:eb:c1:68:35:1e:36:47:00: 70:9a:0a:75:c3:8c:31:91:25:c8:41:5e:54:97:15: 78:f9:95:b4:45:a5:02:8f:10:70:08:b9:d7:54:d2: 15:f7:3b:55:4f:d4:45:43:8c:86:54:3f:b5:91:0b: 1a:32:54:ef:93:9e:07:c7:5d:90:04:60:47:56:d0: bd:a7:da:ff:a8:ff:37:9d:9c:0b:76:c6:98:30:db: e8:f6:45:87:0c:24:bc:5e:85:3d:70:a1:0a:04:32: ad:fd:11:ed:97:a5:e8:21:04:81:0e:56:29:70:d0: c3:bb:fc:14:c5:99:7f:0f:6c:16:b4:8e:80:8a:a4: 04:56:dc:f0:52:b6:79:da:eb:19:4c:5f:89:de:c0: 30:5b:8b:bd:b4:bd:16:f3:cf:82:29:2b:7d:23:71: f6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C4:E8:29:F4:B0:FF:C4:C6:E6:89:B0:49:6C:9C:A2:43:06:0F:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00972889-865e-3056-8d7d-c16e5e4ecb32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d7:ef:8f:be:e4:51:16:32:19:73:24:47:7c:a7:6e:c4:51: f2:89:97:24:ec:d9:3c:6d:27:84:17:f1:55:e5:86:82:b8:e8: 1a:c5:ad:80:47:74:c1:ec:18:e9:a2:a2:7f:08:c8:2a:a3:64: 99:6b:18:83:82:14:bd:66:38:6d:81:8f:81:41:53:d8:95:3f: 82:0f:f0:40:a9:0d:a0:dd:de:a4:3a:ca:ab:71:53:04:8d:bd: fa:44:e3:5f:0c:54:5b:68:5d:da:2b:db:7f:89:b4:bd:5a:19: 59:75:54:3b:c6:16:f0:78:1c:1e:fc:85:5f:d3:07:b1:a0:17: 97:4d:a1:85:5b:9b:7f:b3:42:ad:8d:59:97:98:f3:50:d3:50: 93:19:b6:46:1e:99:de:4b:d5:13:be:7d:a2:a7:f4:eb:30:45: 95:62:1c:17:68:c2:03:45:a6:b4:61:d3:0b:a1:e8:e5:14:3d: 15:45:2e:9a:d0:81:28:c4:5f:86:da:ce:db:f0:d0:c8:60:0f: e9:88:14:dd:ed:7c:89:df:67:dd:4a:23:c6:de:a0:d9:32:b6: c4:cb:4a:86:da:49:8e:4e:eb:98:28:9a:5e:d8:84:3b:2b:a1: 24:b5:49:82:fa:f9:06:c9:8b:e2:68:62:5b:cb:9a:44:95:14: 05:68:14:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgWyyMMj89VlRbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NmVjZGM3NzgtYjI0My00NmYwLWJiZjktZDEzYzc1MzA0ZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDIS/M5dZyQHFqZ40NQ4mlJMsvigRUoSuL45 5zWzh7mo4/9ZDKt0QvkwO5IGvJJulsf8sOTUBHR2VyBSoSU3ZRI/vqXh4pOks9D4 VnCHDHpZ9I/9apV76hQtqGq7mbBC68FoNR42RwBwmgp1w4wxkSXIQV5UlxV4+ZW0 RaUCjxBwCLnXVNIV9ztVT9RFQ4yGVD+1kQsaMlTvk54Hx12QBGBHVtC9p9r/qP83 nZwLdsaYMNvo9kWHDCS8XoU9cKEKBDKt/RHtl6XoIQSBDlYpcNDDu/wUxZl/D2wW tI6AiqQEVtzwUrZ52usZTF+J3sAwW4u9tL0W88+CKSt9I3H2iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjE6Cn0sP/ExuaJsElsnKJDBg/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDA5NzI4ODktODY1ZS0z MDU2LThkN2QtYzE2ZTVlNGVjYjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi39MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfX74++5FEWMhlzJEd8p27EUfKJlyTs2TxtJ4QX8VXlhoK46BrFrYBH dMHsGOmion8IyCqjZJlrGIOCFL1mOG2Bj4FBU9iVP4IP8ECpDaDd3qQ6yqtxUwSN vfpE418MVFtoXdor23+JtL1aGVl1VDvGFvB4HB78hV/TB7GgF5dNoYVbm3+zQq2N WZeY81DTUJMZtkYemd5L1RO+faKn9OswRZViHBdowgNFprRh0wuh6OUUPRVFLprQ gSjEX4baztvw0MhgD+mIFN3tfInfZ91KI8beoNkytsTLSobaSY5O65goml7YhDsr oSS1SYL6+QbJi+JoYlvLmkSVFAVoFKk= -----END CERTIFICATE-----Generated at Fri Apr 11 22:43:12 2025 by rpki-client