$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a368a8e-3b7d-361f-8137-0a3d74c3474e.roa File: 0a368a8e-3b7d-361f-8137-0a3d74c3474e.roa (raw, json) Hash identifier: pnpEfVxXqVJUyJ5ASwErQhiYweo9NdAFi4FI6r9SnzQ= Subject key identifier: D6:D8:C7:76:84:BF:39:2E:11:12:84:60:A4:29:4C:44:8F:53:37:35 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581FA468C67B22B0342F180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a368a8e-3b7d-361f-8137-0a3d74c3474e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 198.45.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:fa:46:8c:67:b2:2b:03:42:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f2ae1544-d474-4ac8-8274-1f82a6eed14b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7b:8f:ca:d4:ec:e1:71:f5:59:8b:3c:11:48: 76:aa:70:be:ab:3d:b7:6d:bf:32:dc:d9:36:cf:03: 41:2d:e0:4e:42:78:70:14:cc:a2:22:32:dc:1d:80: bc:71:25:4c:d1:9b:7b:6a:34:79:1f:a4:d9:d6:0b: cf:68:0c:3c:a0:62:4c:41:74:f2:39:cc:f6:84:af: db:f9:2a:e1:9b:31:41:77:43:07:1a:cb:55:fe:11: ab:b7:01:00:17:19:dc:46:e5:61:11:9f:df:d1:f9: d4:b1:7c:86:75:05:4d:be:b5:bd:c1:f1:77:09:96: 0d:28:ed:a4:52:f4:1c:24:5e:0f:66:55:2a:59:8b: da:7f:b9:3c:8a:0a:ad:9d:3c:de:d2:22:54:a1:cc: 72:9b:69:22:ea:c5:20:e5:01:7f:d5:e3:0a:da:0f: 90:10:16:97:67:03:b5:f2:85:a5:d6:78:8d:13:c0: 9b:47:74:ee:8d:0c:5c:af:02:bb:23:31:87:d7:5d: b8:80:ef:c0:75:3b:f3:38:37:e7:52:f1:01:dc:1d: 1b:9e:b7:c3:e7:ef:80:99:4f:48:74:0c:e3:5e:ff: 9b:5c:40:c7:d3:4f:85:50:0d:50:9f:fd:7f:b0:95: b1:3b:9c:14:0e:b8:64:95:c0:16:f6:dd:65:97:d2: bf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D8:C7:76:84:BF:39:2E:11:12:84:60:A4:29:4C:44:8F:53:37:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a368a8e-3b7d-361f-8137-0a3d74c3474e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:38:ba:a0:e1:67:86:94:21:5e:56:ea:d8:bd:4e:2a:e3:2d: 37:0a:9d:75:56:51:be:a8:90:ae:df:f7:52:92:fe:30:45:00: ca:c1:45:38:00:e5:fc:18:4c:2a:79:ce:73:2e:09:0c:fd:e4: 74:ec:34:74:f1:8c:8a:c6:5f:23:d6:be:a5:23:10:6e:60:0d: 2b:fe:f4:38:4f:df:b4:25:05:76:9c:30:3b:5f:bc:26:95:ba: f1:87:c7:cb:df:8d:36:f9:d5:ea:73:3d:a5:2e:ef:f6:9b:8d: 35:8b:6c:da:b2:21:08:01:0e:cc:db:56:26:35:4f:61:03:84: c0:81:18:e4:52:14:41:78:63:7c:a6:1d:88:e4:c8:6e:c3:79: 03:19:ac:a7:ae:26:72:37:c5:e7:44:12:ae:b8:69:5d:82:c0: 68:4e:83:a7:41:0a:bf:7a:07:7d:11:09:91:2e:99:87:5a:19: 57:51:28:ed:8f:da:d6:34:57:20:92:29:5f:3f:ce:ba:72:32: 90:60:29:db:ec:57:a4:b7:dc:c5:d0:31:00:cf:a4:fa:f1:54: c7:4a:53:40:cc:fd:8c:c9:f1:cb:66:74:0f:65:a6:40:88:23: d1:06:8d:97:1d:0c:ac:92:24:a0:c1:44:d1:8d:15:7c:07:6e: 76:14:08:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgfpGjGeyKwNC8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjJhZTE1NDQtZDQ3NC00YWM4LTgyNzQtMWY4MmE2ZWVkMTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXuPytTs4XH1WYs8EUh2qnC+qz23bb8y3Nk2 zwNBLeBOQnhwFMyiIjLcHYC8cSVM0Zt7ajR5H6TZ1gvPaAw8oGJMQXTyOcz2hK/b +SrhmzFBd0MHGstV/hGrtwEAFxncRuVhEZ/f0fnUsXyGdQVNvrW9wfF3CZYNKO2k UvQcJF4PZlUqWYvaf7k8igqtnTze0iJUocxym2ki6sUg5QF/1eMK2g+QEBaXZwO1 8oWl1niNE8CbR3TujQxcrwK7IzGH1124gO/AdTvzODfnUvEB3B0bnrfD5++AmU9I dAzjXv+bXEDH00+FUA1Qn/1/sJWxO5wUDrhklcAW9t1ll9K/pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbYx3aEvzkuERKEYKQpTESPUzc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGEzNjhhOGUtM2I3ZC0z NjFmLTgxMzctMGEzZDc0YzM0NzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKA4uqDhZ4aUIV5W6ti9TirjLTcKnXVWUb6okK7f91KS/jBFAMrBRTgA 5fwYTCp5znMuCQz95HTsNHTxjIrGXyPWvqUjEG5gDSv+9DhP37QlBXacMDtfvCaV uvGHx8vfjTb51epzPaUu7/abjTWLbNqyIQgBDszbViY1T2EDhMCBGORSFEF4Y3ym HYjkyG7DeQMZrKeuJnI3xedEEq64aV2CwGhOg6dBCr96B30RCZEumYdaGVdRKO2P 2tY0VyCSKV8/zrpyMpBgKdvsV6S33MXQMQDPpPrxVMdKU0DM/YzJ8ctmdA9lpkCI I9EGjZcdDKySJKDBRNGNFXwHbnYUCM8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:15 2025 by rpki-client