$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/13231a26-be0a-3131-964a-9b41b3e86723.roa File: 13231a26-be0a-3131-964a-9b41b3e86723.roa (raw, json) Hash identifier: 4scQDvgLu0dMvzOAH3uAa8fQnIZg+hWvVJ7ZD24oDsw= Subject key identifier: DA:98:83:C0:CE:3A:31:73:1C:45:5B:C0:92:6C:D6:37:0B:84:F5:47 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5816B1A805A239156432C48 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/13231a26-be0a-3131-964a-9b41b3e86723.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 198.45.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6b:1a:80:5a:23:91:56:43:2c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=984c4e8c-c6da-4e18-a6fd-7273ef451c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:75:57:12:8c:99:21:c2:22:91:c3:e7:41: 36:59:b8:a8:ae:40:ef:21:27:71:5f:ce:c4:1b:1d: f4:ca:a9:20:de:74:3d:71:64:37:a2:b7:d8:4b:8b: 23:72:f4:7a:a9:90:1b:19:a6:be:97:c4:b2:4b:96: e3:2c:15:ad:e8:dc:46:96:e3:76:1a:d2:50:51:1e: c1:68:6a:3f:57:71:75:56:05:0c:df:0f:86:0c:69: 80:3f:f2:06:14:ae:3f:37:ca:b6:8f:5f:53:11:cc: 9e:5e:e9:45:a9:b9:b5:c4:39:30:60:51:23:e7:d3: b7:06:c2:d6:ca:d0:f8:cf:70:79:56:47:9e:85:04: fb:6a:93:ae:31:43:6a:c3:d1:e3:d8:6a:18:e7:4f: e0:2f:53:e4:e9:52:00:98:ba:87:0e:e1:d3:b4:fe: 19:62:49:6d:bd:29:b0:07:17:4e:94:94:06:2f:af: 00:93:a9:e0:f2:1d:c1:36:c1:ed:34:be:13:3c:98: 6c:c6:27:15:a0:e6:2e:45:9e:13:f0:e5:38:57:fb: 5d:29:53:87:e1:c3:32:d7:e5:ba:d8:ca:0a:ae:0b: 37:24:24:60:c8:0f:6d:75:10:52:35:48:74:aa:55: 67:5b:fe:17:11:ef:d5:01:04:4b:13:3e:4f:68:73: 00:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:98:83:C0:CE:3A:31:73:1C:45:5B:C0:92:6C:D6:37:0B:84:F5:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/13231a26-be0a-3131-964a-9b41b3e86723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:44:c3:7d:d8:68:c9:de:f7:46:a7:e9:5a:a6:a4:c0:93:d5: f0:bd:77:fa:ea:e0:a5:94:f3:df:3e:be:af:a1:f3:27:7f:60: 82:cc:0b:4e:7f:f4:f1:4d:83:b0:d7:76:e8:6a:a3:30:14:26: 7c:e6:dd:fd:6c:ed:1d:ef:8f:88:cb:4f:ce:d7:18:76:7b:d9: 0f:3b:09:f4:8b:24:16:f2:b7:7e:1f:b4:33:94:16:e6:4d:6f: 73:23:d5:fc:82:a0:0a:b4:9e:62:d3:20:47:25:d9:12:b5:62: 68:ab:f8:95:df:ba:c1:e8:95:d1:8a:f3:42:aa:3c:f4:cf:61: bc:5c:00:a0:67:86:44:23:eb:eb:83:b6:68:a8:b1:8d:7f:6b: b1:e8:ab:af:25:14:7b:f0:c6:63:5e:bc:8b:7f:41:54:96:24: 93:d3:78:93:43:e8:8a:46:99:a5:55:ed:13:38:78:77:16:bf: e3:ae:94:a5:95:d2:38:a8:41:10:0a:50:2d:69:8f:da:1d:d1: 93:92:13:57:f0:28:5b:52:6a:c0:6c:80:25:45:69:d1:45:e8: b8:26:1a:1b:d0:13:52:0c:47:34:78:dc:be:1b:f9:ae:c9:4d: 7a:db:d4:7f:0f:97:bf:0b:e0:35:63:12:92:7e:b5:8a:15:89: 85:2e:18:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgWsagFojkVZDLEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTg0YzRlOGMtYzZkYS00ZTE4LWE2ZmQtNzI3M2VmNDUxYzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3x1VxKMmSHCIpHD50E2WbiorkDvISdxX87E Gx30yqkg3nQ9cWQ3orfYS4sjcvR6qZAbGaa+l8SyS5bjLBWt6NxGluN2GtJQUR7B aGo/V3F1VgUM3w+GDGmAP/IGFK4/N8q2j19TEcyeXulFqbm1xDkwYFEj59O3BsLW ytD4z3B5VkeehQT7apOuMUNqw9Hj2GoY50/gL1Pk6VIAmLqHDuHTtP4ZYkltvSmw BxdOlJQGL68Ak6ng8h3BNsHtNL4TPJhsxicVoOYuRZ4T8OU4V/tdKVOH4cMy1+W6 2MoKrgs3JCRgyA9tdRBSNUh0qlVnW/4XEe/VAQRLEz5PaHMA/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqYg8DOOjFzHEVbwJJs1jcLhPVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTMyMzFhMjYtYmUwYS0z MTMxLTk2NGEtOWI0MWIzZTg2NzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANFEw33YaMne90an6VqmpMCT1fC9d/rq4KWU898+vq+h8yd/YILMC05/ 9PFNg7DXduhqozAUJnzm3f1s7R3vj4jLT87XGHZ72Q87CfSLJBbyt34ftDOUFuZN b3Mj1fyCoAq0nmLTIEcl2RK1Ymir+JXfusHoldGK80KqPPTPYbxcAKBnhkQj6+uD tmiosY1/a7Hoq68lFHvwxmNevIt/QVSWJJPTeJND6IpGmaVV7RM4eHcWv+OulKWV 0jioQRAKUC1pj9od0ZOSE1fwKFtSasBsgCVFadFF6LgmGhvQE1IMRzR43L4b+a7J TXrb1H8Pl78L4DVjEpJ+tYoViYUuGDk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:58 2025 by rpki-client