$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3312867b-6413-3ea7-b26e-2ce4da754624.roa File: 3312867b-6413-3ea7-b26e-2ce4da754624.roa (raw, json) Hash identifier: Jt71+c0+u8RC/JI0UvDfU2zpjcjVWVPupHlrK/PqGDU= Subject key identifier: CE:A8:BD:5C:9C:64:D0:33:13:8F:AC:CA:6A:7A:5B:6A:6D:E7:09:27 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581F9BB384432169A15F780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3312867b-6413-3ea7-b26e-2ce4da754624.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 198.45.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:f9:bb:38:44:32:16:9a:15:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d8e48c8f-7f82-4fbc-bd1c-dc5d263b9897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:22:98:43:62:3a:d5:ee:9c:b9:60:f3:2d:36: 2e:3a:c5:31:2e:11:a2:cd:c3:e4:ee:7b:e9:71:ff: ea:59:75:d5:70:1e:ce:d3:57:6b:bb:bb:f9:1c:25: 1f:ba:8f:5a:97:3d:41:a3:ac:be:07:a5:b1:8e:fe: 5d:c5:7f:79:79:f3:41:56:1d:6d:b0:41:17:66:73: 3f:ae:3d:71:a3:d3:1b:d5:82:c1:c7:56:85:04:f7: e3:b9:50:05:a8:8a:a2:39:26:3b:0d:69:97:32:1f: 61:31:3f:90:2a:48:2d:04:b9:47:b7:3d:1f:d9:11: af:5f:88:52:af:5b:24:3a:8c:f7:67:81:6f:ca:c4: 44:e6:dd:f3:a5:db:97:5b:70:09:67:b7:55:de:83: 05:5b:89:67:31:2b:7f:c5:6e:ad:59:d1:0d:ba:56: ed:24:27:db:0b:8b:21:be:3c:7b:3f:04:18:8d:24: 21:ce:5c:3f:90:2d:d1:8d:0e:9d:dc:68:d8:cb:02: 30:14:30:89:47:9e:c6:8f:e6:4e:12:cd:c2:ed:d5: b8:d7:74:62:30:0d:69:85:52:41:b5:dd:30:f0:2f: 15:a9:b8:64:25:b7:6e:26:3d:bc:38:9b:1a:03:dc: 8e:b6:9a:96:d2:f6:8b:aa:41:3b:01:fc:da:20:25: f5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A8:BD:5C:9C:64:D0:33:13:8F:AC:CA:6A:7A:5B:6A:6D:E7:09:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3312867b-6413-3ea7-b26e-2ce4da754624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ab:05:a7:af:5d:96:6d:50:17:8a:7f:f4:a7:b8:24:10:64: ff:f8:47:63:56:4c:45:6e:13:65:d8:94:c4:90:e2:e4:2e:f1: 4a:68:c7:f7:99:6f:70:00:6d:85:38:90:c6:a1:70:e0:92:82: 40:7e:31:be:d3:62:b5:fd:dd:2d:a9:a0:6f:a5:bf:f3:d4:e3: b3:8e:f8:09:64:37:41:8f:96:56:10:99:7a:b0:c3:c3:22:ac: 89:5c:40:b6:22:01:06:93:c9:93:ed:95:89:f8:dd:0a:fe:d5: fc:d6:47:ad:ce:ca:5a:ba:ec:4c:29:00:03:c0:d2:69:ba:6d: 46:a7:be:3f:44:d5:62:fa:0f:49:3a:c8:0b:18:33:12:20:6c: 0a:9d:c8:ce:01:ea:bf:4a:07:3f:a2:c7:e9:29:0c:54:43:62: 20:77:27:2d:22:4d:57:ac:36:38:1d:52:4f:dd:2b:9a:e1:9d: f9:52:63:67:3a:bb:4f:79:44:bf:c1:52:53:d5:c6:3b:1a:ff: a3:5d:39:65:d8:ee:aa:42:df:e5:2e:37:59:dd:01:2b:36:a2: 7c:34:b9:ad:2a:64:94:15:1a:ac:9e:1b:64:03:9a:3d:d2:29: ea:8e:75:9f:fe:36:a7:25:e8:a5:9c:75:c3:7a:88:45:d1:45: 7b:59:39:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgfm7OEQyFpoV94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDhlNDhjOGYtN2Y4Mi00ZmJjLWJkMWMtZGM1ZDI2M2I5ODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCKYQ2I61e6cuWDzLTYuOsUxLhGizcPk7nvp cf/qWXXVcB7O01dru7v5HCUfuo9alz1Bo6y+B6Wxjv5dxX95efNBVh1tsEEXZnM/ rj1xo9Mb1YLBx1aFBPfjuVAFqIqiOSY7DWmXMh9hMT+QKkgtBLlHtz0f2RGvX4hS r1skOoz3Z4FvysRE5t3zpduXW3AJZ7dV3oMFW4lnMSt/xW6tWdENulbtJCfbC4sh vjx7PwQYjSQhzlw/kC3RjQ6d3GjYywIwFDCJR57Gj+ZOEs3C7dW413RiMA1phVJB td0w8C8VqbhkJbduJj28OJsaA9yOtpqW0vaLqkE7AfzaICX1HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6ovVycZNAzE4+symp6W2pt5wknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzMxMjg2N2ItNjQxMy0z ZWE3LWIyNmUtMmNlNGRhNzU0NjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKrBaevXZZtUBeKf/SnuCQQZP/4R2NWTEVuE2XYlMSQ4uQu8Upox/eZ b3AAbYU4kMahcOCSgkB+Mb7TYrX93S2poG+lv/PU47OO+AlkN0GPllYQmXqww8Mi rIlcQLYiAQaTyZPtlYn43Qr+1fzWR63Oylq67EwpAAPA0mm6bUanvj9E1WL6D0k6 yAsYMxIgbAqdyM4B6r9KBz+ix+kpDFRDYiB3Jy0iTVesNjgdUk/dK5rhnflSY2c6 u095RL/BUlPVxjsa/6NdOWXY7qpC3+UuN1ndASs2onw0ua0qZJQVGqyeG2QDmj3S KeqOdZ/+Nqcl6KWcdcN6iEXRRXtZOdE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:28 2025 by rpki-client