$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54d49948-1f99-33c8-8b44-84ed3d587285.roa File: 54d49948-1f99-33c8-8b44-84ed3d587285.roa (raw, json) Hash identifier: oGweeiLgJgFvfRpU8vDBKy0SBdmIrJVXg0k42jQKtK0= Subject key identifier: 42:3F:22:AD:BE:21:F0:C4:50:86:69:5E:6F:BA:19:B7:FF:4D:91:95 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819344896A69E94115FE30 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54d49948-1f99-33c8-8b44-84ed3d587285.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 40311 IP address blocks: 198.45.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:93:44:89:6a:69:e9:41:15:fe:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3f746074-e039-4b3e-bc1b-0029fd5b5155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:7f:8c:7a:39:ee:97:a1:1e:17:31:20:8d: e6:42:87:58:b0:56:ef:2b:fd:e6:8c:11:8a:f4:eb: 68:6c:2e:e9:31:eb:66:5c:48:e9:01:eb:04:b0:97: 09:6d:90:d6:50:e8:c0:00:c2:6c:44:d3:8a:85:ec: ec:68:5d:57:90:5d:34:40:7d:7e:58:e8:eb:43:ae: 24:cf:ed:69:61:14:58:0f:d5:36:1c:d7:4b:cf:95: 41:6f:eb:a7:5e:15:39:7b:90:d1:56:d3:c2:66:ad: 36:7e:4d:3d:65:ae:01:ea:c1:bf:f6:b1:e3:d8:f2: 75:96:8e:64:5c:3b:43:90:8b:6d:ed:da:81:0d:fa: 28:17:91:52:1a:ad:ab:e5:a5:8e:c1:8b:73:24:e3: 42:84:51:43:f8:14:d0:80:e0:45:08:4e:43:fa:3b: 36:3a:b5:d2:9f:7e:94:1b:8e:6c:12:85:4b:87:31: a0:a5:44:c8:87:1e:82:36:c5:8d:c2:cd:0e:e6:b3: e8:a8:80:ff:3d:1c:6b:f7:8d:47:7c:e0:8b:4b:4b: 17:b1:ce:df:ac:c9:03:7c:38:c1:eb:d1:dc:42:ba: 97:f5:57:b9:3b:6c:00:a0:93:67:c3:41:09:89:ac: 6e:b1:00:b8:4b:74:b4:7e:ba:d4:af:6d:4c:52:f6: c0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3F:22:AD:BE:21:F0:C4:50:86:69:5E:6F:BA:19:B7:FF:4D:91:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54d49948-1f99-33c8-8b44-84ed3d587285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:31:0b:d2:99:b3:b2:02:6c:bd:31:e7:3b:3b:72:e0:b4:10: 74:28:f6:78:49:7b:81:9d:3a:d7:6b:22:b0:3b:6b:eb:94:df: 78:4c:8d:22:2d:6d:76:41:e7:18:df:b7:02:32:e5:5d:13:0e: 4f:b6:74:59:1f:b2:a0:00:05:51:e9:d1:b3:ef:15:f6:cb:32: 4c:71:82:5b:89:f9:ea:9b:55:c2:17:63:5a:15:91:23:f0:18: 9d:5b:f9:33:04:81:a0:45:94:3f:84:32:cf:e5:98:7d:bc:c3: ee:d9:f3:a9:0b:75:45:3b:93:6f:10:cf:2b:de:02:54:4c:fc: 0b:a0:6f:f0:cf:c3:51:36:e9:34:16:1f:18:dd:ed:90:21:f7: 97:4d:cd:4f:9d:67:3d:ed:75:25:69:fd:28:ff:a4:7d:fc:fd: 7a:d5:27:92:d8:91:9d:91:ed:e9:07:bd:97:7e:ae:62:4e:b1: 88:4d:be:25:40:e2:eb:aa:a9:91:d2:95:35:fc:bf:32:71:17: 2a:06:c8:2f:53:52:0b:40:43:ff:ef:5d:e8:e0:16:0b:27:08: 6c:66:2c:cf:1c:c1:ba:fe:d2:fd:f8:f0:0d:5d:7e:e1:a4:99: b5:35:55:f1:b8:6a:4b:f7:0b:03:e0:45:bf:a4:29:e4:18:a5: f1:e4:c3:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZNEiWpp6UEV/jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2Y3NDYwNzQtZTAzOS00YjNlLWJjMWItMDAyOWZkNWI1MTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8d/jHo57pehHhcxII3mQodYsFbvK/3mjBGK 9OtobC7pMetmXEjpAesEsJcJbZDWUOjAAMJsRNOKhezsaF1XkF00QH1+WOjrQ64k z+1pYRRYD9U2HNdLz5VBb+unXhU5e5DRVtPCZq02fk09Za4B6sG/9rHj2PJ1lo5k XDtDkItt7dqBDfooF5FSGq2r5aWOwYtzJONChFFD+BTQgOBFCE5D+js2OrXSn36U G45sEoVLhzGgpUTIhx6CNsWNws0O5rPoqID/PRxr941HfOCLS0sXsc7frMkDfDjB 69HcQrqX9Ve5O2wAoJNnw0EJiaxusQC4S3S0frrUr21MUvbA3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEI/Iq2+IfDEUIZpXm+6Gbf/TZGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTRkNDk5NDgtMWY5OS0z M2M4LThiNDQtODRlZDNkNTg3Mjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi35MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALoxC9KZs7ICbL0x5zs7cuC0EHQo9nhJe4GdOtdrIrA7a+uU33hMjSIt bXZB5xjftwIy5V0TDk+2dFkfsqAABVHp0bPvFfbLMkxxgluJ+eqbVcIXY1oVkSPw GJ1b+TMEgaBFlD+EMs/lmH28w+7Z86kLdUU7k28QzyveAlRM/Augb/DPw1E26TQW Hxjd7ZAh95dNzU+dZz3tdSVp/Sj/pH38/XrVJ5LYkZ2R7ekHvZd+rmJOsYhNviVA 4uuqqZHSlTX8vzJxFyoGyC9TUgtAQ//vXejgFgsnCGxmLM8cwbr+0v348A1dfuGk mbU1VfG4akv3CwPgRb+kKeQYpfHkw2M= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:16 2025 by rpki-client