$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56b50f1e-7768-31f4-883e-4ac810d5160b.roa File: 56b50f1e-7768-31f4-883e-4ac810d5160b.roa (raw, json) Hash identifier: JbjMLDv7/AMe2rOlx8+S9s276w0OvfQ45K2RpT4gdh4= Subject key identifier: AE:14:FB:6D:0E:1A:AC:FA:18:C8:9C:07:01:65:70:81:0A:59:05:33 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5816A37632F2B62E39FDE80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56b50f1e-7768-31f4-883e-4ac810d5160b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 198.45.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6a:37:63:2f:2b:62:e3:9f:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=17bead45-e275-4b11-a0af-1dbd37a62df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:09:40:e7:8c:9d:33:b3:a5:e7:47:fc:2e:85: 7f:ea:5b:de:35:c6:b2:aa:90:ef:5b:53:73:ae:ae: b8:8b:41:20:3f:08:43:d6:a3:e0:ff:54:e1:f4:59: 9e:21:c0:90:f0:14:bc:84:04:97:7f:48:95:ee:fb: 27:46:25:66:bb:bd:2e:57:9d:ca:5b:db:27:9b:5b: e0:eb:67:6a:a1:5f:37:45:12:be:92:e1:3c:41:83: 02:dd:01:c4:62:99:c6:70:ca:04:49:ef:ef:06:d8: db:32:23:6b:39:58:8a:ab:b7:37:95:8d:2a:94:68: 7e:13:8c:ed:d6:4e:66:df:af:9c:1f:96:75:f2:95: e6:a1:77:18:79:3b:68:8e:69:d2:40:9f:f6:d3:5b: b3:7b:41:fc:cb:b6:60:eb:a5:73:18:4e:d4:c9:05: 77:b1:24:1e:1f:6e:91:3d:43:ca:da:dd:55:cb:57: f2:d3:bd:28:f1:f3:73:0e:27:8d:62:53:15:80:61: 06:49:19:76:2e:2f:77:47:97:49:2e:68:f5:92:12: a2:88:dc:c9:f1:36:07:b1:6b:5c:8f:82:50:a5:a9: 26:2a:78:dc:f0:b6:39:99:69:f2:27:07:70:76:08: 9c:6f:94:a8:36:9e:27:6a:b4:72:a9:d6:77:8d:a0: c0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:14:FB:6D:0E:1A:AC:FA:18:C8:9C:07:01:65:70:81:0A:59:05:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56b50f1e-7768-31f4-883e-4ac810d5160b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d1:f3:fe:da:2d:3b:7c:a5:3a:2b:00:17:0c:d8:4c:94:a3: 5e:35:0e:37:1d:a6:5e:7a:ee:17:11:13:2c:fa:95:7f:37:0c: 31:17:30:cb:98:1f:2d:5c:78:ed:30:72:ad:15:3e:4f:32:a1: f5:69:b2:4a:e8:fa:18:19:45:af:9b:cd:89:ac:17:a7:38:2b: 6a:24:b2:ce:f5:d8:36:85:16:35:a9:26:4f:91:0c:71:1a:6f: 6e:73:94:a1:4f:33:81:db:d1:1f:8b:cf:1a:73:2f:38:a0:36: d8:fb:44:78:c2:31:1c:66:8e:7c:da:51:0f:bd:ee:0d:f1:32: fd:dc:a1:9d:17:5e:0d:8d:a2:3e:d9:0e:e5:2a:c7:36:ad:32: c4:91:da:73:d1:38:2d:07:22:38:c4:7c:8b:29:d7:0d:5b:a6: 43:62:f2:6c:06:d8:48:0c:a4:2e:70:b1:83:f4:d9:c4:cb:2a: bd:bc:7c:76:c3:5a:49:5f:71:43:10:fe:9f:ea:ab:1c:8d:e1: de:a2:db:10:a7:25:10:c9:80:f8:76:50:4a:58:18:08:94:97: d0:5a:3a:eb:25:58:79:de:2f:60:e7:fb:b6:ee:83:bf:ae:5f: 4e:fa:8a:ed:59:c2:b7:d8:96:3d:6d:7b:f7:dc:7f:52:24:b0: f9:b5:bd:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgWo3Yy8rYuOf3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTdiZWFkNDUtZTI3NS00YjExLWEwYWYtMWRiZDM3YTYyZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwlA54ydM7Ol50f8LoV/6lveNcayqpDvW1Nz rq64i0EgPwhD1qPg/1Th9FmeIcCQ8BS8hASXf0iV7vsnRiVmu70uV53KW9snm1vg 62dqoV83RRK+kuE8QYMC3QHEYpnGcMoESe/vBtjbMiNrOViKq7c3lY0qlGh+E4zt 1k5m36+cH5Z18pXmoXcYeTtojmnSQJ/201uze0H8y7Zg66VzGE7UyQV3sSQeH26R PUPK2t1Vy1fy070o8fNzDieNYlMVgGEGSRl2Li93R5dJLmj1khKiiNzJ8TYHsWtc j4JQpakmKnjc8LY5mWnyJwdwdgicb5SoNp4narRyqdZ3jaDARwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4U+20OGqz6GMicBwFlcIEKWQUzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTZiNTBmMWUtNzc2OC0z MWY0LTg4M2UtNGFjODEwZDUxNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7R8/7aLTt8pTorABcM2EyUo141Djcdpl567hcREyz6lX83DDEXMMuY Hy1ceO0wcq0VPk8yofVpskro+hgZRa+bzYmsF6c4K2okss712DaFFjWpJk+RDHEa b25zlKFPM4Hb0R+LzxpzLzigNtj7RHjCMRxmjnzaUQ+97g3xMv3coZ0XXg2Noj7Z DuUqxzatMsSR2nPROC0HIjjEfIsp1w1bpkNi8mwG2EgMpC5wsYP02cTLKr28fHbD WklfcUMQ/p/qqxyN4d6i2xCnJRDJgPh2UEpYGAiUl9BaOuslWHneL2Dn+7bug7+u X076iu1ZwrfYlj1te/fcf1IksPm1vbU= -----END CERTIFICATE-----Generated at Sat Apr 12 00:19:04 2025 by rpki-client