$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d6343c1-f45c-3b50-a49f-0d155d812a40.roa File: 9d6343c1-f45c-3b50-a49f-0d155d812a40.roa (raw, json) Hash identifier: 6Ze0ilDgZ3W/JPP1MCD4XJMO+4J+NyAoNz9V7ni+5RM= Subject key identifier: B3:E7:DD:5A:E1:4A:68:24:82:4F:01:A2:32:FC:37:83:E0:08:95:DE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5816CBD91F1176903FD7F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d6343c1-f45c-3b50-a49f-0d155d812a40.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 198.45.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6c:bd:91:f1:17:69:03:fd:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=46e6c0bf-ebf3-4b36-b296-beb112c7eb07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4e:eb:dd:d2:98:81:2a:15:a3:f7:ea:e4:1e: fb:67:46:ba:35:db:91:c3:89:46:1d:7c:76:55:88: 48:10:a8:d2:f9:f1:09:7a:1d:89:21:36:9a:a5:c4: 72:63:66:70:a8:c1:a5:49:4f:20:05:0d:ed:91:d2: bf:2d:39:37:f3:c9:2c:35:c8:9c:81:70:27:b0:02: 11:49:4c:8e:76:fd:d3:e1:1f:64:9e:88:b7:1b:f5: 7a:5f:d4:81:35:f4:79:1e:07:ca:bf:4b:56:fe:17: cc:66:05:2b:77:a5:82:36:b3:86:ca:55:80:61:96: d8:aa:3e:8a:67:bc:fc:97:71:35:d5:17:5d:7e:9b: 96:04:17:64:01:3b:b9:bf:78:4a:11:d6:ea:02:13: f5:c7:56:0a:a3:3c:e9:d2:b7:3a:4d:bd:29:81:30: 04:ae:d2:df:52:04:a9:f8:15:75:ed:e2:8b:7e:4b: 03:2f:8b:61:ca:4f:bd:96:9f:0a:d2:70:b2:a3:bb: 6b:87:fc:25:cd:cc:f5:46:80:62:65:51:98:92:5f: 51:a6:cb:59:45:ba:4d:12:06:af:03:37:81:44:22: 43:fc:cd:d8:44:94:88:05:80:39:82:99:b5:98:aa: 72:f7:21:51:6a:84:89:54:52:21:3d:7b:9f:34:71: 0f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E7:DD:5A:E1:4A:68:24:82:4F:01:A2:32:FC:37:83:E0:08:95:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d6343c1-f45c-3b50-a49f-0d155d812a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:da:aa:0b:2b:3f:f4:3a:8d:bb:28:53:a7:98:83:2e:a9:63: c2:e5:5c:1e:9e:f8:d6:3e:0c:77:27:57:d6:bf:4e:58:a8:f7: e1:ca:62:9e:15:9e:5b:7f:b7:16:b9:a6:87:5d:0b:1b:ce:b5: dc:54:4b:ab:3a:16:e3:a6:39:89:ba:e0:82:61:5c:a4:85:9d: ba:ba:8b:16:4a:7c:27:ce:d3:21:e7:94:89:0a:a2:ad:41:e2: 7c:bb:49:56:4c:1f:f2:ad:ac:21:a7:f1:25:f3:92:d2:13:56: 25:ab:4f:8d:7c:d8:e0:0e:34:d3:c5:5b:60:3f:87:90:aa:ea: f5:4c:a7:19:cd:69:ae:b7:af:0d:ec:83:4d:81:a4:66:ac:7f: d4:e0:a5:e6:aa:35:78:d1:06:f9:62:71:46:8f:77:2b:cc:3c: 99:cf:b0:b7:f5:59:cd:23:64:8e:85:17:fa:c9:fe:b5:ca:9e: fb:fd:ff:72:6d:d2:63:e2:e5:c5:7f:84:e2:7c:9f:24:56:53: d8:13:80:21:3f:bf:51:d7:cd:cb:57:8b:0f:b0:25:3a:87:33: 97:08:53:2a:4e:66:8e:40:61:07:8c:56:e0:de:8b:e8:0b:13: 71:1c:34:fa:6e:9c:bb:31:98:f4:cb:be:04:4e:56:bb:d9:5a: 3d:68:82:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgWy9kfEXaQP9fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDZlNmMwYmYtZWJmMy00YjM2LWIyOTYtYmViMTEyYzdlYjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE7r3dKYgSoVo/fq5B77Z0a6NduRw4lGHXx2 VYhIEKjS+fEJeh2JITaapcRyY2ZwqMGlSU8gBQ3tkdK/LTk388ksNcicgXAnsAIR SUyOdv3T4R9knoi3G/V6X9SBNfR5HgfKv0tW/hfMZgUrd6WCNrOGylWAYZbYqj6K Z7z8l3E11RddfpuWBBdkATu5v3hKEdbqAhP1x1YKozzp0rc6Tb0pgTAErtLfUgSp +BV17eKLfksDL4thyk+9lp8K0nCyo7trh/wlzcz1RoBiZVGYkl9RpstZRbpNEgav AzeBRCJD/M3YRJSIBYA5gpm1mKpy9yFRaoSJVFIhPXufNHEPIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPn3VrhSmgkgk8BojL8N4PgCJXeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWQ2MzQzYzEtZjQ1Yy0z YjUwLWE0OWYtMGQxNTVkODEyYTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATaqgsrP/Q6jbsoU6eYgy6pY8LlXB6e+NY+DHcnV9a/Tlio9+HKYp4V nlt/txa5poddCxvOtdxUS6s6FuOmOYm64IJhXKSFnbq6ixZKfCfO0yHnlIkKoq1B 4ny7SVZMH/KtrCGn8SXzktITViWrT4182OAONNPFW2A/h5Cq6vVMpxnNaa63rw3s g02BpGasf9TgpeaqNXjRBvlicUaPdyvMPJnPsLf1Wc0jZI6FF/rJ/rXKnvv9/3Jt 0mPi5cV/hOJ8nyRWU9gTgCE/v1HXzctXiw+wJTqHM5cIUypOZo5AYQeMVuDei+gL E3EcNPpunLsxmPTLvgROVrvZWj1ogts= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:42 2025 by rpki-client