$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9e29835-8977-3975-ae14-1a75a5763318.roa File: b9e29835-8977-3975-ae14-1a75a5763318.roa (raw, json) Hash identifier: iIxxmfbOaLjphSQK3dT6N7GskwXDR3SHFH/si6SnWrQ= Subject key identifier: DF:4C:E0:9D:C0:C7:44:57:35:9D:B1:7D:B5:F4:3F:07:B4:BB:B9:23 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581FCCC3073D424FABE6980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9e29835-8977-3975-ae14-1a75a5763318.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 198.45.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:fc:cc:30:73:d4:24:fa:be:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=86b666f1-e0ca-4538-b111-d95259c9986e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e1:30:81:52:d0:a8:28:46:44:63:44:a8:6b: 1e:89:45:ee:d9:06:5b:25:d6:31:94:45:f8:f0:96: 83:15:de:71:44:13:17:54:71:ae:96:e6:85:32:52: 31:a2:68:36:90:1d:4d:66:1f:54:7f:41:63:86:ee: c7:d1:0c:62:d1:06:3f:aa:00:9c:ca:4a:d7:22:1b: aa:cc:86:29:3b:da:96:cb:96:ae:36:77:db:5a:63: 87:d0:1b:bc:1b:b5:8c:39:29:5a:2d:2c:ed:ac:7c: c7:d2:ec:04:2c:81:d4:34:dc:3e:aa:0b:59:04:bc: fe:ec:37:84:4a:2d:7d:aa:09:27:63:07:6b:96:3f: 10:98:88:f3:6b:93:92:8d:42:f8:d9:6f:2c:71:c9: 97:f3:3e:14:7b:cf:aa:dd:b9:8b:93:76:0d:6a:a6: 5c:bc:8b:ab:be:39:31:5f:a8:1e:01:59:0e:3b:68: 48:c7:f4:e6:80:e6:96:19:f0:97:ae:e4:b0:9d:09: 93:7d:44:4a:b2:10:65:85:39:e9:a1:c7:e2:33:5b: d0:fb:b7:18:a7:a4:d5:69:37:55:bd:52:75:ea:3c: 23:a3:2d:15:1b:13:56:1d:27:8e:5b:bb:dc:25:cd: 2f:03:9f:4b:d1:9f:14:c4:f6:4e:65:1e:bd:ab:74: 59:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4C:E0:9D:C0:C7:44:57:35:9D:B1:7D:B5:F4:3F:07:B4:BB:B9:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9e29835-8977-3975-ae14-1a75a5763318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:17:ed:78:a8:cc:1f:aa:04:2a:6b:0c:5e:cb:35:ba:ce:6f: a9:25:da:3f:63:02:0f:2c:2e:41:84:85:6c:97:5e:0b:cf:7d: 4b:12:50:d7:9b:2a:af:e2:0c:57:b4:11:cc:3f:e4:d8:43:fb: 5c:04:68:02:77:31:23:87:97:36:6e:52:49:2b:0e:1e:32:72: 0d:a7:e2:bd:6a:6f:3d:df:33:03:7e:98:48:dc:49:e2:5e:1d: b9:30:1a:01:96:a5:6f:c5:6d:42:df:39:8c:ca:5c:38:b3:ee: 32:7b:22:fe:8a:92:bb:f6:5a:11:10:99:6c:37:ba:8f:be:50: 7b:cf:63:93:e6:d6:4c:0a:ea:35:23:66:58:f3:3c:b0:f6:c6: ec:c3:d6:1c:d0:e7:48:5d:fa:c7:24:28:d3:fc:3e:a7:fb:ba: 52:af:37:aa:d1:22:c1:2d:99:58:3a:a7:fc:a1:a2:c5:d0:76: a8:21:41:26:36:80:19:a7:a8:8a:66:e2:42:d3:8e:c3:49:ff: 0d:35:5f:c3:a7:56:1a:78:f2:85:9a:e7:9d:dd:e7:ac:3d:49: a6:21:22:5a:4e:a5:4c:53:2b:18:5e:de:cc:e2:e6:a0:86:71: 5c:32:72:98:20:f3:f1:44:f1:cb:2e:cc:f4:6e:5c:30:38:41: 16:b2:74:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgfzMMHPUJPq+aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODZiNjY2ZjEtZTBjYS00NTM4LWIxMTEtZDk1MjU5Yzk5ODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOEwgVLQqChGRGNEqGseiUXu2QZbJdYxlEX4 8JaDFd5xRBMXVHGuluaFMlIxomg2kB1NZh9Uf0Fjhu7H0Qxi0QY/qgCcykrXIhuq zIYpO9qWy5auNnfbWmOH0Bu8G7WMOSlaLSztrHzH0uwELIHUNNw+qgtZBLz+7DeE Si19qgknYwdrlj8QmIjza5OSjUL42W8sccmX8z4Ue8+q3bmLk3YNaqZcvIurvjkx X6geAVkOO2hIx/TmgOaWGfCXruSwnQmTfURKshBlhTnpocfiM1vQ+7cYp6TVaTdV vVJ16jwjoy0VGxNWHSeOW7vcJc0vA59L0Z8UxPZOZR69q3RZ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9M4J3Ax0RXNZ2xfbX0Pwe0u7kjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjllMjk4MzUtODk3Ny0z OTc1LWFlMTQtMWE3NWE1NzYzMzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMX7XiozB+qBCprDF7LNbrOb6kl2j9jAg8sLkGEhWyXXgvPfUsSUNeb Kq/iDFe0Ecw/5NhD+1wEaAJ3MSOHlzZuUkkrDh4ycg2n4r1qbz3fMwN+mEjcSeJe HbkwGgGWpW/FbULfOYzKXDiz7jJ7Iv6Kkrv2WhEQmWw3uo++UHvPY5Pm1kwK6jUj ZljzPLD2xuzD1hzQ50hd+sckKNP8Pqf7ulKvN6rRIsEtmVg6p/yhosXQdqghQSY2 gBmnqIpm4kLTjsNJ/w01X8OnVhp48oWa553d56w9SaYhIlpOpUxTKxhe3szi5qCG cVwycpgg8/FE8csuzPRuXDA4QRaydK8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:08 2025 by rpki-client