$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8498f23-a82c-3ccc-b4f1-9fa37a79a9fa.roa File: c8498f23-a82c-3ccc-b4f1-9fa37a79a9fa.roa (raw, json) Hash identifier: lcZqD4pFvGA1tmS/bAWn2Rl68p13DFvUIWva4nVOqK8= Subject key identifier: F7:10:D3:AB:D8:0B:7C:4E:4B:9E:02:5C:14:41:AB:81:44:72:E9:87 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5816A09D64757B87EA55720 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8498f23-a82c-3ccc-b4f1-9fa37a79a9fa.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 198.45.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6a:09:d6:47:57:b8:7e:a5:57:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=99dcf9d7-b60e-4247-acbc-21a90f68c28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:94:cc:67:df:94:3c:2a:47:cb:05:9c:d6:62: 86:63:f1:74:ed:7a:c1:c7:75:58:37:40:d6:66:90: ac:63:18:44:49:91:b0:24:e6:58:e3:df:03:a0:00: db:42:1b:13:e8:41:bf:8c:73:8c:f1:0d:fd:29:c9: 70:07:59:a2:a1:38:33:2f:9b:16:ee:74:f8:33:aa: 42:6b:d2:cc:23:e5:06:e4:89:5f:19:cb:ab:c7:74: 57:1e:c2:3d:78:d9:08:4a:d6:b7:96:ef:46:a7:e8: d9:77:09:0a:7d:68:57:72:51:f2:25:d7:64:e9:a4: 85:f7:19:0e:2e:3b:d5:9f:8b:33:e5:b9:57:f5:7e: 47:02:d8:ff:06:9f:80:94:7e:75:12:c7:2b:e3:81: d5:04:1c:18:02:ad:08:b1:a6:76:d9:2c:3c:dc:84: 17:49:6d:d2:c7:57:af:da:7d:12:40:cd:cb:74:2c: 05:7a:ce:91:79:21:96:80:da:fc:d8:57:02:48:b0: d1:89:62:3f:80:3b:cf:62:f7:d7:22:d0:6c:4c:c5: 4f:5d:6f:2b:a5:12:c9:de:85:fa:a5:bd:21:e2:80: 62:51:fd:b2:5b:64:1c:2e:08:42:aa:04:fa:42:4e: 2c:d3:e2:52:b3:43:83:f1:ba:5c:0c:40:cc:82:b3: 11:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:10:D3:AB:D8:0B:7C:4E:4B:9E:02:5C:14:41:AB:81:44:72:E9:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8498f23-a82c-3ccc-b4f1-9fa37a79a9fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:7b:4e:88:6c:96:73:52:ec:e1:58:8c:a0:97:a7:a9:f6:87: ef:42:a1:66:e6:43:93:30:6b:e9:d7:a5:84:0f:d9:4b:e8:ff: b0:5b:4b:2e:57:af:1d:5d:0d:f7:53:e4:fd:74:c6:cf:80:fc: 72:56:96:04:dd:46:8f:89:fa:1a:ff:e8:cb:3b:c1:95:ae:81: 18:cc:7b:cf:aa:5a:25:b6:0b:d8:9e:a5:d9:3e:e8:6e:40:24: 87:ba:56:18:c0:02:5a:b1:58:53:2a:a8:7f:9f:21:ad:f5:94: 5e:ff:c8:3d:fc:4d:94:f6:39:59:e6:7c:d2:59:28:64:c4:99: 57:36:9a:36:97:a8:81:2b:31:20:30:5a:72:da:7c:e3:9c:a3: d8:f8:56:6e:c8:d3:dd:7c:1b:38:01:37:9a:21:21:3c:42:d2: b8:96:06:2b:16:32:03:3b:7b:aa:05:48:a5:70:e1:f8:69:e8: e5:eb:a3:42:72:6f:8b:4b:5a:e4:38:dc:62:b8:82:5b:27:ba: c8:00:cc:68:22:30:2a:a5:83:b0:6a:0a:c7:34:c7:3a:81:b5: 63:02:49:98:da:13:0e:67:46:77:ef:a9:c3:2a:ed:5d:2e:31: 66:ca:c5:21:5e:4b:92:5e:c4:1a:90:c6:80:ed:9c:aa:a6:72: bb:29:ef:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgWoJ1kdXuH6lVyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTlkY2Y5ZDctYjYwZS00MjQ3LWFjYmMtMjFhOTBmNjhjMjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpTMZ9+UPCpHywWc1mKGY/F07XrBx3VYN0DW ZpCsYxhESZGwJOZY498DoADbQhsT6EG/jHOM8Q39KclwB1mioTgzL5sW7nT4M6pC a9LMI+UG5IlfGcurx3RXHsI9eNkISta3lu9Gp+jZdwkKfWhXclHyJddk6aSF9xkO LjvVn4sz5blX9X5HAtj/Bp+AlH51Escr44HVBBwYAq0IsaZ22Sw83IQXSW3Sx1ev 2n0SQM3LdCwFes6ReSGWgNr82FcCSLDRiWI/gDvPYvfXItBsTMVPXW8rpRLJ3oX6 pb0h4oBiUf2yW2QcLghCqgT6Qk4s0+JSs0OD8bpcDEDMgrMRIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcQ06vYC3xOS54CXBRBq4FEcumHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzg0OThmMjMtYTgyYy0z Y2NjLWI0ZjEtOWZhMzdhNzlhOWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMx7TohslnNS7OFYjKCXp6n2h+9CoWbmQ5Mwa+nXpYQP2Uvo/7BbSy5X rx1dDfdT5P10xs+A/HJWlgTdRo+J+hr/6Ms7wZWugRjMe8+qWiW2C9iepdk+6G5A JIe6VhjAAlqxWFMqqH+fIa31lF7/yD38TZT2OVnmfNJZKGTEmVc2mjaXqIErMSAw WnLafOOco9j4Vm7I0918GzgBN5ohITxC0riWBisWMgM7e6oFSKVw4fhp6OXro0Jy b4tLWuQ43GK4glsnusgAzGgiMCqlg7BqCsc0xzqBtWMCSZjaEw5nRnfvqcMq7V0u MWbKxSFeS5JexBqQxoDtnKqmcrsp73Q= -----END CERTIFICATE-----Generated at Fri Apr 11 23:38:58 2025 by rpki-client