$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d753f166-33a4-31fe-ba86-e77cca25753d.roa File: d753f166-33a4-31fe-ba86-e77cca25753d.roa (raw, json) Hash identifier: eTqAYLr5SX3j5ozUfbid//TshIIOf2l7/vY75an8AIc= Subject key identifier: 61:0B:87:44:16:53:0F:18:3C:5B:8E:00:FF:F1:24:17:06:99:0B:54 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5816C3356BF216C08E7F980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d753f166-33a4-31fe-ba86-e77cca25753d.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 198.45.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6c:33:56:bf:21:6c:08:e7:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=991e52ec-e331-48a2-a2fc-64cf61133f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:67:54:5e:57:30:d2:70:42:ce:31:7e:52:ca: 87:6a:98:22:1e:01:ae:c4:9c:41:40:b6:40:e0:37: bf:f4:72:c9:83:c3:be:ba:41:72:9b:70:cb:e5:16: 20:b0:85:37:16:59:7e:45:50:c2:1a:0e:34:6e:4f: 09:46:95:35:b5:1a:65:53:e7:83:7d:fa:c3:5f:9d: b5:35:20:0e:d0:46:cb:7d:1a:3d:ee:3b:49:de:f6: 51:10:ff:78:f8:c2:4b:c9:1c:35:7b:7a:91:dd:06: e0:b4:51:b4:05:03:94:4a:96:a0:23:f3:9e:e2:c0: 0a:b7:e9:83:ce:6e:19:ac:51:37:83:be:4e:06:76: 73:a5:d1:48:76:ba:ac:98:18:22:65:da:3f:2c:ec: 18:76:f8:45:06:51:68:b9:25:89:3c:e7:3d:85:a5: ad:cb:47:91:93:3a:a5:bf:36:c2:f4:f6:df:c7:9b: 7f:f5:1e:c4:9e:bf:03:d5:b3:db:a5:64:85:85:79: d0:ac:99:94:38:51:00:33:57:bf:49:b9:f3:17:33: 64:f3:3c:3b:4a:e7:30:66:24:fc:07:c6:5a:73:b3: 24:e6:d6:25:97:66:27:61:e0:d8:cc:95:93:27:93: 87:26:89:72:c4:c4:30:3f:67:03:e3:c5:14:b8:c7: f1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0B:87:44:16:53:0F:18:3C:5B:8E:00:FF:F1:24:17:06:99:0B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d753f166-33a4-31fe-ba86-e77cca25753d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:2b:de:71:08:bb:44:8f:36:b3:9f:0b:f1:fb:db:61:d9:ea: 75:2b:1e:9f:96:8a:62:98:cb:34:c6:45:d8:a9:3c:05:76:fc: 79:be:03:ad:c6:00:f3:65:69:82:01:3c:cf:85:7e:17:90:38: 46:44:a4:90:bf:cf:69:7a:7a:14:26:7a:1a:af:42:b7:cc:23: 3c:a2:8e:01:61:d3:ad:7b:8c:20:c0:1a:c5:bd:fb:c7:72:bf: d7:47:24:30:93:90:96:13:fa:4b:7b:ad:71:e4:d3:2e:26:da: b5:9f:0f:6c:22:58:77:16:f9:fe:ce:6c:39:b9:62:ad:d3:bf: 7e:cd:51:2f:2e:5f:6b:8b:f0:22:46:b7:8b:ca:0f:db:ed:4e: fe:00:09:61:ba:a2:46:d5:c3:26:de:d6:de:ff:df:f4:dc:5b: c2:9e:10:ed:72:79:67:3f:a9:99:dd:74:77:3c:c5:62:12:fa: 81:f7:5e:3f:63:8e:f8:78:cf:05:01:33:ed:6f:9c:6c:d8:8c: 65:b6:7e:55:d0:af:63:c8:51:c7:fe:b1:f2:9b:82:c1:ae:97: 30:cf:c2:80:29:99:de:6c:42:24:da:08:cc:fd:8a:6b:8b:26: 52:a9:16:e9:d5:5d:72:de:e9:5a:2e:f3:88:ef:3d:c2:4b:08: e4:18:cd:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgWwzVr8hbAjn+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTkxZTUyZWMtZTMzMS00OGEyLWEyZmMtNjRjZjYxMTMzZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GdUXlcw0nBCzjF+UsqHapgiHgGuxJxBQLZA 4De/9HLJg8O+ukFym3DL5RYgsIU3Fll+RVDCGg40bk8JRpU1tRplU+eDffrDX521 NSAO0EbLfRo97jtJ3vZREP94+MJLyRw1e3qR3QbgtFG0BQOUSpagI/Oe4sAKt+mD zm4ZrFE3g75OBnZzpdFIdrqsmBgiZdo/LOwYdvhFBlFouSWJPOc9haWty0eRkzql vzbC9Pbfx5t/9R7Enr8D1bPbpWSFhXnQrJmUOFEAM1e/SbnzFzNk8zw7SucwZiT8 B8Zac7Mk5tYll2YnYeDYzJWTJ5OHJolyxMQwP2cD48UUuMfxMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGELh0QWUw8YPFuOAP/xJBcGmQtUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDc1M2YxNjYtMzNhNC0z MWZlLWJhODYtZTc3Y2NhMjU3NTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgr3nEIu0SPNrOfC/H722HZ6nUrHp+WimKYyzTGRdipPAV2/Hm+A63G APNlaYIBPM+FfheQOEZEpJC/z2l6ehQmehqvQrfMIzyijgFh0617jCDAGsW9+8dy v9dHJDCTkJYT+kt7rXHk0y4m2rWfD2wiWHcW+f7ObDm5Yq3Tv37NUS8uX2uL8CJG t4vKD9vtTv4ACWG6okbVwybe1t7/3/TcW8KeEO1yeWc/qZnddHc8xWIS+oH3Xj9j jvh4zwUBM+1vnGzYjGW2flXQr2PIUcf+sfKbgsGulzDPwoApmd5sQiTaCMz9imuL JlKpFunVXXLe6Vou84jvPcJLCOQYzSE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:45 2025 by rpki-client