$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dffb8d64-fd82-302e-ada2-5e3a69317b50.roa File: dffb8d64-fd82-302e-ada2-5e3a69317b50.roa (raw, json) Hash identifier: SDO/VEpA2LaY4V7i9WwyM6YYq4cLVuZe9yAAkTn03js= Subject key identifier: B3:C7:D7:40:D3:6D:17:55:BE:87:2B:2D:02:A4:3B:E6:E6:9D:57:3D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5816B8320B919A1760469B8 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dffb8d64-fd82-302e-ada2-5e3a69317b50.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 198.45.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6b:83:20:b9:19:a1:76:04:69:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=33f22d53-e37c-4e78-a2a1-c41deb41c55d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:49:b8:40:dc:6e:da:20:9d:8e:68:19:df: 8c:fd:ec:fc:58:7d:05:ba:3b:0a:e9:f8:c6:f5:56: 95:c6:83:4c:e0:02:f0:09:ad:13:9c:46:b0:5a:d3: 6c:f2:b7:dc:19:d4:0b:58:a6:44:b2:46:ab:a7:fe: 8f:8a:e2:64:08:32:d8:31:26:ce:87:b4:b3:e8:4a: d3:4c:1a:eb:bd:a7:09:14:a4:50:7e:a7:29:5b:7c: e3:9d:d3:cc:e4:0c:e0:36:1a:76:70:ea:22:a9:3d: 01:27:ee:ec:2a:1b:dd:4c:ef:e7:52:a5:b0:35:68: 50:78:a1:22:1f:eb:e3:28:f2:aa:92:60:b6:70:64: 36:66:c9:ae:65:35:ac:17:1f:dd:e5:33:d7:15:5d: 53:1e:2b:17:18:65:1b:7b:85:a8:d2:04:1c:d4:a6: e2:ef:b6:3b:ad:9e:c2:89:e0:b9:64:ac:65:70:5a: 65:8c:ee:31:a5:40:b4:c9:eb:cc:ab:c1:de:91:7b: 65:f3:5f:7d:f8:11:ab:e7:74:b3:c5:24:1c:39:88: 0d:8f:6a:a1:d3:7a:40:cc:8a:58:3a:ba:36:6c:9d: da:83:e9:c0:e8:a3:69:e0:d0:19:21:22:b8:c8:27: 04:9a:9e:51:95:8c:3f:d2:36:8d:c8:78:d5:6b:9a: 7c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C7:D7:40:D3:6D:17:55:BE:87:2B:2D:02:A4:3B:E6:E6:9D:57:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dffb8d64-fd82-302e-ada2-5e3a69317b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:85:e1:00:79:3b:1f:c8:f4:31:74:e4:48:4e:92:78:ec:9a: 57:65:9c:fa:e2:96:3f:b9:a0:27:86:22:d7:58:43:6b:45:1c: 6d:0b:9a:5f:78:85:05:7d:13:a0:4d:40:86:eb:33:10:25:1b: b2:55:49:6f:8b:76:d2:e1:d3:d0:53:da:a0:7c:f2:c9:3d:b2: cf:62:b4:94:3a:98:69:56:95:9e:e8:8a:21:93:b3:13:27:f7: 37:24:5f:ea:96:7e:f8:ea:f1:73:26:3b:b5:80:f1:2c:c9:ab: a3:22:d0:a3:70:ea:ac:08:2d:09:46:03:94:04:d8:c9:62:c1: 1e:0c:a7:3f:f2:4e:35:ca:53:41:93:eb:a0:af:bc:5c:9e:af: 2e:93:2b:b6:68:93:37:73:2e:59:3e:48:14:d5:16:2f:f0:65: f0:9d:02:5a:af:33:5a:3d:77:f1:4d:e9:df:c9:1d:9e:20:f4: eb:03:57:79:6f:db:46:0d:e4:fd:63:9a:b5:ab:80:f7:c8:4b: dc:fb:32:e3:8f:10:7b:83:7c:18:c2:b2:23:23:c7:7b:9f:18: ba:a6:8e:1a:4c:7b:f9:28:1f:18:28:21:89:ed:74:c2:95:55: 5d:8e:8f:c1:50:88:a3:3e:75:bb:3a:c4:94:9e:5b:80:f6:27: e3:6a:8a:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgWuDILkZoXYEabgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzNmMjJkNTMtZTM3Yy00ZTc4LWEyYTEtYzQxZGViNDFjNTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1JJuEDcbtognY5oGd+M/ez8WH0FujsK6fjG 9VaVxoNM4ALwCa0TnEawWtNs8rfcGdQLWKZEskarp/6PiuJkCDLYMSbOh7Sz6ErT TBrrvacJFKRQfqcpW3zjndPM5AzgNhp2cOoiqT0BJ+7sKhvdTO/nUqWwNWhQeKEi H+vjKPKqkmC2cGQ2ZsmuZTWsFx/d5TPXFV1THisXGGUbe4Wo0gQc1Kbi77Y7rZ7C ieC5ZKxlcFpljO4xpUC0yevMq8HekXtl8199+BGr53SzxSQcOYgNj2qh03pAzIpY Oro2bJ3ag+nA6KNp4NAZISK4yCcEmp5RlYw/0jaNyHjVa5p8MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPH10DTbRdVvocrLQKkO+bmnVc9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGZmYjhkNjQtZmQ4Mi0z MDJlLWFkYTItNWUzYTY5MzE3YjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+F4QB5Ox/I9DF05EhOknjsmldlnPrilj+5oCeGItdYQ2tFHG0Lml94 hQV9E6BNQIbrMxAlG7JVSW+LdtLh09BT2qB88sk9ss9itJQ6mGlWlZ7oiiGTsxMn 9zckX+qWfvjq8XMmO7WA8SzJq6Mi0KNw6qwILQlGA5QE2MliwR4Mpz/yTjXKU0GT 66CvvFyery6TK7ZokzdzLlk+SBTVFi/wZfCdAlqvM1o9d/FN6d/JHZ4g9OsDV3lv 20YN5P1jmrWrgPfIS9z7MuOPEHuDfBjCsiMjx3ufGLqmjhpMe/koHxgoIYntdMKV VV2Oj8FQiKM+dbs6xJSeW4D2J+NqisQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:13 2025 by rpki-client