$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbbcd23d-cbc1-37eb-a377-92c166bee287.roa File: fbbcd23d-cbc1-37eb-a377-92c166bee287.roa (raw, json) Hash identifier: Z5sMN8vgjil0oG9Pt41bUGiz6MUfw4MSbcAu2UZL6fk= Subject key identifier: 74:26:20:00:F3:30:91:91:60:7D:35:A3:85:99:E3:D4:74:CB:28:CE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581FD07C91293B9BB80D0C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbbcd23d-cbc1-37eb-a377-92c166bee287.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 198.45.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:fd:07:c9:12:93:b9:bb:80:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=a9858da3-dc96-4bfb-a880-1e029f5e300b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:09:4e:cd:30:8d:ae:c5:08:98:24:b4:f8:c9: d4:a0:ca:db:fc:a1:f9:26:78:0b:ae:9e:c1:77:b9: ea:a7:83:f1:79:d3:7b:10:04:c8:f1:c1:71:d0:13: 73:d4:ba:bf:6a:ea:1f:2a:7b:73:3a:63:35:81:2e: 8f:6f:21:78:de:c8:28:42:34:fd:87:5d:65:9c:e8: d5:9b:b4:96:14:d4:21:d3:8f:e8:f1:a3:5b:c1:31: 69:21:5e:43:8d:45:01:8d:1f:52:b3:49:44:b3:b2: 20:fc:e5:d5:58:93:22:7b:01:be:e8:90:d7:14:da: db:80:1a:2d:fc:d9:89:40:08:fd:fd:80:41:9e:5f: 2d:69:e3:41:f2:a9:b1:72:64:2c:0d:92:b7:38:c8: fa:e5:39:b7:bc:da:a4:34:ec:77:85:65:2b:6d:18: be:f9:ab:d6:43:fa:d5:b6:b7:f8:ae:ae:d0:92:18: 92:08:d2:6e:92:84:2c:cd:9f:52:60:8a:f5:3f:84: e4:23:28:b0:de:9a:51:b3:e8:82:f2:24:68:36:3a: 79:46:e5:09:b5:f5:7b:f4:23:ed:6a:60:e7:3d:fd: 55:8c:86:2b:6c:cc:86:41:fb:7c:e3:dd:28:06:8a: b7:4f:69:9b:1b:f7:1c:04:31:15:30:a6:6d:bd:ec: 36:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:26:20:00:F3:30:91:91:60:7D:35:A3:85:99:E3:D4:74:CB:28:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbbcd23d-cbc1-37eb-a377-92c166bee287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:bb:0f:c0:4a:27:c9:2d:60:26:6b:b2:f9:a4:85:d4:70:4d: 99:7b:eb:9c:5a:e3:fe:f6:b4:dd:49:a3:35:74:0f:7a:b9:89: e9:ca:51:29:08:fd:bf:0b:21:82:c1:af:3b:40:d4:f9:58:fc: 6f:56:52:f8:9c:f5:41:df:01:b2:10:3e:d6:34:e0:27:59:af: 9f:0d:e1:ea:38:7b:17:03:b7:a1:24:18:d2:92:02:86:cd:aa: ac:79:69:19:f9:a2:b2:2e:00:33:36:45:a7:9e:57:fd:14:41: 7f:26:13:c7:83:c8:af:e6:6d:6b:49:26:70:d1:42:62:b7:53: 6a:90:b1:e4:37:bc:70:4f:0d:e4:10:e9:8c:39:84:09:75:31: fb:e0:c3:63:df:e2:a8:07:d1:cd:8a:91:d1:82:ed:f1:54:7d: 4c:5e:76:dc:88:52:55:15:5b:8d:e2:dd:c1:ed:fc:ba:d4:a7: 4f:ef:e4:80:b1:04:2b:fa:0e:83:a8:f5:fa:a9:b2:ea:80:52: 9f:85:f5:95:cd:74:60:61:1e:ad:6b:a7:4a:f6:af:80:78:93: 27:b9:cb:fe:17:9b:44:53:23:2d:4d:11:2e:e1:7b:4d:59:eb: c7:c7:d8:6d:be:19:9e:6a:6b:65:db:41:8a:a5:c8:09:61:ab: 2d:1e:10:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgf0HyRKTubuA0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YTk4NThkYTMtZGM5Ni00YmZiLWE4ODAtMWUwMjlmNWUzMDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQlOzTCNrsUImCS0+MnUoMrb/KH5JngLrp7B d7nqp4PxedN7EATI8cFx0BNz1Lq/auofKntzOmM1gS6PbyF43sgoQjT9h11lnOjV m7SWFNQh04/o8aNbwTFpIV5DjUUBjR9Ss0lEs7Ig/OXVWJMiewG+6JDXFNrbgBot /NmJQAj9/YBBnl8taeNB8qmxcmQsDZK3OMj65Tm3vNqkNOx3hWUrbRi++avWQ/rV trf4rq7QkhiSCNJukoQszZ9SYIr1P4TkIyiw3ppRs+iC8iRoNjp5RuUJtfV79CPt amDnPf1VjIYrbMyGQft8490oBoq3T2mbG/ccBDEVMKZtvew2kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQmIADzMJGRYH01o4WZ49R0yyjOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmJiY2QyM2QtY2JjMS0z N2ViLWEzNzctOTJjMTY2YmVlMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIu7D8BKJ8ktYCZrsvmkhdRwTZl765xa4/72tN1JozV0D3q5ienKUSkI /b8LIYLBrztA1PlY/G9WUvic9UHfAbIQPtY04CdZr58N4eo4excDt6EkGNKSAobN qqx5aRn5orIuADM2RaeeV/0UQX8mE8eDyK/mbWtJJnDRQmK3U2qQseQ3vHBPDeQQ 6Yw5hAl1Mfvgw2Pf4qgH0c2KkdGC7fFUfUxedtyIUlUVW43i3cHt/LrUp0/v5ICx BCv6DoOo9fqpsuqAUp+F9ZXNdGBhHq1rp0r2r4B4kye5y/4Xm0RTIy1NES7he01Z 68fH2G2+GZ5qa2XbQYqlyAlhqy0eEJc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:23 2025 by rpki-client