$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00b53504-d201-3183-abec-a767fa62601e.roa File: 00b53504-d201-3183-abec-a767fa62601e.roa (raw, json) Hash identifier: zQsXZEiD3wJm8jZI8hVV0yI9Tvcve9W4kXSiwFsH6Os= Subject key identifier: 8C:C3:FF:45:AC:93:00:C9:90:8D:9D:8C:22:00:EF:4F:BB:5F:99:3F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581C4A6E1A3E48F2B497360 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00b53504-d201-3183-abec-a767fa62601e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.197.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:c4:a6:e1:a3:e4:8f:2b:49:73:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=6bda73c2-a491-4d2f-8823-e1fe433f21ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:97:c2:2c:20:19:02:5a:56:d8:6e:2d:c1:35: c6:01:4e:87:f2:b0:b9:27:0f:58:9c:48:aa:f1:5a: 55:77:1c:9e:16:63:e8:19:ba:9e:97:fe:b5:6c:d3: d8:db:86:dc:d9:78:ed:11:03:83:f6:a8:be:b7:19: 52:ff:94:44:3c:2a:fb:71:48:3b:ed:85:b5:e3:dd: 6a:2b:1c:37:30:92:97:eb:0d:7b:a8:60:6e:e2:94: ec:db:53:16:48:e6:57:41:37:09:1b:50:3a:b0:a3: ce:86:52:c8:c0:1e:ca:fb:29:08:35:63:a2:9f:a0: 6c:92:f1:d2:fa:a1:0e:b0:0e:80:a2:b8:f9:86:7d: 54:3e:a5:91:67:c2:d4:6a:dc:4e:ba:16:85:89:de: e1:d9:59:76:9d:06:cc:34:71:95:ca:8b:ba:bc:63: a4:86:38:c8:13:5f:d9:a6:89:e2:10:04:9a:b9:c1: 61:9f:d8:44:e6:f0:00:07:a5:20:fb:7c:f3:8b:4b: 13:f1:3a:0b:dc:52:5d:3a:f2:39:d3:ea:d8:ec:44: e8:d5:37:2a:4c:66:26:03:bf:3c:c8:27:f1:74:fe: 3a:dd:86:1e:79:43:a9:8c:ad:b0:c8:24:48:ae:83: 10:1b:a7:a1:76:02:c2:c2:66:8a:b2:97:85:51:46: a2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C3:FF:45:AC:93:00:C9:90:8D:9D:8C:22:00:EF:4F:BB:5F:99:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00b53504-d201-3183-abec-a767fa62601e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:39:8e:e2:81:27:44:59:41:76:39:46:14:6f:7a:36:d2:86: 69:8c:4b:ed:2f:d0:1e:0b:22:9f:ea:9e:56:06:f4:90:bb:3d: 2b:f6:03:57:0f:38:37:60:a2:0e:f8:fa:20:b7:f9:68:84:dd: 4b:3e:61:d4:e9:cb:af:87:fb:58:ff:3a:6d:a5:a2:fc:fa:48: 2a:1a:42:65:16:64:ef:d8:40:3b:98:7d:0e:f8:45:38:cb:87: 6e:4b:59:43:14:af:6f:48:9b:60:9a:17:11:fb:7c:8e:d0:ba: c8:6c:c7:d6:52:ed:40:f6:ec:da:d7:91:c7:39:28:59:09:f8: 67:2d:c9:89:a8:53:78:0c:54:14:2d:d3:11:9d:4a:7d:27:99: a1:a2:91:87:3b:7a:b4:8b:08:65:ae:e1:80:05:02:3b:c3:cd: d0:ba:0f:cf:0b:56:9b:2c:6b:74:fa:fd:54:43:ba:4d:4f:03: 44:94:46:69:c0:22:2b:79:d2:34:87:88:76:70:b1:17:dc:ca: 80:13:cc:a5:65:67:44:86:c6:0b:c0:00:6c:9c:ef:c4:5e:bb: be:fb:7d:c1:5d:05:93:00:38:91:f2:ab:7a:fe:d4:90:a5:5a: 52:ed:57:16:f1:6e:ae:42:89:5c:0e:f7:31:73:9d:b2:61:e5: 69:43:03:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcSm4aPkjytJc2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NmJkYTczYzItYTQ5MS00ZDJmLTg4MjMtZTFmZTQzM2YyMWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JfCLCAZAlpW2G4twTXGAU6H8rC5Jw9YnEiq 8VpVdxyeFmPoGbqel/61bNPY24bc2XjtEQOD9qi+txlS/5REPCr7cUg77YW1491q Kxw3MJKX6w17qGBu4pTs21MWSOZXQTcJG1A6sKPOhlLIwB7K+ykINWOin6BskvHS +qEOsA6Aorj5hn1UPqWRZ8LUatxOuhaFid7h2Vl2nQbMNHGVyou6vGOkhjjIE1/Z poniEASaucFhn9hE5vAAB6Ug+3zzi0sT8ToL3FJdOvI50+rY7ETo1TcqTGYmA788 yCfxdP463YYeeUOpjK2wyCRIroMQG6ehdgLCwmaKspeFUUaiHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzD/0WskwDJkI2djCIA70+7X5k/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDBiNTM1MDQtZDIwMS0z MTgzLWFiZWMtYTc2N2ZhNjI2MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8UhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ5juKBJ0RZQXY5RhRvejbShmmMS+0v0B4LIp/qnlYG9JC7PSv2A1cP ODdgog74+iC3+WiE3Us+YdTpy6+H+1j/Om2lovz6SCoaQmUWZO/YQDuYfQ74RTjL h25LWUMUr29Im2CaFxH7fI7Qushsx9ZS7UD27NrXkcc5KFkJ+GctyYmoU3gMVBQt 0xGdSn0nmaGikYc7erSLCGWu4YAFAjvDzdC6D88LVpssa3T6/VRDuk1PA0SURmnA Iit50jSHiHZwsRfcyoATzKVlZ0SGxgvAAGyc78Reu777fcFdBZMAOJHyq3r+1JCl WlLtVxbxbq5CiVwO9zFznbJh5WlDA7E= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:00 2025 by rpki-client