$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0bd36016-61c5-3f3a-8370-6301f872e21f.roa File: 0bd36016-61c5-3f3a-8370-6301f872e21f.roa (raw, json) Hash identifier: JghnsDt1D10VAG4Dc/Ihh3guCStuck8go1zaJpqOA04= Subject key identifier: 51:E9:EC:A8:33:27:8E:FC:BC:E3:C6:60:28:C2:EF:38:78:3D:6A:43 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5813C64DD0F20F13F3D9500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0bd36016-61c5-3f3a-8370-6301f872e21f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.198.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:3c:64:dd:0f:20:f1:3f:3d:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=92f34ebd-c290-4a61-bb8a-3a11550d0e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b9:77:c4:b3:d6:62:76:0d:43:95:56:20:57: ab:d0:06:28:74:38:f2:de:40:65:4a:4d:7d:7e:3d: 4c:13:99:53:80:c3:46:7f:2a:4c:15:66:9f:aa:b5: 2a:9a:5b:74:d5:08:7d:59:89:09:08:79:f2:31:c2: 91:18:f9:15:ca:c4:16:e7:50:3a:b2:23:89:bd:98: 90:a1:7b:f4:ac:62:37:92:ec:c5:a7:7b:a7:06:bb: 8c:09:b5:d0:57:75:b1:de:da:23:00:60:62:64:72: a9:bf:13:5d:33:8d:1c:3a:d5:f3:0f:6b:ac:fa:38: 63:e7:26:e4:a7:4e:d8:51:91:48:01:2b:4c:34:82: 6f:5d:10:13:61:9a:63:be:0c:83:01:1b:8e:4d:d6: 65:5c:90:7f:07:66:19:a5:8f:7f:a3:76:7c:bb:88: 2b:f8:38:43:6a:58:30:45:76:05:ab:a1:57:8e:bd: 45:b5:2e:31:d7:1a:43:3a:e1:23:8c:db:77:3e:07: 2e:9c:bc:ca:ec:16:63:b8:d7:5f:12:3f:c6:eb:76: 18:79:b1:d8:d7:c9:5d:0a:cc:13:84:a0:31:a4:e8: 80:54:62:89:de:7b:df:a4:b8:d0:ff:f3:70:25:7d: e7:a9:7a:1e:1e:91:9e:b3:76:8c:56:54:ee:52:80: fa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E9:EC:A8:33:27:8E:FC:BC:E3:C6:60:28:C2:EF:38:78:3D:6A:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0bd36016-61c5-3f3a-8370-6301f872e21f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:4a:ba:be:c8:6b:14:5a:0d:d2:50:59:a3:16:30:70:35:53: 1d:8f:b7:a0:da:ec:be:4b:b8:50:98:9e:e4:4b:51:e1:ec:ba: 26:ac:fd:c2:8a:97:af:46:d5:4a:e4:f6:ff:4d:7a:f9:69:1c: 6e:ee:63:17:ba:cd:a6:bd:cf:00:82:85:40:cc:3d:41:6d:c2: e2:10:33:2d:e2:f9:74:d6:c7:f7:d7:42:a3:74:72:e2:72:82: 1f:33:8c:0c:fb:9d:7f:48:52:d5:bb:3c:e6:17:f7:8c:5f:6f: e5:66:66:aa:1a:9f:04:17:70:1c:c5:17:8c:11:b7:c2:cc:13: 8c:15:3f:a1:15:0c:d6:94:35:40:5e:d9:03:ff:05:23:ce:c2: 59:3d:29:32:74:ad:a3:2a:1a:09:97:f4:a0:3a:84:cf:f9:f9: 33:8d:1b:97:d1:c4:e9:eb:10:8b:ce:5f:19:29:9d:ee:de:33: 44:08:82:88:5f:c9:0d:b2:d2:b7:1c:c1:7d:de:37:6c:ce:2c: c7:e5:21:a2:2f:c0:b9:40:f6:8e:a1:a4:f4:93:e5:87:09:42: 06:f0:04:ed:ad:fd:fc:a1:2e:71:7c:7c:a7:c6:3b:50:a7:f5: 5c:e3:a7:7d:ba:a7:b5:96:d1:f7:81:8a:31:78:18:e3:cd:97: a3:a6:0e:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgTxk3Q8g8T89lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTJmMzRlYmQtYzI5MC00YTYxLWJiOGEtM2ExMTU1MGQwZTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrl3xLPWYnYNQ5VWIFer0AYodDjy3kBlSk19 fj1ME5lTgMNGfypMFWafqrUqmlt01Qh9WYkJCHnyMcKRGPkVysQW51A6siOJvZiQ oXv0rGI3kuzFp3unBruMCbXQV3Wx3tojAGBiZHKpvxNdM40cOtXzD2us+jhj5ybk p07YUZFIAStMNIJvXRATYZpjvgyDARuOTdZlXJB/B2YZpY9/o3Z8u4gr+DhDalgw RXYFq6FXjr1FtS4x1xpDOuEjjNt3PgcunLzK7BZjuNdfEj/G63YYebHY18ldCswT hKAxpOiAVGKJ3nvfpLjQ//NwJX3nqXoeHpGes3aMVlTuUoD6LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHp7KgzJ478vOPGYCjC7zh4PWpDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGJkMzYwMTYtNjFjNS0z ZjNhLTgzNzAtNjMwMWY4NzJlMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtKur7IaxRaDdJQWaMWMHA1Ux2Pt6Da7L5LuFCYnuRLUeHsuias/cKK l69G1Urk9v9NevlpHG7uYxe6zaa9zwCChUDMPUFtwuIQMy3i+XTWx/fXQqN0cuJy gh8zjAz7nX9IUtW7POYX94xfb+VmZqoanwQXcBzFF4wRt8LME4wVP6EVDNaUNUBe 2QP/BSPOwlk9KTJ0raMqGgmX9KA6hM/5+TONG5fRxOnrEIvOXxkpne7eM0QIgohf yQ2y0rccwX3eN2zOLMflIaIvwLlA9o6hpPST5YcJQgbwBO2t/fyhLnF8fKfGO1Cn 9Vzjp326p7WW0feBijF4GOPNl6OmDns= -----END CERTIFICATE-----Generated at Fri Mar 14 08:46:31 2025 by rpki-client