$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14b2c634-3c52-31a5-b354-a6a662443b39.roa File: 14b2c634-3c52-31a5-b354-a6a662443b39.roa (raw, json) Hash identifier: s6OPiuJXLYjwxeNUlZ84OtfsVhJNrOlWGadKWrEbNZg= Subject key identifier: 68:8E:0C:48:96:E0:64:9E:D7:FE:FF:29:50:3C:A4:6F:47:DF:A1:BB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5813ACC23EB61E370F3CB00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14b2c634-3c52-31a5-b354-a6a662443b39.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.197.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:3a:cc:23:eb:61:e3:70:f3:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=8a0adcd2-49c8-48aa-963a-6440829e7aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:28:ae:26:d1:55:a5:16:6d:3f:a2:ac:cb:e2: c4:70:42:16:48:d0:52:ea:00:f6:9b:0b:30:3c:b1: 6c:22:dd:8f:b6:62:14:d4:7b:17:0e:d5:3c:cc:bf: 65:6d:a3:e7:61:db:ce:73:44:b7:17:15:35:ee:6a: 3e:2a:95:a5:0f:76:5b:e7:21:45:33:47:c9:ff:5c: 02:eb:e2:87:40:b1:1a:d1:d6:1f:7f:0f:8a:a5:71: 1b:3d:0c:f2:2b:8a:72:0c:4d:66:23:c3:d2:f6:03: ae:28:1e:74:ff:b3:3a:98:1a:9b:2b:46:d8:ff:42: 22:85:bb:0b:5d:e5:13:e8:24:95:89:44:58:92:e1: c2:fa:3b:79:1b:68:9d:4b:cb:95:cd:b0:3d:01:e2: f4:6e:f6:a5:94:ec:82:bd:f0:03:d3:84:13:a1:c5: 96:53:92:57:cd:68:75:a9:46:e5:13:cd:5b:0b:c6: 5b:48:c7:db:09:6d:85:1f:c9:71:0c:cd:cb:dd:8c: a7:63:88:ef:6d:13:11:4c:4a:dc:4f:4f:92:3b:b4: 54:24:b2:e0:ac:dc:44:ff:f6:24:bf:6a:0f:5e:38: 82:97:8c:08:4f:1a:12:94:f5:e1:dd:e8:c6:2d:ec: aa:fd:17:ab:d1:03:88:b3:dc:fa:91:1b:c8:11:e4: 1d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8E:0C:48:96:E0:64:9E:D7:FE:FF:29:50:3C:A4:6F:47:DF:A1:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14b2c634-3c52-31a5-b354-a6a662443b39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:a5:14:2a:d3:0e:1b:03:b8:bf:d0:a2:44:3a:26:4c:c6:ee: 03:29:c2:6f:9c:b6:68:85:14:80:35:ba:08:57:4a:59:0e:1d: cc:35:d4:77:68:aa:29:08:c0:60:c8:88:54:87:78:27:4d:4c: b8:fb:e2:ac:58:8f:88:da:76:8c:3e:63:07:1b:52:6e:62:d5: 6b:86:3a:aa:48:9b:b8:81:e2:d2:c5:ff:2f:49:90:1c:76:b6: ab:42:e7:22:40:6e:a1:a1:f1:41:0e:81:01:88:be:74:77:0c: 15:2b:c1:83:48:c2:aa:a4:c5:73:54:5b:ec:1e:3d:6f:d9:12: a7:e6:1b:c6:a9:6e:e0:73:9b:9b:79:fd:f2:65:4e:c7:09:80: 3b:d0:d9:fb:91:fd:29:20:00:35:77:6a:3b:45:4c:38:5f:8c: bf:9f:c2:e6:d2:a7:be:19:45:a2:a5:da:14:5b:87:73:5f:86: 0e:4e:96:91:32:92:ca:98:d1:f0:10:be:64:e3:26:47:be:f2: ca:24:de:0b:d8:f3:e3:31:ea:74:4e:1f:e6:bb:cf:36:66:37: f9:4e:c6:6f:0f:c8:06:02:c1:f6:d5:5a:e4:60:dd:71:dd:c7: 25:4a:ad:01:90:c5:1b:d1:70:39:5b:b0:c1:57:40:92:35:6c: 63:c2:bf:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgTrMI+th43DzywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OGEwYWRjZDItNDljOC00OGFhLTk2M2EtNjQ0MDgyOWU3YWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyiuJtFVpRZtP6Ksy+LEcEIWSNBS6gD2mwsw PLFsIt2PtmIU1HsXDtU8zL9lbaPnYdvOc0S3FxU17mo+KpWlD3Zb5yFFM0fJ/1wC 6+KHQLEa0dYffw+KpXEbPQzyK4pyDE1mI8PS9gOuKB50/7M6mBqbK0bY/0IihbsL XeUT6CSViURYkuHC+jt5G2idS8uVzbA9AeL0bvallOyCvfAD04QTocWWU5JXzWh1 qUblE81bC8ZbSMfbCW2FH8lxDM3L3YynY4jvbRMRTErcT0+SO7RUJLLgrNxE//Yk v2oPXjiCl4wITxoSlPXh3ejGLeyq/Rer0QOIs9z6kRvIEeQd6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiODEiW4GSe1/7/KVA8pG9H36G7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTRiMmM2MzQtM2M1Mi0z MWE1LWIzNTQtYTZhNjYyNDQzYjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWlFCrTDhsDuL/QokQ6JkzG7gMpwm+ctmiFFIA1ughXSlkOHcw11Hdo qikIwGDIiFSHeCdNTLj74qxYj4jadow+YwcbUm5i1WuGOqpIm7iB4tLF/y9JkBx2 tqtC5yJAbqGh8UEOgQGIvnR3DBUrwYNIwqqkxXNUW+wePW/ZEqfmG8apbuBzm5t5 /fJlTscJgDvQ2fuR/SkgADV3ajtFTDhfjL+fwubSp74ZRaKl2hRbh3Nfhg5OlpEy ksqY0fAQvmTjJke+8sok3gvY8+Mx6nROH+a7zzZmN/lOxm8PyAYCwfbVWuRg3XHd xyVKrQGQxRvRcDlbsMFXQJI1bGPCvz0= -----END CERTIFICATE-----Generated at Fri Apr 11 22:44:21 2025 by rpki-client