$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d840675-c6ac-353a-93a3-37c35b430b35.roa File: 1d840675-c6ac-353a-93a3-37c35b430b35.roa (raw, json) Hash identifier: pm6uU1gI6UEBVS31rmlqOI7P2iCYq4AHBys9Z25RMSc= Subject key identifier: 2E:E1:B3:D2:91:F4:2A:49:5C:E4:45:47:52:EF:E3:2A:0C:9A:4D:6A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848CDE11507E01C243630FD4A60 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d840675-c6ac-353a-93a3-37c35b430b35.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7155 IP address blocks: 99.198.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:15:07:e0:1c:24:36:30:fd:4a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=ac1b3f94-7d3a-479b-9633-f088430fb809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:20:52:fe:c0:c9:b8:c9:4e:d6:bf:7f:a6:c6: 5c:5c:2d:e3:58:03:37:b2:8e:c9:1e:e4:1d:96:ff: 43:27:15:74:49:d4:31:56:ff:74:fe:b2:9b:3a:21: fa:fd:6f:ac:f1:8d:97:c3:a0:7d:28:66:29:86:1d: 5b:00:9f:27:38:96:88:b2:33:e2:4a:ce:0b:11:45: 7e:83:05:07:3b:b9:47:3b:a7:94:79:0c:3a:81:44: 4d:f6:47:17:1a:2e:41:5e:95:be:9a:a5:fe:28:3b: e1:80:a3:9e:bd:16:7b:0f:16:93:48:e9:ab:23:b5: 4e:38:ae:a4:3c:ab:a0:b8:c1:21:80:75:65:4a:e6: 3d:5c:4b:cd:29:76:e8:fc:31:a8:3a:ad:d2:ca:d3: df:c0:23:2f:c8:31:ad:2b:dc:18:ff:47:f3:44:52: f9:1e:2b:14:c9:dd:3b:58:04:bb:ff:c5:be:98:e5: a7:61:c3:c8:f8:d0:e4:2e:80:31:0a:14:39:03:47: 42:e8:44:51:d5:2b:ea:f4:64:15:58:60:44:af:19: f3:b1:07:48:ee:13:61:85:5e:3a:d1:80:d6:ed:f2: e9:21:92:82:01:85:b3:4a:f4:5f:7c:c7:fe:98:99: e1:3b:d6:93:63:30:ea:ae:f4:34:4c:63:69:53:3a: 30:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E1:B3:D2:91:F4:2A:49:5C:E4:45:47:52:EF:E3:2A:0C:9A:4D:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d840675-c6ac-353a-93a3-37c35b430b35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:be:46:51:1e:14:e3:8b:09:71:84:5f:64:58:16:a2:e0:9b: 58:59:23:7c:5c:3c:61:e5:66:3b:8b:8c:db:45:62:73:ce:09: a9:a8:3f:ba:be:24:d1:8a:6c:8f:d1:1b:e7:f6:2d:97:9e:1f: 08:01:5d:bc:7a:cd:db:6b:05:4c:06:e7:56:50:0d:3b:0b:9a: 47:d5:78:41:67:6b:0e:52:93:d9:78:52:22:b1:d6:3f:6f:d0: f5:97:ed:6a:df:ca:bf:35:61:30:0d:75:2d:d2:83:4c:13:33: 26:af:53:df:cf:81:0a:68:78:fd:60:74:c4:3b:15:ac:05:20: 7a:e8:a1:3f:7e:72:32:6b:01:c0:81:c8:e4:d6:da:38:71:ef: 44:ca:7b:ae:da:d3:e3:ac:e0:c3:4c:34:fc:d9:3f:33:00:aa: 3f:fe:f4:10:11:3c:09:af:e3:2b:de:33:f9:36:93:67:79:75: df:b9:bb:26:ff:ae:87:b4:42:8e:da:2c:a1:ec:53:1b:87:16: a4:96:a4:32:2f:cf:7d:2b:88:cd:98:b2:ce:8e:7d:40:f3:d6: 15:cc:54:97:49:fd:4e:23:26:e6:e5:dd:ea:33:0f:7c:a8:54: 49:fa:c5:01:6c:13:95:86:aa:28:e2:c0:fc:fc:ef:e6:48:d6: 50:d5:e6:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RUH4BwkNjD9SmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk YWMxYjNmOTQtN2QzYS00NzliLTk2MzMtZjA4ODQzMGZiODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryBS/sDJuMlO1r9/psZcXC3jWAM3so7JHuQd lv9DJxV0SdQxVv90/rKbOiH6/W+s8Y2Xw6B9KGYphh1bAJ8nOJaIsjPiSs4LEUV+ gwUHO7lHO6eUeQw6gURN9kcXGi5BXpW+mqX+KDvhgKOevRZ7DxaTSOmrI7VOOK6k PKuguMEhgHVlSuY9XEvNKXbo/DGoOq3SytPfwCMvyDGtK9wY/0fzRFL5HisUyd07 WAS7/8W+mOWnYcPI+NDkLoAxChQ5A0dC6ERR1Svq9GQVWGBErxnzsQdI7hNhhV46 0YDW7fLpIZKCAYWzSvRffMf+mJnhO9aTYzDqrvQ0TGNpUzow8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7hs9KR9CpJXORFR1Lv4yoMmk1qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWQ4NDA2NzUtYzZhYy0z NTNhLTkzYTMtMzdjMzViNDMwYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCY8YoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFi+RlEeFOOLCXGEX2RYFqLgm1hZI3xcPGHlZjuLjNtFYnPOCamoP7q+ JNGKbI/RG+f2LZeeHwgBXbx6zdtrBUwG51ZQDTsLmkfVeEFnaw5Sk9l4UiKx1j9v 0PWX7Wrfyr81YTANdS3Sg0wTMyavU9/PgQpoeP1gdMQ7FawFIHrooT9+cjJrAcCB yOTW2jhx70TKe67a0+Os4MNMNPzZPzMAqj/+9BARPAmv4yveM/k2k2d5dd+5uyb/ roe0Qo7aLKHsUxuHFqSWpDIvz30riM2Yss6OfUDz1hXMVJdJ/U4jJubl3eozD3yo VEn6xQFsE5WGqijiwPz87+ZI1lDV5qQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:49 2025 by rpki-client