$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e4dd1b7-f645-3ec9-b83b-56816f5776f4.roa File: 1e4dd1b7-f645-3ec9-b83b-56816f5776f4.roa (raw, json) Hash identifier: 5eLr+VeBI0qMTT+xwZbNcL+SVpaYQLCeMGwwvBNPAko= Subject key identifier: 0F:A2:5C:E1:91:24:EB:08:C6:56:2C:71:3F:E0:33:A5:5B:A5:66:6A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5813BB169CC7F99BF681C40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e4dd1b7-f645-3ec9-b83b-56816f5776f4.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.197.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:3b:b1:69:cc:7f:99:bf:68:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=6178ed2c-3ac4-48f2-817d-2412c46857af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:fb:16:dc:cc:7f:10:b8:4e:38:ae:14:a9: 75:d0:83:86:1d:64:c5:98:72:7e:81:83:e7:0c:56: 19:eb:45:45:f8:51:29:b9:2e:23:5d:69:c1:17:4b: 80:5e:63:ef:6b:f0:49:eb:eb:f0:ba:d1:42:03:90: 4b:d5:38:f5:ec:80:96:73:00:e7:4d:06:8d:7f:be: 8f:ba:c2:f5:b6:7d:91:ae:bd:06:31:05:02:fd:f0: 08:80:89:bc:0b:13:bd:cb:52:31:69:04:96:0a:6a: ef:81:c5:e3:d2:5c:18:a6:fe:9f:9c:0d:e4:c6:28: de:02:13:d5:67:34:ed:ab:67:e0:42:77:0b:35:fb: 36:15:f3:32:4f:c4:df:bb:c8:2f:3f:b0:3b:54:92: 44:f1:a1:cb:66:c5:86:69:ba:62:40:04:66:fb:ca: 40:c2:70:12:af:f3:86:63:c4:2b:47:88:74:74:0b: 42:a7:52:2f:f2:36:b5:d9:c2:62:10:7e:0f:c9:7e: 61:7c:72:bf:72:9e:39:c1:34:59:90:a0:cc:a3:3a: 12:6f:f5:75:7a:91:a3:5b:ab:ae:56:92:5d:be:be: b7:f9:a9:b8:74:0f:8d:7b:05:5e:a8:03:bc:28:42: dc:f6:43:65:6c:c6:f9:58:ab:6c:00:58:62:34:14: cd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A2:5C:E1:91:24:EB:08:C6:56:2C:71:3F:E0:33:A5:5B:A5:66:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e4dd1b7-f645-3ec9-b83b-56816f5776f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:7b:d1:64:85:69:14:e0:88:30:2e:92:b3:8a:8e:75:b7:c5: 79:98:41:80:63:13:4f:23:cb:75:74:24:8e:5d:a9:88:63:07: 41:2d:8c:d2:62:88:27:39:b7:fe:95:65:1e:cb:69:36:90:ca: 40:66:a2:89:89:d5:83:d4:d4:45:c7:58:d2:9f:a6:5b:9a:87: c0:04:f4:31:4f:78:34:82:51:73:7d:ef:34:a1:71:ae:a5:64: 20:1b:1a:7b:ab:db:8a:b2:42:48:2c:71:ce:68:42:63:d6:43: d6:a1:26:f7:db:55:e3:14:11:22:39:54:b4:5a:9f:d5:75:87: 48:3f:e0:6b:0c:61:7d:e0:5e:dd:36:19:ae:ec:52:11:80:22: aa:f9:f0:36:c1:35:4d:03:00:0b:73:ac:4a:dc:9b:c6:4a:4a: 0a:de:6c:66:f3:44:98:ae:d6:ab:09:f8:5e:0b:9b:9a:89:01: f1:a3:a7:81:a4:21:fc:e7:3f:ce:8d:8e:41:a1:26:63:3e:36: 3d:b7:b6:a4:42:dc:f2:ee:3c:70:4e:da:16:4f:4c:ae:9b:9e: 9b:5b:41:52:c1:d8:74:d8:ea:2c:f0:a3:0b:23:d7:c3:de:9c: 86:b1:09:2b:db:90:cb:ba:c9:ac:1c:9b:32:12:a1:84:ad:04: 70:d6:0d:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgTuxacx/mb9oHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjE3OGVkMmMtM2FjNC00OGYyLTgxN2QtMjQxMmM0Njg1N2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb77FtzMfxC4TjiuFKl10IOGHWTFmHJ+gYPn DFYZ60VF+FEpuS4jXWnBF0uAXmPva/BJ6+vwutFCA5BL1Tj17ICWcwDnTQaNf76P usL1tn2Rrr0GMQUC/fAIgIm8CxO9y1IxaQSWCmrvgcXj0lwYpv6fnA3kxijeAhPV ZzTtq2fgQncLNfs2FfMyT8Tfu8gvP7A7VJJE8aHLZsWGabpiQARm+8pAwnASr/OG Y8QrR4h0dAtCp1Iv8ja12cJiEH4PyX5hfHK/cp45wTRZkKDMozoSb/V1epGjW6uu VpJdvr63+am4dA+NewVeqAO8KELc9kNlbMb5WKtsAFhiNBTNqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+iXOGRJOsIxlYscT/gM6VbpWZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWU0ZGQxYjctZjY0NS0z ZWM5LWI4M2ItNTY4MTZmNTc3NmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMh70WSFaRTgiDAukrOKjnW3xXmYQYBjE08jy3V0JI5dqYhjB0EtjNJi iCc5t/6VZR7LaTaQykBmoomJ1YPU1EXHWNKfpluah8AE9DFPeDSCUXN97zShca6l ZCAbGnur24qyQkgscc5oQmPWQ9ahJvfbVeMUESI5VLRan9V1h0g/4GsMYX3gXt02 Ga7sUhGAIqr58DbBNU0DAAtzrErcm8ZKSgrebGbzRJiu1qsJ+F4Lm5qJAfGjp4Gk IfznP86NjkGhJmM+Nj23tqRC3PLuPHBO2hZPTK6bnptbQVLB2HTY6izwowsj18Pe nIaxCSvbkMu6yawcmzISoYStBHDWDQQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:57 2025 by rpki-client