$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22f603a1-fd79-3e10-8cbf-6a806cbc7ae2.roa File: 22f603a1-fd79-3e10-8cbf-6a806cbc7ae2.roa (raw, json) Hash identifier: idkIwKyobSRIAitQG7pCSFotDVjOpU9rDQ9H7YoulU0= Subject key identifier: CF:51:FD:B2:69:3F:C5:9B:1C:75:BC:F2:76:30:65:E6:7E:F0:38:46 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581BE06AECB07C9EFCEF100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22f603a1-fd79-3e10-8cbf-6a806cbc7ae2.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:be:06:ae:cb:07:c9:ef:ce:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2077df7e-bb62-46fb-9521-cf92f125d427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b9:2a:62:80:1e:a3:64:f1:19:39:49:d9:8b: 5e:06:cf:92:05:e4:3c:a0:16:87:1f:8d:3c:f4:f8: 48:71:79:6d:7a:bc:b2:df:29:97:22:fc:68:df:d6: 5d:75:fe:3a:7c:5e:97:bd:54:b0:68:2f:61:d5:f1: 39:c8:ad:a2:d5:52:33:fc:b5:8f:d6:3e:63:ea:4e: 6f:97:e2:56:92:87:d3:16:52:59:27:c2:d0:b1:2c: df:99:4a:dc:90:68:21:8b:f6:78:ac:9c:ba:e8:24: fa:a1:bb:64:17:84:9a:ab:0b:bc:89:47:61:f3:c1: c6:33:aa:62:23:f9:32:99:f3:a6:27:4b:51:40:5a: 5c:89:5a:24:e4:8f:61:79:fb:23:8a:04:e6:32:77: 82:81:61:eb:83:3d:5c:99:47:cc:47:1c:e8:1c:e6: 5a:04:e6:a5:63:b5:b3:56:64:f0:bc:83:de:af:f4: 9c:53:0a:c7:ec:6c:f3:d8:22:43:a6:c5:b8:ce:86: 63:34:33:db:cf:3c:ee:f7:6d:6b:cc:8c:84:b2:d7: 3f:21:8c:26:63:af:86:8b:7a:52:08:b6:1b:d8:a4: bc:c9:d4:b4:78:0f:2a:d7:33:70:c4:12:53:f8:e2: 81:b5:f0:ab:74:83:0e:88:8d:92:74:bf:a1:b8:02: fb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:51:FD:B2:69:3F:C5:9B:1C:75:BC:F2:76:30:65:E6:7E:F0:38:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22f603a1-fd79-3e10-8cbf-6a806cbc7ae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:06:e2:c5:9b:e3:85:f3:d6:60:95:89:f3:2a:16:96:a5:33: 28:ba:d7:43:61:d4:72:e2:c3:84:a3:c5:8f:ec:55:de:90:2b: a0:ab:ac:18:57:a8:fa:f5:cb:7e:4e:14:ed:35:64:50:a3:b7: 6c:26:a0:40:c1:8b:27:c7:f0:8c:48:4c:dc:d1:66:1f:2a:d4: 0d:e1:f2:f1:8d:b4:90:cc:28:57:4c:93:04:47:54:d0:20:6b: 1a:6b:5d:d8:23:59:e6:b0:e4:e8:6a:ad:1f:92:d0:6a:d6:fa: 64:f4:ff:57:a1:9b:cf:b4:c1:d6:13:af:0a:41:01:e5:d5:b6: 75:d7:ce:e7:12:6c:85:bc:5e:83:21:b9:ef:15:19:32:16:0a: 73:fe:65:d6:dc:24:b9:17:ab:d7:ed:2b:cc:68:8a:44:7b:b8: 99:36:b1:bb:bb:ba:e4:77:c6:8a:0d:7f:eb:0c:95:38:39:ec: 56:5e:d7:48:be:f2:ad:8b:83:77:6a:8e:ed:f1:f9:8b:77:c8: 7c:23:cb:d9:f0:d0:1c:68:b8:cf:20:54:f7:7e:20:99:28:02: b1:a7:df:1d:20:24:da:a7:ca:f0:9d:c3:20:47:86:04:56:8c: 4e:6f:95:90:13:ce:ed:f6:08:7b:18:b3:fd:8c:59:88:f1:7a: 1b:05:53:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgb4GrssHye/O8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjA3N2RmN2UtYmI2Mi00NmZiLTk1MjEtY2Y5MmYxMjVkNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbkqYoAeo2TxGTlJ2YteBs+SBeQ8oBaHH408 9PhIcXlteryy3ymXIvxo39Zddf46fF6XvVSwaC9h1fE5yK2i1VIz/LWP1j5j6k5v l+JWkofTFlJZJ8LQsSzfmUrckGghi/Z4rJy66CT6obtkF4Saqwu8iUdh88HGM6pi I/kymfOmJ0tRQFpciVok5I9hefsjigTmMneCgWHrgz1cmUfMRxzoHOZaBOalY7Wz VmTwvIPer/ScUwrH7Gzz2CJDpsW4zoZjNDPbzzzu921rzIyEstc/IYwmY6+Gi3pS CLYb2KS8ydS0eA8q1zNwxBJT+OKBtfCrdIMOiI2SdL+huAL7/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9R/bJpP8WbHHW88nYwZeZ+8DhGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjJmNjAzYTEtZmQ3OS0z ZTEwLThjYmYtNmE4MDZjYmM3YWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4G4sWb44Xz1mCVifMqFpalMyi610Nh1HLiw4SjxY/sVd6QK6CrrBhX qPr1y35OFO01ZFCjt2wmoEDBiyfH8IxITNzRZh8q1A3h8vGNtJDMKFdMkwRHVNAg axprXdgjWeaw5OhqrR+S0GrW+mT0/1ehm8+0wdYTrwpBAeXVtnXXzucSbIW8XoMh ue8VGTIWCnP+ZdbcJLkXq9ftK8xoikR7uJk2sbu7uuR3xooNf+sMlTg57FZe10i+ 8q2Lg3dqju3x+Yt3yHwjy9nw0BxouM8gVPd+IJkoArGn3x0gJNqnyvCdwyBHhgRW jE5vlZATzu32CHsYs/2MWYjxehsFU9M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:20 2025 by rpki-client