$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24538dcc-b074-32f8-b726-fa4dcd42f595.roa File: 24538dcc-b074-32f8-b726-fa4dcd42f595.roa (raw, json) Hash identifier: dtGXy8mvyS3M4vq/6/szr2LmCzcy+Y1K4imZt9ENdYU= Subject key identifier: 23:B8:D6:C4:9C:0E:68:4A:FD:E3:67:D9:D7:E8:45:A6:46:DC:3F:AC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581CCA1831C71FB2EE56A10 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24538dcc-b074-32f8-b726-fa4dcd42f595.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.198.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:cc:a1:83:1c:71:fb:2e:e5:6a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=af285185-d905-4098-a7ea-d2360d254a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:29:64:3e:0c:db:c6:94:ad:99:3f:30:83:84: 2e:19:fa:d1:ae:c8:38:6d:fb:91:d9:a3:e7:9a:56: 38:c5:b8:42:87:48:6f:68:cb:ba:97:0d:be:c3:9e: ea:66:8f:5d:d4:de:60:b7:2a:e4:6e:16:59:25:7a: 2d:e3:fd:44:54:81:ed:db:75:5a:d5:9b:db:4d:f2: 1a:e1:37:71:ce:db:14:87:dd:71:34:55:0c:5d:5b: f9:a9:15:2b:81:83:2a:43:97:86:4e:1a:d5:34:bb: d9:d1:80:7e:2a:ea:b1:2f:82:32:3d:53:cc:13:6a: 23:de:c5:a3:a1:c9:38:d0:16:23:b1:4b:8c:ea:c3: be:28:a9:fc:58:d0:e6:85:7d:01:03:13:8a:8e:76: b4:bd:b7:85:51:b1:b9:fc:70:fa:85:db:f3:4a:b9: ae:51:7c:ab:d3:e1:9f:1a:16:e6:94:ce:6c:4f:af: c7:64:92:1a:b7:d9:ef:0b:20:6b:b7:f0:08:d4:8a: 00:88:25:2d:9d:24:b7:b5:11:8c:8d:f3:8d:67:40: 48:db:fc:fb:81:c2:8a:ae:bd:e4:22:d9:16:90:39: ac:65:2d:c0:97:cc:38:bf:c7:55:c0:37:bc:df:71: 34:f6:33:53:96:41:c0:d9:3c:b4:cb:92:bf:90:42: 79:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B8:D6:C4:9C:0E:68:4A:FD:E3:67:D9:D7:E8:45:A6:46:DC:3F:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24538dcc-b074-32f8-b726-fa4dcd42f595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:62:16:f1:55:2a:61:a2:65:86:4d:12:c7:f9:58:10:a6:9e: 0a:02:1e:28:67:d8:1c:78:00:55:11:d1:fa:c2:d6:b1:d9:3f: da:4b:71:a3:1a:24:dc:b8:94:8c:fd:35:06:82:38:a7:57:07: 98:cb:d5:48:72:2a:7c:94:7d:da:13:25:5d:66:b4:04:46:30: 31:ef:44:3e:7f:91:12:d7:5d:cc:0b:76:79:91:a0:ef:0e:3e: 2f:b7:76:ed:72:fe:0e:74:c1:ea:e1:42:59:f5:8f:d8:98:29: c3:79:52:62:07:26:76:d6:1b:c1:6a:40:07:71:58:3a:07:90: 54:ea:12:81:3b:5e:06:bb:d4:61:7d:c3:0b:32:9f:f7:96:70: a7:29:fc:3f:8c:15:07:4d:07:ab:48:a7:96:2e:77:a2:a9:7f: 36:33:6f:06:0f:8a:5a:6a:57:d0:28:8b:a8:69:d9:22:5a:b7: fb:c3:57:ea:7c:91:d8:e8:e9:e2:69:9b:8d:9c:24:00:e7:7a: c6:4a:d6:bb:61:1b:fc:98:79:ea:6b:ef:0f:37:c3:5d:6f:39: 62:3a:c2:f5:7a:cc:14:af:79:b0:62:3c:a6:6e:d9:eb:cb:f8: 30:48:fd:f6:a6:dd:6f:62:08:f7:33:5f:de:14:44:f6:a7:88: 92:6a:53:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcyhgxxx+y7lahAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YWYyODUxODUtZDkwNS00MDk4LWE3ZWEtZDIzNjBkMjU0YTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnylkPgzbxpStmT8wg4QuGfrRrsg4bfuR2aPn mlY4xbhCh0hvaMu6lw2+w57qZo9d1N5gtyrkbhZZJXot4/1EVIHt23Va1ZvbTfIa 4TdxztsUh91xNFUMXVv5qRUrgYMqQ5eGThrVNLvZ0YB+KuqxL4IyPVPME2oj3sWj ock40BYjsUuM6sO+KKn8WNDmhX0BAxOKjna0vbeFUbG5/HD6hdvzSrmuUXyr0+Gf GhbmlM5sT6/HZJIat9nvCyBrt/AI1IoAiCUtnSS3tRGMjfONZ0BI2/z7gcKKrr3k ItkWkDmsZS3Al8w4v8dVwDe833E09jNTlkHA2Ty0y5K/kEJ5pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCO41sScDmhK/eNn2dfoRaZG3D+sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjQ1MzhkY2MtYjA3NC0z MmY4LWI3MjYtZmE0ZGNkNDJmNTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8Y4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdiFvFVKmGiZYZNEsf5WBCmngoCHihn2Bx4AFUR0frC1rHZP9pLcaMa JNy4lIz9NQaCOKdXB5jL1UhyKnyUfdoTJV1mtARGMDHvRD5/kRLXXcwLdnmRoO8O Pi+3du1y/g50werhQln1j9iYKcN5UmIHJnbWG8FqQAdxWDoHkFTqEoE7Xga71GF9 wwsyn/eWcKcp/D+MFQdNB6tIp5Yud6KpfzYzbwYPilpqV9Aoi6hp2SJat/vDV+p8 kdjo6eJpm42cJADnesZK1rthG/yYeepr7w83w11vOWI6wvV6zBSvebBiPKZu2evL +DBI/fam3W9iCPczX94URPaniJJqU7w= -----END CERTIFICATE-----Generated at Fri Mar 14 10:23:10 2025 by rpki-client