$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2fb064c1-79af-33bb-80d1-99a010c5a87c.roa File: 2fb064c1-79af-33bb-80d1-99a010c5a87c.roa (raw, json) Hash identifier: NY1rJOCxF2dZzOio+Zeo2m4RI3ZyE1K6js9NdtNjuBc= Subject key identifier: 9A:05:8D:AC:55:E2:E6:19:C0:44:18:16:2A:EB:FC:90:4A:BD:0B:B3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581335645EC839F9342D890 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2fb064c1-79af-33bb-80d1-99a010c5a87c.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:33:56:45:ec:83:9f:93:42:d8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d895be91-e30c-4ea0-acf6-c72c1fc054c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7c:2a:f7:4b:01:f8:b0:9e:be:f2:d9:f0:8e: b3:f3:84:d3:ae:90:64:85:71:37:ed:78:a4:75:dc: d4:dc:96:e1:82:41:62:08:08:0c:d4:cd:b8:43:6e: fd:dd:7d:9d:bf:19:a9:5c:10:d6:1d:7e:39:94:dc: 1a:1a:37:ea:3e:50:51:24:a3:e8:b1:b2:9b:5a:af: 87:89:1a:cb:e0:9d:48:a2:06:f0:b5:ad:a2:b3:61: 72:04:a2:b8:41:7a:17:95:aa:c1:9f:2e:ce:0f:55: 61:83:6f:42:24:44:38:fb:db:81:4a:d2:0b:0b:2d: 68:b9:0e:97:4e:34:1a:18:ce:5d:98:b2:6b:54:80: 61:11:a0:54:5c:07:c0:49:08:38:92:f6:7e:af:f0: bf:fe:1d:c6:84:83:68:3c:3c:11:f7:94:9a:be:1b: 58:3f:91:bf:96:0c:a7:2c:39:bf:88:6b:18:98:c1: 13:c5:59:83:23:db:59:23:d1:64:f6:e9:e5:64:f2: 8f:28:37:55:13:29:65:86:fe:8e:45:3c:ec:a2:27: 92:b6:f8:46:e6:8a:49:ca:46:f4:69:d9:e9:03:00: 80:98:a9:2a:18:f3:3e:af:05:d7:cc:8e:bc:e4:24: bc:0c:01:25:b2:42:67:85:48:04:33:82:42:13:4f: 8e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:05:8D:AC:55:E2:E6:19:C0:44:18:16:2A:EB:FC:90:4A:BD:0B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2fb064c1-79af-33bb-80d1-99a010c5a87c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:57:0e:fe:1e:91:ad:00:60:74:4e:7f:8b:ed:42:c3:29:bb: ab:c7:41:50:10:10:44:71:f6:9c:02:53:72:c1:8f:ba:8b:d2: c7:7a:f2:82:81:71:58:ad:2f:d0:18:58:8e:19:68:87:74:46: 5e:57:41:28:da:66:9a:22:2f:c5:70:90:f7:bb:64:b1:23:fb: 02:38:07:b6:d8:af:1b:56:de:2c:52:e9:7e:92:96:c2:75:69: 9d:51:37:fc:56:a0:5e:31:3f:dd:cb:e5:71:02:1c:2c:dd:e3: 77:3d:c9:2d:27:20:90:6e:9b:48:3b:81:49:39:6b:72:2b:ab: 26:de:36:f1:22:96:25:90:af:1a:8c:16:c8:da:19:09:6c:c9: 0f:6f:ad:59:59:c0:c5:a7:95:2e:e5:e4:17:d4:00:50:d2:c6: a1:7a:95:29:64:a8:e7:b8:83:7f:1c:b7:9a:5f:b8:1b:01:87: b9:7c:23:89:e8:5b:b1:3f:8a:0e:0d:fe:00:95:a1:bd:6f:ce: a8:cd:8e:0b:9a:84:03:ed:17:1d:50:a3:5e:8d:71:b2:c6:91: 0e:3d:53:6a:9c:f6:cd:e2:d1:83:de:78:fb:47:bf:a2:7f:35: 3b:8a:8e:15:16:68:d0:74:3d:c7:1c:35:1a:4a:78:b8:15:77: 16:01:b2:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgTNWReyDn5NC2JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDg5NWJlOTEtZTMwYy00ZWEwLWFjZjYtYzcyYzFmYzA1NGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXwq90sB+LCevvLZ8I6z84TTrpBkhXE37Xik ddzU3JbhgkFiCAgM1M24Q2793X2dvxmpXBDWHX45lNwaGjfqPlBRJKPosbKbWq+H iRrL4J1Iogbwta2is2FyBKK4QXoXlarBny7OD1Vhg29CJEQ4+9uBStILCy1ouQ6X TjQaGM5dmLJrVIBhEaBUXAfASQg4kvZ+r/C//h3GhINoPDwR95SavhtYP5G/lgyn LDm/iGsYmMETxVmDI9tZI9Fk9unlZPKPKDdVEyllhv6ORTzsoieStvhG5opJykb0 adnpAwCAmKkqGPM+rwXXzI685CS8DAElskJnhUgEM4JCE0+ONQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoFjaxV4uYZwEQYFirr/JBKvQuzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmZiMDY0YzEtNzlhZi0z M2JiLTgwZDEtOTlhMDEwYzVhODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNXDv4eka0AYHROf4vtQsMpu6vHQVAQEERx9pwCU3LBj7qL0sd68oKB cVitL9AYWI4ZaId0Rl5XQSjaZpoiL8VwkPe7ZLEj+wI4B7bYrxtW3ixS6X6SlsJ1 aZ1RN/xWoF4xP93L5XECHCzd43c9yS0nIJBum0g7gUk5a3IrqybeNvEiliWQrxqM FsjaGQlsyQ9vrVlZwMWnlS7l5BfUAFDSxqF6lSlkqOe4g38ct5pfuBsBh7l8I4no W7E/ig4N/gCVob1vzqjNjguahAPtFx1Qo16NcbLGkQ49U2qc9s3i0YPeePtHv6J/ NTuKjhUWaNB0PcccNRpKeLgVdxYBsmA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:52 2025 by rpki-client