$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33bc5938-81f2-3e9c-8f5f-7e497558b442.roa File: 33bc5938-81f2-3e9c-8f5f-7e497558b442.roa (raw, json) Hash identifier: vxV4oIdtX7zbctfFu4h8BfOs2hdF1a0iTcaR1+e21+o= Subject key identifier: AE:35:6C:F9:C0:D1:FE:26:56:FE:9E:AD:30:18:D0:5D:48:92:4A:6A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5813787AC2ACF178C1CA680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33bc5938-81f2-3e9c-8f5f-7e497558b442.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.197.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:37:87:ac:2a:cf:17:8c:1c:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d3d39746-294a-42eb-b823-b1a9ee0fd88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:bb:fb:ba:09:ec:86:52:c5:b0:ed:4f:80: dc:59:7f:35:be:89:a0:5b:5b:6d:a8:5c:0e:42:3d: c7:56:ca:80:eb:95:6a:34:da:51:1c:9a:fe:31:aa: be:0c:a7:de:9b:0a:e1:8e:ac:4e:ed:22:27:b4:b9: 95:dc:81:81:11:d7:88:ba:81:74:40:4a:b8:7f:3a: 71:2d:27:18:ac:cd:0a:d2:fd:72:f4:58:db:32:90: c4:7c:fd:f7:88:5e:43:e6:3c:15:f2:8b:d6:1c:30: 43:a3:7b:14:ef:d3:b9:2c:bb:82:2d:e5:d9:a4:96: 0d:9a:30:37:31:d8:25:d3:02:73:00:df:29:06:32: 03:c3:c6:6d:83:a7:b9:4c:67:26:a4:7e:22:2c:a8: da:fb:61:fa:9f:ae:d7:25:f8:74:de:da:cc:89:bc: a8:87:82:37:5f:0d:f2:f2:39:d1:df:18:2b:83:d6: 3b:55:88:17:7e:18:11:e2:b9:1c:4e:f4:b2:0d:61: c0:ef:64:87:26:e5:4f:62:4e:2e:e4:36:8b:23:21: 26:eb:8d:7f:51:0a:fd:cb:c2:75:16:f5:eb:7c:33: ee:26:15:33:ee:84:2c:ac:a3:b5:9a:f9:ba:c2:a1: f7:4d:fd:e8:61:df:69:d8:af:25:89:d7:71:11:57: cb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:35:6C:F9:C0:D1:FE:26:56:FE:9E:AD:30:18:D0:5D:48:92:4A:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33bc5938-81f2-3e9c-8f5f-7e497558b442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:86:f6:6f:c4:0a:3b:89:c4:e0:6e:51:8c:36:6f:79:35:12: 24:79:90:a3:f5:91:89:3b:69:38:e5:1c:8f:13:17:4f:ad:75: 48:0c:24:4a:40:47:24:6f:a4:1c:91:43:88:e1:64:b2:f4:f2: 18:1a:83:29:ee:66:24:a4:78:65:f6:d8:06:0e:31:5e:09:68: e9:0f:eb:d1:c5:72:c0:d9:1c:32:19:e8:f4:a0:52:8c:4b:e6: 68:dd:7b:5c:1b:e1:0b:b3:dd:ca:d1:17:eb:9a:b3:f0:ff:68: fc:82:96:a8:e4:d3:05:f5:f5:77:4b:76:13:b8:e9:cf:2c:5a: d4:c4:e6:87:05:86:b1:5c:68:70:e3:20:2f:3c:f3:98:ba:9b: 40:aa:46:52:70:7b:92:56:6a:37:11:77:6a:83:46:05:1b:a6: 9e:05:2a:c2:36:f2:95:23:98:45:26:86:9c:75:be:a9:d0:97: 4b:cd:6b:02:ff:e7:32:49:8f:e6:90:23:96:f6:e8:48:1b:31: fd:7c:e6:5c:93:98:9e:ba:9a:ea:79:d8:e6:d7:70:46:13:00: 3b:9d:12:36:55:6c:41:e0:d8:9f:df:a4:9d:ee:44:5a:07:73: c3:cc:d1:e7:e2:ba:fd:37:10:0c:24:56:b0:7f:d8:0b:8c:bc: 6b:a2:be:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgTeHrCrPF4wcpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDNkMzk3NDYtMjk0YS00MmViLWI4MjMtYjFhOWVlMGZkODhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl+7+7oJ7IZSxbDtT4DcWX81vomgW1ttqFwO Qj3HVsqA65VqNNpRHJr+Maq+DKfemwrhjqxO7SIntLmV3IGBEdeIuoF0QEq4fzpx LScYrM0K0v1y9FjbMpDEfP33iF5D5jwV8ovWHDBDo3sU79O5LLuCLeXZpJYNmjA3 Mdgl0wJzAN8pBjIDw8Ztg6e5TGcmpH4iLKja+2H6n67XJfh03trMibyoh4I3Xw3y 8jnR3xgrg9Y7VYgXfhgR4rkcTvSyDWHA72SHJuVPYk4u5DaLIyEm641/UQr9y8J1 FvXrfDPuJhUz7oQsrKO1mvm6wqH3Tf3oYd9p2K8liddxEVfLKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK41bPnA0f4mVv6erTAY0F1IkkpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzNiYzU5MzgtODFmMi0z ZTljLThmNWYtN2U0OTc1NThiNDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8UfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqG9m/ECjuJxOBuUYw2b3k1EiR5kKP1kYk7aTjlHI8TF0+tdUgMJEpA RyRvpByRQ4jhZLL08hgagynuZiSkeGX22AYOMV4JaOkP69HFcsDZHDIZ6PSgUoxL 5mjde1wb4Quz3crRF+uas/D/aPyClqjk0wX19XdLdhO46c8sWtTE5ocFhrFcaHDj IC8885i6m0CqRlJwe5JWajcRd2qDRgUbpp4FKsI28pUjmEUmhpx1vqnQl0vNawL/ 5zJJj+aQI5b26EgbMf185lyTmJ66mup52ObXcEYTADudEjZVbEHg2J/fpJ3uRFoH c8PM0efiuv03EAwkVrB/2AuMvGuiviE= -----END CERTIFICATE-----Generated at Fri Mar 14 10:10:48 2025 by rpki-client