$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3482a92b-7562-3daf-bb42-2fe087eeab9b.roa File: 3482a92b-7562-3daf-bb42-2fe087eeab9b.roa (raw, json) Hash identifier: KUAtlEtI/wrC9HqgR5YPj67mDBfPhNDheANdrShEMho= Subject key identifier: 1C:AA:8F:54:3A:D6:A4:AE:93:E3:64:F7:AB:87:06:FA:76:FE:2D:67 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581386BE7EEEB864E10ED80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3482a92b-7562-3daf-bb42-2fe087eeab9b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.197.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:38:6b:e7:ee:eb:86:4e:10:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=8d7b1f0f-a4ec-4a41-bf1e-be1bff8b9ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0f:3d:9b:f6:b3:b5:1b:b5:a0:9c:44:0e:c5: 0b:6f:a2:64:90:da:5e:55:60:36:98:83:f4:e8:cb: 17:aa:d4:10:b7:38:aa:2c:20:06:b1:b0:09:8d:39: f9:9e:51:36:12:a0:18:bd:89:43:ad:c1:64:53:30: d7:68:35:2a:d3:e9:f5:ba:cd:04:0c:f2:00:00:9b: 5e:f1:12:1e:0e:47:d1:58:f5:83:12:e6:7a:08:d5: 65:85:34:00:b0:53:bb:00:8e:60:b2:11:42:3b:29: 33:f2:55:ef:71:0b:cf:1a:12:27:6e:b0:58:b5:bf: 43:72:76:8e:e3:a8:57:dd:5d:4b:f0:7e:65:04:90: 6f:0b:78:cc:65:b9:c9:ef:fb:1e:93:19:da:2b:92: 1c:52:38:e9:34:8c:99:09:41:3c:2e:e1:6d:01:7f: 58:4b:91:8e:90:4f:62:27:18:c2:8b:25:1b:38:9c: 3f:cc:02:1a:ce:a0:96:77:4c:34:2e:58:3b:fc:05: ea:87:e2:28:df:ff:37:3d:6a:66:23:7e:02:2e:53: b1:f3:bd:cc:d0:4a:5b:49:fb:f2:df:ad:9f:b1:9e: d3:6a:37:c9:17:cb:28:b7:eb:a5:c9:c4:a6:ae:49: ad:37:9f:0c:52:ec:05:d1:a6:d6:93:58:cf:da:ae: 74:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AA:8F:54:3A:D6:A4:AE:93:E3:64:F7:AB:87:06:FA:76:FE:2D:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3482a92b-7562-3daf-bb42-2fe087eeab9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:3a:8d:9d:01:59:c9:70:04:e4:17:b9:d3:c0:2f:9e:56:47: dc:01:ba:73:8c:d9:60:16:b7:63:59:c8:10:bb:21:6f:a4:19: ff:6d:08:3d:6f:1e:03:53:13:86:89:21:1a:a3:6f:77:ac:ce: 29:7f:3f:07:b5:3b:c8:5a:c8:63:09:f0:9b:60:26:e7:1c:e6: dc:06:89:47:ed:84:a1:0e:80:58:72:c0:8f:a1:83:b8:f4:86: 00:a5:b8:31:64:6e:c6:8a:01:85:be:29:5e:d2:84:a9:ab:4b: 99:5d:19:9d:c3:73:0b:ab:a1:59:5a:47:d9:d1:84:07:0e:b9: c4:2e:c0:4a:1e:4e:e7:93:17:1e:55:d1:a1:ca:c0:72:5d:10: 5f:62:38:b1:0a:b3:35:2d:4c:ff:41:8a:fe:7f:00:99:9b:51: b0:0b:7f:04:df:f2:47:79:a9:b6:79:11:24:d8:f8:33:49:31: 0b:1d:ad:1a:9d:66:e6:c3:41:25:f0:5f:a6:3a:f9:55:5a:cd: e1:60:5f:02:ce:2b:48:64:18:ab:82:c3:66:44:f6:79:82:8e: 4a:ca:9c:76:d6:64:ff:cc:aa:cb:fa:d7:c8:fb:d9:3f:69:38: 03:f3:fb:90:55:8c:d5:a7:7e:8a:97:11:76:a5:7c:fa:c2:f2: 7f:bd:f3:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgThr5+7rhk4Q7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OGQ3YjFmMGYtYTRlYy00YTQxLWJmMWUtYmUxYmZmOGI5Y2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw89m/aztRu1oJxEDsULb6JkkNpeVWA2mIP0 6MsXqtQQtziqLCAGsbAJjTn5nlE2EqAYvYlDrcFkUzDXaDUq0+n1us0EDPIAAJte 8RIeDkfRWPWDEuZ6CNVlhTQAsFO7AI5gshFCOykz8lXvcQvPGhInbrBYtb9DcnaO 46hX3V1L8H5lBJBvC3jMZbnJ7/sekxnaK5IcUjjpNIyZCUE8LuFtAX9YS5GOkE9i JxjCiyUbOJw/zAIazqCWd0w0Llg7/AXqh+Io3/83PWpmI34CLlOx873M0EpbSfvy 362fsZ7TajfJF8sot+ulycSmrkmtN58MUuwF0abWk1jP2q50awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByqj1Q61qSuk+Nk96uHBvp2/i1nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzQ4MmE5MmItNzU2Mi0z ZGFmLWJiNDItMmZlMDg3ZWVhYjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8UxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ6jZ0BWclwBOQXudPAL55WR9wBunOM2WAWt2NZyBC7IW+kGf9tCD1v HgNTE4aJIRqjb3eszil/Pwe1O8hayGMJ8JtgJucc5twGiUfthKEOgFhywI+hg7j0 hgCluDFkbsaKAYW+KV7ShKmrS5ldGZ3DcwuroVlaR9nRhAcOucQuwEoeTueTFx5V 0aHKwHJdEF9iOLEKszUtTP9Biv5/AJmbUbALfwTf8kd5qbZ5ESTY+DNJMQsdrRqd ZubDQSXwX6Y6+VVazeFgXwLOK0hkGKuCw2ZE9nmCjkrKnHbWZP/Mqsv618j72T9p OAPz+5BVjNWnfoqXEXalfPrC8n+9884= -----END CERTIFICATE-----Generated at Fri Apr 11 23:19:01 2025 by rpki-client