$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3b9a71f1-2b20-30fe-a914-48be13164a30.roa File: 3b9a71f1-2b20-30fe-a914-48be13164a30.roa (raw, json) Hash identifier: DksrhihxpISgdJi5cDJVe2AEokYLDhBrEjgiFh0yGks= Subject key identifier: 17:34:8E:10:FB:B5:CE:C7:DD:63:B4:0B:3E:C4:0C:31:FA:64:02:17 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581326A79F9B15A6DF2BB40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3b9a71f1-2b20-30fe-a914-48be13164a30.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:32:6a:79:f9:b1:5a:6d:f2:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=fc32eeb0-49a0-40a6-963e-7e38e1c39e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:10:21:16:b8:6b:1a:a9:8b:fe:50:17:06:e1: ce:05:13:cf:be:5d:02:43:af:af:fd:b8:c3:54:ab: 56:28:63:1f:4f:c4:8a:b9:e8:a4:97:eb:2b:ee:83: 99:28:ff:5c:d8:25:47:f7:c2:00:8c:53:ce:5f:bc: 70:80:88:c8:7c:ea:2c:af:a5:89:9b:b1:38:6a:03: 95:24:e3:ec:c2:15:56:3f:68:e3:1b:26:59:ee:7d: 83:8e:53:6e:84:f0:90:b3:f9:5c:50:7e:f8:01:53: ae:b4:02:e1:43:7e:54:e4:17:af:53:5b:c3:48:af: 14:e8:3d:21:fc:ed:ac:57:b4:3e:ac:88:0b:55:fe: c3:fb:11:d2:e1:cc:8b:3e:80:bb:83:1c:71:26:21: d6:32:38:86:d8:de:68:e8:ac:fe:ad:23:a4:9c:df: 3d:f8:75:a5:4c:cf:9f:f6:40:5a:a0:6e:49:3b:f8: 69:04:fc:4d:2c:e9:ad:8f:7d:2c:73:be:cc:28:bb: 10:ef:0b:26:bb:f0:ee:1f:e8:15:81:44:c2:13:e0: bd:89:a6:8c:93:f6:a6:c2:92:86:07:c9:99:c9:83: d5:16:b0:dd:ce:75:57:15:75:70:c6:e1:b0:4e:84: 20:ba:da:cf:30:93:0b:a7:37:14:51:2e:e3:c9:91: a6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:34:8E:10:FB:B5:CE:C7:DD:63:B4:0B:3E:C4:0C:31:FA:64:02:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3b9a71f1-2b20-30fe-a914-48be13164a30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:67:6d:de:9a:d7:d7:f5:23:47:04:4c:f9:4b:2f:32:b2:0f: ac:39:53:15:51:2f:b7:62:b6:e8:ce:dd:bc:24:09:a4:03:e8: f0:a9:08:7b:bb:68:4e:0c:e4:cf:67:5b:b7:0f:bd:d9:ef:3d: 34:db:9c:6e:46:16:e1:b2:62:77:45:a5:cc:db:f5:6b:2c:d3: 9a:05:b9:74:a7:6a:3c:5a:23:62:f0:b5:1a:52:94:5f:80:9d: a0:fc:25:b1:37:fd:13:27:39:c9:96:68:31:99:d5:20:dd:50: b1:a7:4a:9c:af:88:d0:88:07:dc:af:4b:41:9e:53:42:c4:dc: 2d:1e:11:e4:83:35:af:7d:90:7f:8d:22:96:94:f5:d4:8f:1a: ff:ba:de:de:b8:9f:f3:22:40:20:11:d4:ba:64:f1:96:ba:7f: a2:85:f7:13:ec:4a:08:59:38:33:1e:06:02:75:b1:58:95:7c: b3:1e:ce:7e:9d:8e:ab:f4:90:da:46:f2:db:13:30:03:e8:99: 7d:74:2e:00:de:82:b9:3d:13:18:c5:2e:af:96:bf:bd:87:59: 28:46:fe:8d:76:fd:89:b9:20:67:cd:09:26:46:4c:0f:9c:51: 9e:94:b3:db:76:a1:d4:bd:e5:d8:15:7a:87:2b:c2:2f:be:53: 84:d9:f2:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgTJqefmxWm3yu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmMzMmVlYjAtNDlhMC00MGE2LTk2M2UtN2UzOGUxYzM5ZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxAhFrhrGqmL/lAXBuHOBRPPvl0CQ6+v/bjD VKtWKGMfT8SKueikl+sr7oOZKP9c2CVH98IAjFPOX7xwgIjIfOosr6WJm7E4agOV JOPswhVWP2jjGyZZ7n2DjlNuhPCQs/lcUH74AVOutALhQ35U5BevU1vDSK8U6D0h /O2sV7Q+rIgLVf7D+xHS4cyLPoC7gxxxJiHWMjiG2N5o6Kz+rSOknN89+HWlTM+f 9kBaoG5JO/hpBPxNLOmtj30sc77MKLsQ7wsmu/DuH+gVgUTCE+C9iaaMk/amwpKG B8mZyYPVFrDdznVXFXVwxuGwToQgutrPMJMLpzcUUS7jyZGmpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBc0jhD7tc7H3WO0Cz7EDDH6ZAIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2I5YTcxZjEtMmIyMC0z MGZlLWE5MTQtNDhiZTEzMTY0YTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlnbd6a19f1I0cETPlLLzKyD6w5UxVRL7ditujO3bwkCaQD6PCpCHu7 aE4M5M9nW7cPvdnvPTTbnG5GFuGyYndFpczb9Wss05oFuXSnajxaI2LwtRpSlF+A naD8JbE3/RMnOcmWaDGZ1SDdULGnSpyviNCIB9yvS0GeU0LE3C0eEeSDNa99kH+N IpaU9dSPGv+63t64n/MiQCAR1Lpk8Za6f6KF9xPsSghZODMeBgJ1sViVfLMezn6d jqv0kNpG8tsTMAPomX10LgDegrk9ExjFLq+Wv72HWShG/o12/Ym5IGfNCSZGTA+c UZ6Us9t2odS95dgVeocrwi++U4TZ8vc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:43 2025 by rpki-client