$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3fc6e0e9-d332-31ae-879a-cd4db4c08398.roa File: 3fc6e0e9-d332-31ae-879a-cd4db4c08398.roa (raw, json) Hash identifier: ZApATuLCIZfiTN7OGJ1Y9x7PZw5b/CzjAVNaO16s//Q= Subject key identifier: 87:EF:AE:01:41:DE:6D:C4:74:48:60:DA:94:7F:14:A9:76:7D:45:AA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581C8C181C4873BB06E5E80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3fc6e0e9-d332-31ae-879a-cd4db4c08398.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.197.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:c8:c1:81:c4:87:3b:b0:6e:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=1567fd0b-6f3f-4d0b-995e-f5af8892a802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d4:63:dc:71:f5:cf:5c:70:be:be:64:59:55: 05:8c:6d:dd:9e:bd:f5:b9:8c:4a:a7:61:ad:e3:4d: d6:47:83:23:42:ca:48:b8:08:70:22:e6:45:a8:fe: 63:57:0c:43:11:3c:b3:60:a9:9a:16:51:b9:25:bf: 1a:fa:11:9d:91:dd:35:10:5f:85:b4:0d:96:a8:09: 6a:61:a2:34:93:6e:17:8f:a0:5e:66:3a:8a:5e:dd: 7e:b8:19:e6:5b:d2:90:ff:f2:f1:8e:e5:75:af:32: af:80:72:9e:56:52:81:30:c8:43:07:2e:68:04:16: 5f:86:72:d9:71:20:73:c6:57:87:39:eb:87:ea:73: aa:3a:97:f5:6e:ca:a9:18:a5:e4:ac:94:71:ec:48: 75:1d:01:23:35:61:40:f4:7e:e8:8d:95:81:ed:f8: 93:d9:37:52:31:69:36:5e:5f:7b:6a:9f:dc:c9:ec: 5c:0c:15:8d:3e:3e:9e:7f:fa:50:05:47:4c:91:9d: f9:07:a3:ee:92:cb:bd:98:13:fa:63:e4:a9:5e:44: a8:94:fd:f5:4e:0d:00:a0:44:18:42:25:a2:43:c9: e9:f1:35:f7:9e:5c:3b:83:9d:9e:b1:0b:04:01:4d: 9f:af:89:72:1e:bb:2f:17:00:97:ce:8a:03:68:bc: d1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EF:AE:01:41:DE:6D:C4:74:48:60:DA:94:7F:14:A9:76:7D:45:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3fc6e0e9-d332-31ae-879a-cd4db4c08398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:19:10:f2:69:0a:71:76:a5:b9:50:8c:96:d7:7f:e9:cf:50: ba:52:27:83:70:e5:c0:85:7c:79:38:97:8b:9b:17:4a:44:28: d0:ed:43:89:73:6f:fd:c7:e8:a8:c5:a2:0c:af:13:f7:d6:dc: bc:91:5b:67:29:74:56:8a:6a:4e:a2:56:71:67:65:ba:55:52: 7d:28:f6:93:5c:da:12:72:48:e9:ef:4e:30:54:c5:0d:2d:e0: 9b:83:51:1a:c8:76:3e:f9:10:27:69:d1:b8:70:4f:83:06:37: 58:78:71:f4:0a:2d:5d:99:02:14:34:33:8b:db:37:f2:6c:aa: 6e:14:7b:42:0d:03:d1:61:b5:b7:f7:98:c6:b2:c4:f9:98:3c: 11:19:67:88:a1:d2:13:97:3d:7d:5e:e7:35:81:a0:3d:ed:6e: ad:54:db:ae:30:7b:90:db:4c:8e:66:b8:7c:b5:9d:48:2c:0b: f1:98:e4:a2:1d:42:c7:e6:55:1f:fe:15:d9:1c:8c:f5:c7:a9: 25:1d:67:1b:93:f8:cc:87:f7:d7:fe:38:e9:e2:c5:06:65:17: a9:7c:e8:f8:41:27:57:b3:0b:86:ec:b1:e3:58:7e:c9:e2:62: e7:19:19:8c:74:2c:ce:2c:32:43:a9:fc:c9:b5:47:14:3e:d4: 87:c9:92:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcjBgcSHO7BuXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTU2N2ZkMGItNmYzZi00ZDBiLTk5NWUtZjVhZjg4OTJhODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNRj3HH1z1xwvr5kWVUFjG3dnr31uYxKp2Gt 403WR4MjQspIuAhwIuZFqP5jVwxDETyzYKmaFlG5Jb8a+hGdkd01EF+FtA2WqAlq YaI0k24Xj6BeZjqKXt1+uBnmW9KQ//LxjuV1rzKvgHKeVlKBMMhDBy5oBBZfhnLZ cSBzxleHOeuH6nOqOpf1bsqpGKXkrJRx7Eh1HQEjNWFA9H7ojZWB7fiT2TdSMWk2 Xl97ap/cyexcDBWNPj6ef/pQBUdMkZ35B6Puksu9mBP6Y+SpXkSolP31Tg0AoEQY QiWiQ8np8TX3nlw7g52esQsEAU2fr4lyHrsvFwCXzooDaLzRcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfvrgFB3m3EdEhg2pR/FKl2fUWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2ZjNmUwZTktZDMzMi0z MWFlLTg3OWEtY2Q0ZGI0YzA4Mzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8W1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4ZEPJpCnF2pblQjJbXf+nPULpSJ4Nw5cCFfHk4l4ubF0pEKNDtQ4lz b/3H6KjFogyvE/fW3LyRW2cpdFaKak6iVnFnZbpVUn0o9pNc2hJySOnvTjBUxQ0t 4JuDURrIdj75ECdp0bhwT4MGN1h4cfQKLV2ZAhQ0M4vbN/Jsqm4Ue0INA9Fhtbf3 mMayxPmYPBEZZ4ih0hOXPX1e5zWBoD3tbq1U264we5DbTI5muHy1nUgsC/GY5KId QsfmVR/+FdkcjPXHqSUdZxuT+MyH99f+OOnixQZlF6l86PhBJ1ezC4bsseNYfsni YucZGYx0LM4sMkOp/Mm1RxQ+1IfJkhg= -----END CERTIFICATE-----Generated at Fri Apr 11 23:10:59 2025 by rpki-client