$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/411e6af6-ca89-31f6-950f-b72242e777a0.roa File: 411e6af6-ca89-31f6-950f-b72242e777a0.roa (raw, json) Hash identifier: DLNYY+aEYHvx2Pa5Kpkxg56FdMcG55F3s8huvXRr37o= Subject key identifier: B4:DD:21:04:AF:CF:CD:A4:1F:DF:D3:EF:FA:80:D5:58:9E:B9:8C:A9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581C08C53C2DBC181F71780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/411e6af6-ca89-31f6-950f-b72242e777a0.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:c0:8c:53:c2:db:c1:81:f7:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=872e4c61-2565-41b9-8fd9-0ebf4597e936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fd:93:3f:ce:fd:9c:19:cb:43:dc:4e:94:b3: 67:42:75:08:f4:cd:ce:91:56:bb:10:97:59:4c:33: 42:d3:4b:70:02:54:4c:d4:c4:0e:e8:d6:3f:c3:9e: dd:99:7a:30:49:b5:71:b3:4f:41:e6:73:de:3a:38: c2:ab:ee:ea:77:69:86:01:e1:f9:c1:89:68:61:69: 65:6f:a5:c1:53:de:78:4f:7f:c3:dd:89:33:b5:ec: 72:70:55:88:28:80:04:a2:52:9a:14:7b:80:70:b8: f4:20:03:93:25:bd:68:6d:3c:09:28:23:83:38:fc: 57:48:d6:69:82:34:8e:bc:31:7d:9a:6d:c5:0f:99: 72:01:4b:35:81:bb:3e:d6:6e:71:3c:51:73:fe:5a: 3e:5c:ba:06:c5:ca:06:d3:bc:7e:2b:b5:c4:d1:ae: 77:68:8e:6a:91:5e:46:e8:33:32:14:e7:8b:65:c3: 7f:b9:f9:67:1d:7d:c7:76:04:35:02:a0:a5:d5:e4: 70:cd:69:84:c5:66:c4:5d:bb:47:76:1f:7e:d7:97: 31:29:9d:75:c7:79:4e:4f:e1:b6:ba:1e:c0:9c:7e: c4:2f:e0:60:8f:3f:6f:89:fc:a0:30:b6:a8:14:11: 34:31:2c:32:b7:30:4d:65:8b:d1:b8:c4:9e:60:29: 4e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DD:21:04:AF:CF:CD:A4:1F:DF:D3:EF:FA:80:D5:58:9E:B9:8C:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/411e6af6-ca89-31f6-950f-b72242e777a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a9:3d:0c:84:1f:ae:11:4b:aa:34:14:10:83:c7:1c:42:36: 6c:8c:98:3f:14:12:9a:02:5f:8b:84:6b:5d:46:90:a2:df:0f: 13:9a:7b:00:e2:db:c9:d2:9c:2d:db:a2:45:0a:c4:4d:7e:6c: 65:4a:93:43:4c:f3:5b:36:aa:5c:03:4a:b3:a3:34:cb:1a:37: be:05:1c:6a:f4:25:d8:38:83:fd:67:7b:7c:9e:29:42:1e:e3: 8c:39:d8:ad:ee:b9:50:c4:18:0a:31:9c:b5:4c:d1:e1:93:35: dd:cb:92:d6:8f:47:80:ca:6a:ac:f1:57:9e:c7:66:55:a2:02: 5a:e9:9b:cc:8a:41:14:71:64:e8:91:73:50:70:36:9e:9e:73: 64:a9:f6:18:d1:09:23:1a:58:a8:10:61:31:98:48:68:87:7c: 86:4c:b3:90:df:f8:d5:4a:71:8e:c6:d5:34:f5:49:66:83:35: 58:e5:46:3a:32:a8:ea:56:73:81:7c:5c:2c:c6:9a:20:a3:7a: 7e:a7:27:49:aa:e1:a2:b3:d7:72:f0:55:21:b9:a0:71:93:67: 11:f9:f1:29:64:da:d2:e0:02:df:6b:ed:e8:b8:a8:0a:5f:90: 5f:4c:27:1c:bb:db:59:5f:b8:94:80:f3:12:04:42:49:c4:f3: e3:fc:aa:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcCMU8LbwYH3F4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODcyZTRjNjEtMjU2NS00MWI5LThmZDktMGViZjQ1OTdlOTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf2TP879nBnLQ9xOlLNnQnUI9M3OkVa7EJdZ TDNC00twAlRM1MQO6NY/w57dmXowSbVxs09B5nPeOjjCq+7qd2mGAeH5wYloYWll b6XBU954T3/D3YkztexycFWIKIAEolKaFHuAcLj0IAOTJb1obTwJKCODOPxXSNZp gjSOvDF9mm3FD5lyAUs1gbs+1m5xPFFz/lo+XLoGxcoG07x+K7XE0a53aI5qkV5G 6DMyFOeLZcN/uflnHX3HdgQ1AqCl1eRwzWmExWbEXbtHdh9+15cxKZ11x3lOT+G2 uh7AnH7EL+Bgjz9vifygMLaoFBE0MSwytzBNZYvRuMSeYClObQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTdIQSvz82kH9/T7/qA1VieuYypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDExZTZhZjYtY2E4OS0z MWY2LTk1MGYtYjcyMjQyZTc3N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8R9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSpPQyEH64RS6o0FBCDxxxCNmyMmD8UEpoCX4uEa11GkKLfDxOaewDi 28nSnC3bokUKxE1+bGVKk0NM81s2qlwDSrOjNMsaN74FHGr0Jdg4g/1ne3yeKUIe 44w52K3uuVDEGAoxnLVM0eGTNd3LktaPR4DKaqzxV57HZlWiAlrpm8yKQRRxZOiR c1BwNp6ec2Sp9hjRCSMaWKgQYTGYSGiHfIZMs5Df+NVKcY7G1TT1SWaDNVjlRjoy qOpWc4F8XCzGmiCjen6nJ0mq4aKz13LwVSG5oHGTZxH58Slk2tLgAt9r7ei4qApf kF9MJxy721lfuJSA8xIEQknE8+P8qmQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:18 2025 by rpki-client