$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42b0cd56-cb3a-3b42-9c86-7ac4f2e11da5.roa File: 42b0cd56-cb3a-3b42-9c86-7ac4f2e11da5.roa (raw, json) Hash identifier: zrmmkc714UVPyvuC5PtbypG4shSs6x3OM2/Opy8YFGI= Subject key identifier: 09:0F:AF:E4:2D:E5:3A:4C:77:45:D3:5A:36:62:9A:46:DA:3A:30:F8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581C4E5CA6E675F68120680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42b0cd56-cb3a-3b42-9c86-7ac4f2e11da5.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.197.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:c4:e5:ca:6e:67:5f:68:12:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=78ec7aff-f2cd-409f-a741-501e9b18196c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:b4:44:4d:13:79:8b:87:29:a5:34:a3:d4: 7e:79:76:cb:23:f6:2e:79:d4:bd:94:c3:24:ad:77: 14:45:55:c6:29:1d:42:78:d5:65:fb:3e:c4:5c:67: 6b:ec:4f:86:13:7f:8a:93:37:7e:9d:6c:66:57:5e: c8:77:dd:55:f3:21:30:d4:ae:7e:11:54:03:4c:51: 40:47:7b:1b:3d:83:ec:90:e2:ac:ff:f4:91:fe:76: 34:c4:9a:ed:fd:3d:95:29:4d:e5:5d:78:2f:02:c9: a9:61:67:7e:77:24:e0:22:97:f8:01:d9:d1:d4:75: e1:f8:a2:af:cc:ec:da:fe:e4:3c:35:be:88:eb:41: 42:1f:91:8c:27:ec:d4:3e:fa:64:69:2c:3c:df:bf: 72:0d:a9:46:78:15:b1:b1:da:03:1a:fe:4a:b2:f9: 16:e6:4f:aa:f6:6c:ff:d2:5a:1a:3f:af:25:79:46: 54:7b:59:06:10:86:59:86:4a:10:49:fa:fc:a0:86: f7:77:56:1b:64:6a:e5:ea:5c:8d:74:84:58:42:07: 76:93:68:c7:28:05:80:b3:05:ef:37:d9:fa:7c:07: 9d:a3:32:4f:d8:ca:0b:13:3e:18:16:c1:29:38:ba: 9d:7f:30:61:86:2d:16:56:75:72:4b:d2:66:d3:74: 40:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0F:AF:E4:2D:E5:3A:4C:77:45:D3:5A:36:62:9A:46:DA:3A:30:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42b0cd56-cb3a-3b42-9c86-7ac4f2e11da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:e4:6a:a3:07:38:47:8b:d6:cb:bf:4a:03:69:0b:a1:98:d8: 5f:b5:a5:7d:fb:de:c3:82:14:7f:88:08:80:3a:92:79:ce:a7: fa:d4:f7:2f:64:2d:72:39:04:d7:9c:1a:14:85:29:23:22:1c: 79:d0:3e:52:32:b2:a5:4a:c0:3e:16:36:98:73:bd:f5:08:1b: 24:13:ec:f2:4d:81:5c:6d:8d:1f:90:8a:05:f5:d6:ea:9c:83: fa:05:42:70:74:a1:95:ad:e7:e7:d3:f8:e3:26:38:6d:a6:db: 5e:74:a3:a2:6d:2b:92:2b:7d:6f:63:e9:a3:74:8f:06:d4:70: c8:ac:b8:92:3b:61:f3:2c:9b:8a:03:ba:95:62:5e:c5:d7:37: f5:16:9b:61:f0:8e:d2:fe:1b:7b:d3:3c:ce:57:44:5e:24:81: ae:29:16:c0:01:99:c7:42:c1:11:9e:a7:8f:2a:40:26:0b:b9: a4:2f:b9:d7:e9:ad:f9:5b:3b:16:bb:a0:3d:68:1d:b2:71:84: 90:ee:c2:a8:d7:7e:c9:a3:00:8f:90:3a:43:72:7d:58:7f:1a: c5:b1:e4:b4:74:af:19:6a:77:c8:98:6c:26:3a:cd:af:4c:b2: f9:0d:9b:25:32:6d:47:5b:3b:d2:11:9d:cf:06:7c:6a:7d:c8: 53:b8:4d:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcTlym5nX2gSBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzhlYzdhZmYtZjJjZC00MDlmLWE3NDEtNTAxZTliMTgxOTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGi0RE0TeYuHKaU0o9R+eXbLI/YuedS9lMMk rXcURVXGKR1CeNVl+z7EXGdr7E+GE3+Kkzd+nWxmV17Id91V8yEw1K5+EVQDTFFA R3sbPYPskOKs//SR/nY0xJrt/T2VKU3lXXgvAsmpYWd+dyTgIpf4AdnR1HXh+KKv zOza/uQ8Nb6I60FCH5GMJ+zUPvpkaSw8379yDalGeBWxsdoDGv5KsvkW5k+q9mz/ 0loaP68leUZUe1kGEIZZhkoQSfr8oIb3d1YbZGrl6lyNdIRYQgd2k2jHKAWAswXv N9n6fAedozJP2MoLEz4YFsEpOLqdfzBhhi0WVnVyS9Jm03RAdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkPr+Qt5TpMd0XTWjZimkbaOjD4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDJiMGNkNTYtY2IzYS0z YjQyLTljODYtN2FjNGYyZTExZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8U4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANXkaqMHOEeL1su/SgNpC6GY2F+1pX373sOCFH+ICIA6knnOp/rU9y9k LXI5BNecGhSFKSMiHHnQPlIysqVKwD4WNphzvfUIGyQT7PJNgVxtjR+QigX11uqc g/oFQnB0oZWt5+fT+OMmOG2m2150o6JtK5IrfW9j6aN0jwbUcMisuJI7YfMsm4oD upViXsXXN/UWm2HwjtL+G3vTPM5XRF4kga4pFsABmcdCwRGep48qQCYLuaQvudfp rflbOxa7oD1oHbJxhJDuwqjXfsmjAI+QOkNyfVh/GsWx5LR0rxlqd8iYbCY6za9M svkNmyUybUdbO9IRnc8GfGp9yFO4Te8= -----END CERTIFICATE-----Generated at Wed Apr 16 14:06:56 2025 by rpki-client