$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa File: 4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa (raw, json) Hash identifier: ZZKShgaVzOQ4VsHmgDZ/Hu1Zavpoc71kgJsAL5S9oIY= Subject key identifier: 3A:AB:52:DF:34:D0:2C:0A:37:13:B1:C9:B9:A7:BD:DA:BE:FA:C7:27 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581CAC6A48908DE8D9A0340 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.197.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:ca:c6:a4:89:08:de:8d:9a:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=8db54ca3-3302-457f-8475-62a5be580c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d1:7b:0a:90:e4:52:4d:4c:d1:a7:a7:d8:9a: 7e:09:a8:49:7c:c6:88:39:3e:ff:51:6c:d7:a5:58: 73:41:86:32:16:33:14:49:0e:9c:46:48:1f:b4:f7: 79:d9:d0:90:62:53:ce:de:44:53:8b:ac:20:d7:ef: 96:6c:d9:c9:66:63:ac:96:f8:c9:de:4e:7a:f7:e2: 99:51:2a:45:75:94:8e:d2:7a:5d:5c:c6:a7:1c:c7: 36:32:9a:ef:4f:2f:9f:7b:b8:f3:c4:24:4e:09:70: 4e:d0:8f:30:f4:4f:35:62:e9:bb:de:d1:e2:24:a1: 4c:a7:55:37:ba:01:cf:d7:b2:af:f3:be:60:f6:92: 00:a1:f2:ac:42:f9:b3:1e:d1:83:cd:2d:f3:48:a7: 0c:65:dd:29:b5:84:e3:e4:11:b7:1f:d5:ac:c4:ea: fc:0a:77:2c:9f:31:dc:c1:96:4d:74:40:4d:47:5b: c0:e2:43:17:49:d8:ce:7e:1e:f0:0b:44:e6:c0:b5: a4:56:0b:9d:33:ef:29:56:cd:b8:d2:fa:8c:2e:ee: 84:b5:2f:82:61:77:77:70:ec:e5:97:ee:b5:7f:fb: 9b:d2:f1:96:e3:12:44:a2:17:87:83:52:4a:35:03: 87:f3:2c:63:98:d0:2a:23:56:f5:ea:3a:4a:ce:ed: 24:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AB:52:DF:34:D0:2C:0A:37:13:B1:C9:B9:A7:BD:DA:BE:FA:C7:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ed:6b:99:41:6f:ed:68:fa:5c:c4:7a:e5:17:ab:b4:e6:d5: 6c:91:85:3c:52:73:3e:1f:69:b5:6f:5c:3c:cd:96:67:09:35: 2a:23:b8:31:9c:cb:e6:97:04:1f:d9:c1:bf:40:93:a4:3d:5a: db:5d:9f:03:af:b8:f3:cf:c8:15:43:4f:b9:11:74:76:12:ad: d4:e0:25:ff:94:df:f8:85:c9:ef:8b:60:20:f2:07:91:b0:1c: d5:e2:c4:d2:81:a4:a8:43:04:27:2b:77:96:35:56:04:49:f2: f3:2a:37:03:ad:91:19:46:0f:b2:6f:37:43:0b:f7:94:46:ef: db:d5:9e:62:89:11:0f:5d:bd:75:a4:1c:15:f5:8e:63:6c:2e: 95:f2:26:fd:f1:53:61:35:93:76:7a:31:5f:d5:9c:ff:75:64: 0d:2d:3d:4f:74:d4:36:88:28:27:b4:be:4a:4d:b7:9b:64:c6: 9b:a6:ae:21:de:63:aa:2b:0b:ba:49:dd:b5:99:d8:86:57:4f: cf:d9:8f:5e:fb:59:57:df:69:ee:e6:15:fa:9d:2c:53:ef:07: ef:fa:86:aa:fa:b3:00:db:a8:f6:56:62:06:e1:c8:f3:56:83: a4:de:50:16:8e:3a:e4:6c:fd:83:db:1c:31:cb:ff:9c:c0:3b: e3:a2:12:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcrGpIkI3o2aA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OGRiNTRjYTMtMzMwMi00NTdmLTg0NzUtNjJhNWJlNTgwYzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9F7CpDkUk1M0aen2Jp+CahJfMaIOT7/UWzX pVhzQYYyFjMUSQ6cRkgftPd52dCQYlPO3kRTi6wg1++WbNnJZmOslvjJ3k569+KZ USpFdZSO0npdXManHMc2MprvTy+fe7jzxCROCXBO0I8w9E81Yum73tHiJKFMp1U3 ugHP17Kv875g9pIAofKsQvmzHtGDzS3zSKcMZd0ptYTj5BG3H9WsxOr8CncsnzHc wZZNdEBNR1vA4kMXSdjOfh7wC0TmwLWkVgudM+8pVs240vqMLu6EtS+CYXd3cOzl l+61f/ub0vGW4xJEoheHg1JKNQOH8yxjmNAqI1b16jpKzu0k1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqrUt800CwKNxOxybmnvdq++scnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDU5OWQ5ZDMtZjBhYS0z NzM0LWFmZjEtMjFhNWYxZmNiYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8X2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHta5lBb+1o+lzEeuUXq7Tm1WyRhTxScz4fabVvXDzNlmcJNSojuDGc y+aXBB/Zwb9Ak6Q9WttdnwOvuPPPyBVDT7kRdHYSrdTgJf+U3/iFye+LYCDyB5Gw HNXixNKBpKhDBCcrd5Y1VgRJ8vMqNwOtkRlGD7JvN0ML95RG79vVnmKJEQ9dvXWk HBX1jmNsLpXyJv3xU2E1k3Z6MV/VnP91ZA0tPU901DaIKCe0vkpNt5tkxpumriHe Y6orC7pJ3bWZ2IZXT8/Zj177WVffae7mFfqdLFPvB+/6hqr6swDbqPZWYgbhyPNW g6TeUBaOOuRs/YPbHDHL/5zAO+OiEkc= -----END CERTIFICATE-----Generated at Fri Apr 11 23:18:44 2025 by rpki-client