$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c4a10cc-81aa-335f-b8de-5036c99674f2.roa File: 4c4a10cc-81aa-335f-b8de-5036c99674f2.roa (raw, json) Hash identifier: itwphRndjcb6gDR0PSGb9KDCpFEkjGhXgr8LCVxdjdI= Subject key identifier: E9:0F:D0:92:4A:00:10:1D:4A:3C:E4:2A:B1:5C:EF:66:58:31:9E:18 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5813D83A27C1557847C0800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c4a10cc-81aa-335f-b8de-5036c99674f2.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.198.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:3d:83:a2:7c:15:57:84:7c:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=010e3563-3910-4d10-ae3d-b2b67cac0791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b1:e3:3d:15:cb:a2:b6:6c:3f:60:59:dd:97: 42:80:1c:1a:dc:c6:10:83:b9:bd:0b:b9:d6:d6:f3: 8f:d2:3c:e2:32:44:aa:e1:48:a0:50:0e:53:90:f4: a3:ff:5a:0d:19:5b:0b:35:ee:92:26:92:5a:21:56: fd:69:a2:8b:f4:94:4f:32:2f:92:64:c3:94:28:fb: 05:43:04:49:00:62:93:da:77:9c:3f:4d:f5:44:66: bf:99:f5:ac:35:e5:e5:f8:4b:2e:81:7d:e2:4f:30: 6e:0e:10:91:4a:7b:bf:3e:68:2a:9e:95:f7:f0:c1: de:6c:c0:0c:4d:2f:8d:30:05:cd:27:59:eb:fd:24: 59:9e:9f:b4:00:41:b0:12:46:af:4a:42:d9:20:1d: 0c:bd:aa:4f:93:d2:26:70:1d:b3:f2:f6:29:ff:9a: ca:29:bb:f8:00:e3:24:51:3a:44:4a:f5:52:0f:a8: 24:da:5a:05:63:43:0d:d3:76:ef:fe:da:da:ce:4a: 8f:62:b1:24:75:ae:9c:89:f9:75:63:15:ac:c0:da: 4a:b7:ac:6a:63:09:a2:2d:1c:29:b5:9a:03:77:a0: c6:34:25:d6:5e:a6:09:2c:dd:d5:6c:f4:64:c3:19: ad:1f:8f:75:53:65:a4:33:98:cf:04:95:e7:0d:00: 64:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0F:D0:92:4A:00:10:1D:4A:3C:E4:2A:B1:5C:EF:66:58:31:9E:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c4a10cc-81aa-335f-b8de-5036c99674f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:77:4a:3d:a8:b1:45:20:74:7f:47:96:b3:2e:6a:32:0f:d0: a2:92:71:de:fb:28:6a:19:c6:14:5d:39:a7:1c:03:3f:b8:0b: 30:e3:ed:91:d7:4a:14:21:c6:6a:68:8f:14:4e:de:91:23:32: 01:a9:19:ae:51:2b:ad:33:7d:53:f3:e9:a1:78:b6:96:1f:2e: ad:ea:53:40:27:f5:30:a0:ad:58:4d:9e:75:47:88:a5:5f:de: 62:c0:05:ab:1b:19:bc:4e:91:ee:e5:9b:d6:cd:92:85:33:d1: 97:ad:f6:05:3f:57:03:75:7f:f1:16:80:97:e7:2a:97:28:5c: 30:00:d9:b1:a9:09:13:7e:40:ef:46:64:ba:53:38:b8:5f:30: 15:9a:73:db:87:3a:00:ac:a1:9d:a4:30:17:69:25:aa:9a:f2: 18:e6:c4:fc:15:14:34:97:65:14:a5:1b:1f:3c:19:ae:79:16: 57:dd:2a:20:96:54:0e:72:54:ed:bd:ad:69:2c:82:1f:32:1d: 0b:e3:eb:12:94:4c:16:54:33:1f:96:4a:60:3d:83:3c:bf:8e: 5d:4e:bb:86:0f:05:cd:e5:76:5e:9c:2d:e1:c7:6a:cf:79:7d: 9d:4d:c2:77:85:cb:6e:ff:81:b9:34:05:21:80:f7:50:73:83: a7:5e:3a:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgT2DonwVV4R8CAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MDEwZTM1NjMtMzkxMC00ZDEwLWFlM2QtYjJiNjdjYWMwNzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7HjPRXLorZsP2BZ3ZdCgBwa3MYQg7m9C7nW 1vOP0jziMkSq4UigUA5TkPSj/1oNGVsLNe6SJpJaIVb9aaKL9JRPMi+SZMOUKPsF QwRJAGKT2necP031RGa/mfWsNeXl+EsugX3iTzBuDhCRSnu/PmgqnpX38MHebMAM TS+NMAXNJ1nr/SRZnp+0AEGwEkavSkLZIB0MvapPk9ImcB2z8vYp/5rKKbv4AOMk UTpESvVSD6gk2loFY0MN03bv/trazkqPYrEkda6cifl1YxWswNpKt6xqYwmiLRwp tZoDd6DGNCXWXqYJLN3VbPRkwxmtH491U2WkM5jPBJXnDQBkEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkP0JJKABAdSjzkKrFc72ZYMZ4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGM0YTEwY2MtODFhYS0z MzVmLWI4ZGUtNTAzNmM5OTY3NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8Y/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADh3Sj2osUUgdH9HlrMuajIP0KKScd77KGoZxhRdOaccAz+4CzDj7ZHX ShQhxmpojxRO3pEjMgGpGa5RK60zfVPz6aF4tpYfLq3qU0An9TCgrVhNnnVHiKVf 3mLABasbGbxOke7lm9bNkoUz0Zet9gU/VwN1f/EWgJfnKpcoXDAA2bGpCRN+QO9G ZLpTOLhfMBWac9uHOgCsoZ2kMBdpJaqa8hjmxPwVFDSXZRSlGx88Ga55FlfdKiCW VA5yVO29rWksgh8yHQvj6xKUTBZUMx+WSmA9gzy/jl1Ou4YPBc3ldl6cLeHHas95 fZ1NwneFy27/gbk0BSGA91Bzg6deOgI= -----END CERTIFICATE-----Generated at Fri Apr 11 22:50:28 2025 by rpki-client