$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4eaf5271-7984-3993-a377-500b6314e3d6.roa File: 4eaf5271-7984-3993-a377-500b6314e3d6.roa (raw, json) Hash identifier: Z0xoSoZZ4iv+E2WfLAFR6TF94b8J1wTlud9d8kCrRkI= Subject key identifier: 32:94:F1:8A:CB:F3:9B:A4:F1:93:77:0E:8E:CA:DE:8F:66:C1:D9:B1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581BDFBD078AFAF34549680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4eaf5271-7984-3993-a377-500b6314e3d6.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:bd:fb:d0:78:af:af:34:54:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=cf1d8aac-575b-45ff-91d6-44ef66868c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4b:e9:f8:97:36:32:a5:e6:4d:50:77:3f:b7: 04:e0:77:37:ff:4c:a1:7b:90:b6:90:3e:1f:2b:8a: 75:e6:55:f9:9b:12:eb:4d:ae:c9:e4:72:1f:3e:05: 50:a7:3d:4b:e1:1c:e1:80:2a:0c:cd:98:06:2d:92: 27:38:b9:fc:c0:36:d8:ea:4b:04:ae:5e:1c:f6:28: 2c:0e:ec:3d:3c:19:4d:ec:13:0f:1b:4a:66:b4:c0: 0d:8d:2b:46:7c:d5:4a:1b:9c:27:46:14:a6:66:3d: 38:4a:66:65:d4:33:23:86:38:21:d5:9c:b3:9c:73: 81:26:58:f4:de:11:5a:aa:0a:26:c4:1d:97:64:6f: 37:d7:a6:c4:00:75:0a:37:2f:db:36:fe:fb:7c:b4: e8:b9:25:bc:6b:49:d3:a6:09:93:c8:cd:d7:05:c2: 80:54:f8:1d:96:4c:a1:38:89:32:34:77:2b:ce:c1: 2e:cf:43:c9:06:6f:8b:ba:f8:6c:11:50:01:87:ad: 61:3d:f3:c3:27:96:d6:c1:39:29:bc:02:48:ea:aa: 99:e8:2e:af:4b:75:8c:1f:35:58:17:b9:8b:30:a1: 1c:83:30:42:70:97:58:81:5f:1f:02:50:19:b0:b6: d6:62:2f:30:a4:81:d6:97:fa:a4:11:70:3c:8f:dd: 74:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:94:F1:8A:CB:F3:9B:A4:F1:93:77:0E:8E:CA:DE:8F:66:C1:D9:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4eaf5271-7984-3993-a377-500b6314e3d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7d:1b:17:b2:e0:a9:b6:38:81:d0:37:86:8a:68:0b:a7:8e: 76:0c:d7:56:dc:6f:7f:65:3d:30:73:f7:bf:d1:99:17:96:53: d0:7f:08:1f:0f:12:6f:6c:20:65:f4:43:03:fd:4a:0d:19:78: d7:d4:6d:42:e2:d1:42:ed:3c:09:47:3a:ce:5a:7a:a2:6a:ab: ff:d2:32:86:a1:d5:32:01:a9:bd:99:88:24:00:cb:0d:32:54: ad:6c:cc:11:3d:65:02:78:ca:f0:7b:a8:3a:f4:2f:ac:0c:8c: 98:02:5c:92:26:ea:46:9b:c0:aa:c5:16:db:41:43:41:e8:de: 01:d0:5d:8d:92:6e:8d:76:33:5b:f3:c3:02:72:82:ea:17:6b: b0:4d:4c:8a:1d:6a:09:11:b8:73:74:54:01:96:d9:93:73:d1: e3:58:ce:8c:28:60:0a:aa:cf:10:c6:2d:46:e0:be:b5:87:0d: bd:25:34:fa:d8:05:fb:7c:29:75:96:b9:21:38:2a:3e:a8:c7: cf:d3:f6:08:0a:e8:70:23:af:21:a4:0e:9c:37:d7:98:d9:a0: fb:84:b1:f9:57:2d:4c:c2:d5:89:a0:da:72:8e:36:fb:10:35: cd:44:7d:15:6c:1d:bf:1c:b0:0d:b8:0e:66:27:90:eb:6d:56: 56:da:a3:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgb370HivrzRUloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2YxZDhhYWMtNTc1Yi00NWZmLTkxZDYtNDRlZjY2ODY4Yzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0vp+Jc2MqXmTVB3P7cE4Hc3/0yhe5C2kD4f K4p15lX5mxLrTa7J5HIfPgVQpz1L4RzhgCoMzZgGLZInOLn8wDbY6ksErl4c9igs Duw9PBlN7BMPG0pmtMANjStGfNVKG5wnRhSmZj04SmZl1DMjhjgh1ZyznHOBJlj0 3hFaqgomxB2XZG8316bEAHUKNy/bNv77fLTouSW8a0nTpgmTyM3XBcKAVPgdlkyh OIkyNHcrzsEuz0PJBm+LuvhsEVABh61hPfPDJ5bWwTkpvAJI6qqZ6C6vS3WMHzVY F7mLMKEcgzBCcJdYgV8fAlAZsLbWYi8wpIHWl/qkEXA8j910twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKU8YrL85uk8ZN3Do7K3o9mwdmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGVhZjUyNzEtNzk4NC0z OTkzLWEzNzctNTAwYjYzMTRlM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB59Gxey4Km2OIHQN4aKaAunjnYM11bcb39lPTBz97/RmReWU9B/CB8P Em9sIGX0QwP9Sg0ZeNfUbULi0ULtPAlHOs5aeqJqq//SMoah1TIBqb2ZiCQAyw0y VK1szBE9ZQJ4yvB7qDr0L6wMjJgCXJIm6kabwKrFFttBQ0Ho3gHQXY2Sbo12M1vz wwJyguoXa7BNTIodagkRuHN0VAGW2ZNz0eNYzowoYAqqzxDGLUbgvrWHDb0lNPrY Bft8KXWWuSE4Kj6ox8/T9ggK6HAjryGkDpw315jZoPuEsflXLUzC1Ymg2nKONvsQ Nc1EfRVsHb8csA24DmYnkOttVlbao+Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:04 2025 by rpki-client