$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5259a987-3bc1-32de-9074-94d80fbae32a.roa File: 5259a987-3bc1-32de-9074-94d80fbae32a.roa (raw, json) Hash identifier: xiHIWo0Fb7Q2Sm7mLZG2EXDb9Gk2zLSw1WaqfpfkU2Y= Subject key identifier: 7F:17:31:C8:B8:79:DB:FA:9A:55:E0:B0:A3:FC:65:6B:FC:A9:EB:2E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5813C8AD44EBA72E4A7EF80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5259a987-3bc1-32de-9074-94d80fbae32a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.198.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:3c:8a:d4:4e:ba:72:e4:a7:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=44e00c56-f9ea-4362-8910-39b2a5a274e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c9:22:20:9c:21:e0:e2:47:92:69:7c:2c:94: f6:92:bc:93:8a:3a:72:10:31:89:d8:bd:c8:5f:59: 0b:11:bf:58:3b:c1:7b:ae:f8:b4:61:6b:f8:85:1c: 00:30:2c:ad:aa:2d:aa:34:99:57:d4:5d:aa:ff:b1: 00:5f:74:76:52:78:16:9d:7d:87:74:3c:b8:93:02: 10:b6:6e:ee:13:1b:cc:17:4e:7c:49:de:c6:d8:46: 2c:aa:ac:1b:c6:55:24:e7:96:d4:24:2a:e0:6a:33: dd:69:7d:91:9c:86:eb:90:99:b6:5a:78:b4:df:ba: 99:e9:c8:c2:52:de:fd:a5:61:ce:05:62:b4:92:3e: 32:7e:07:96:ff:f1:e4:25:fc:a8:47:b6:fe:06:85: d4:b5:3a:1f:40:cc:40:e7:83:57:2c:79:28:9c:42: 33:d0:c0:cb:15:52:63:02:40:9e:91:bd:63:3a:17: 28:90:41:40:41:7e:39:15:06:36:98:de:cf:2a:d8: 70:f3:a0:bd:c9:57:51:36:88:a1:ef:b4:0c:1e:2e: 9d:8a:2b:b0:ba:57:a9:7b:b8:94:03:7d:5b:89:b4: 74:06:54:00:08:86:49:96:67:94:8f:b0:56:2e:e1: a7:94:35:83:cb:23:6a:51:4f:68:f2:94:f5:11:ee: 45:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:17:31:C8:B8:79:DB:FA:9A:55:E0:B0:A3:FC:65:6B:FC:A9:EB:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5259a987-3bc1-32de-9074-94d80fbae32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:bb:8f:77:5d:18:f8:bf:17:04:23:4c:bc:8b:dc:04:db:5e: ec:8f:42:8c:eb:5a:6b:77:ca:64:ea:70:b3:a5:a4:25:b9:be: ae:71:8a:fe:b9:d1:69:37:5c:a6:3b:2d:d0:8e:98:2b:a8:2b: 6e:e5:7f:a4:f9:71:03:c6:f8:4b:a4:ad:fd:1d:ed:de:c9:36: fe:a8:47:29:c1:fe:5e:cb:6e:2a:ac:8e:41:91:7e:95:ed:4d: f9:7d:33:28:cc:0c:22:fe:e5:e5:86:d3:a4:90:29:1d:d5:d1: 34:56:0a:61:c9:71:27:fb:f9:8e:3d:04:32:14:c7:a3:5e:b2: 95:60:85:f1:cc:d0:9d:c9:86:ec:51:fb:97:ca:b4:ab:86:cc: 98:8a:9d:7f:2b:b0:4e:53:dd:b9:89:74:eb:ad:a9:6d:14:40: 05:b1:c3:86:35:72:d6:45:23:3b:92:60:80:09:bf:55:21:f3: 4d:50:ac:70:af:d0:53:fb:6c:3e:c9:70:dc:ab:86:01:d5:d0: d7:fb:8e:c6:08:40:6a:e1:8a:24:42:cb:ee:10:9f:d5:2e:87: fe:c5:a6:7e:d4:ee:86:2a:e1:16:f9:48:41:f6:c9:c3:2b:f2: 37:88:07:17:4a:e4:4b:23:a1:d4:55:db:a4:b1:b4:31:00:6a: d1:aa:f4:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgTyK1E66cuSn74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDRlMDBjNTYtZjllYS00MzYyLTg5MTAtMzliMmE1YTI3NGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8kiIJwh4OJHkml8LJT2kryTijpyEDGJ2L3I X1kLEb9YO8F7rvi0YWv4hRwAMCytqi2qNJlX1F2q/7EAX3R2UngWnX2HdDy4kwIQ tm7uExvMF058Sd7G2EYsqqwbxlUk55bUJCrgajPdaX2RnIbrkJm2Wni037qZ6cjC Ut79pWHOBWK0kj4yfgeW//HkJfyoR7b+BoXUtTofQMxA54NXLHkonEIz0MDLFVJj AkCekb1jOhcokEFAQX45FQY2mN7PKthw86C9yVdRNoih77QMHi6diiuwulepe7iU A31bibR0BlQACIZJlmeUj7BWLuGnlDWDyyNqUU9o8pT1Ee5FxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8XMci4edv6mlXgsKP8ZWv8qesuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTI1OWE5ODctM2JjMS0z MmRlLTkwNzQtOTRkODBmYmFlMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD67j3ddGPi/FwQjTLyL3ATbXuyPQozrWmt3ymTqcLOlpCW5vq5xiv65 0Wk3XKY7LdCOmCuoK27lf6T5cQPG+Eukrf0d7d7JNv6oRynB/l7LbiqsjkGRfpXt Tfl9MyjMDCL+5eWG06SQKR3V0TRWCmHJcSf7+Y49BDIUx6NespVghfHM0J3JhuxR +5fKtKuGzJiKnX8rsE5T3bmJdOutqW0UQAWxw4Y1ctZFIzuSYIAJv1Uh801QrHCv 0FP7bD7JcNyrhgHV0Nf7jsYIQGrhiiRCy+4Qn9Uuh/7Fpn7U7oYq4Rb5SEH2ycMr 8jeIBxdK5EsjodRV26SxtDEAatGq9Hw= -----END CERTIFICATE-----Generated at Fri Apr 11 22:35:39 2025 by rpki-client