$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5441dcc1-ab30-3af9-a7e3-51726545da4d.roa File: 5441dcc1-ab30-3af9-a7e3-51726545da4d.roa (raw, json) Hash identifier: ykisJPDHC+Ae3fgn90ddfRhNjjeVBjQlKDDuicpVyww= Subject key identifier: 82:FA:4B:F5:77:20:69:EC:45:A0:DB:BF:96:80:DF:BC:DA:C7:D6:0B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5813515008C794AD2D61E00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5441dcc1-ab30-3af9-a7e3-51726545da4d.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:35:15:00:8c:79:4a:d2:d6:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d70a352d-5747-473d-a0a8-89399626ec75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:68:57:44:c6:4f:d2:d5:bd:13:09:b5:96:59: 4c:fa:3d:3d:53:fe:c7:bf:43:c7:fa:a9:cc:44:b2: 3e:23:92:53:b1:fa:22:bf:34:8d:bd:c1:1a:27:9b: 81:ce:3c:c9:02:dc:32:92:d1:54:69:c8:a1:db:d4: f2:e5:82:cf:97:f8:21:61:0d:77:96:a5:09:85:91: f6:33:c1:99:26:04:06:41:b8:66:34:67:16:88:86: 8a:a7:e1:3c:4e:d9:05:96:8a:89:3e:1f:ee:8e:8f: ea:bf:b1:f9:4d:b2:d6:25:0f:26:3a:c2:99:09:0e: dc:4b:00:5d:3f:dc:d3:20:8b:6d:ef:49:52:05:ad: b6:98:f4:46:1c:15:38:cd:70:b8:53:f3:26:6f:89: 41:73:69:f9:cb:d8:4e:5d:cb:f0:e9:ce:5c:ec:e5: 4d:dd:88:7e:63:c6:9c:1a:df:1d:27:23:b3:4f:ab: 11:d1:0e:d1:e1:5f:87:96:7c:bc:f1:a3:1c:0c:29: a8:45:9d:3e:d1:40:80:99:64:7f:7a:d3:30:a4:37: 32:e3:b3:d1:37:56:4e:aa:96:67:70:73:a1:16:14: bc:80:95:6c:05:83:d9:d8:ee:12:f4:d6:0a:d5:f1: 89:91:b2:64:14:fc:f6:b5:c4:7b:27:37:71:42:d3: 2b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FA:4B:F5:77:20:69:EC:45:A0:DB:BF:96:80:DF:BC:DA:C7:D6:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5441dcc1-ab30-3af9-a7e3-51726545da4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:27:e0:0d:4f:8e:c0:44:96:58:ce:b6:d0:57:1e:a9:66:37: fc:a2:e5:be:4b:df:cf:58:68:04:3e:ce:a5:d3:e4:be:67:99: 73:f7:00:b0:b1:00:47:67:b1:38:00:9e:7c:ec:58:9c:11:0e: aa:c3:93:51:9e:67:c5:c5:6e:5c:c6:78:c7:97:31:b2:12:dc: 5a:2c:7a:34:c0:59:fe:80:ac:8f:cb:c2:40:64:79:4d:19:19: e3:1c:be:9c:49:00:0d:77:8c:ec:40:ef:24:6f:bf:22:e5:28: 9a:00:4b:ff:98:81:95:03:27:f4:a8:07:9a:33:fe:34:44:08: 54:ae:0a:fc:f7:40:a5:e7:37:e7:85:61:8f:5e:e2:b5:c6:c5: c4:0d:4a:e4:cb:90:73:1c:ff:16:de:d9:2c:d8:56:23:cf:52: df:f3:09:f9:83:0d:0b:6e:10:dd:e3:09:47:24:5a:54:f9:fb: d5:a4:59:ab:5e:1c:47:cd:2a:25:9b:05:cd:55:d7:43:db:9f: 72:99:66:ae:f5:3b:5b:56:37:b2:8a:0e:7d:fb:6b:20:d2:b6: 1d:8b:07:3a:10:0b:93:9d:ec:c7:fa:cb:0b:cd:37:79:1f:67: 07:49:f4:b4:17:ec:05:60:85:2b:ce:8c:b8:73:8e:db:69:40: 18:aa:d5:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgTUVAIx5StLWHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDcwYTM1MmQtNTc0Ny00NzNkLWEwYTgtODkzOTk2MjZlYzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWhXRMZP0tW9Ewm1lllM+j09U/7Hv0PH+qnM RLI+I5JTsfoivzSNvcEaJ5uBzjzJAtwyktFUacih29Ty5YLPl/ghYQ13lqUJhZH2 M8GZJgQGQbhmNGcWiIaKp+E8TtkFloqJPh/ujo/qv7H5TbLWJQ8mOsKZCQ7cSwBd P9zTIItt70lSBa22mPRGHBU4zXC4U/Mmb4lBc2n5y9hOXcvw6c5c7OVN3Yh+Y8ac Gt8dJyOzT6sR0Q7R4V+Hlny88aMcDCmoRZ0+0UCAmWR/etMwpDcy47PRN1ZOqpZn cHOhFhS8gJVsBYPZ2O4S9NYK1fGJkbJkFPz2tcR7JzdxQtMr8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIL6S/V3IGnsRaDbv5aA37zax9YLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTQ0MWRjYzEtYWIzMC0z YWY5LWE3ZTMtNTE3MjY1NDVkYTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALwn4A1PjsBElljOttBXHqlmN/yi5b5L389YaAQ+zqXT5L5nmXP3ALCx AEdnsTgAnnzsWJwRDqrDk1GeZ8XFblzGeMeXMbIS3FosejTAWf6ArI/LwkBkeU0Z GeMcvpxJAA13jOxA7yRvvyLlKJoAS/+YgZUDJ/SoB5oz/jRECFSuCvz3QKXnN+eF YY9e4rXGxcQNSuTLkHMc/xbe2SzYViPPUt/zCfmDDQtuEN3jCUckWlT5+9WkWate HEfNKiWbBc1V10Pbn3KZZq71O1tWN7KKDn37ayDSth2LBzoQC5Od7Mf6ywvNN3kf ZwdJ9LQX7AVghSvOjLhzjttpQBiq1Vo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:58 2025 by rpki-client