$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f996186-08c9-30f8-8f9d-644e0acea188.roa File: 5f996186-08c9-30f8-8f9d-644e0acea188.roa (raw, json) Hash identifier: lx4e6wjobvrV7zd3J7XW3j+BPMB+8vLVrRmvPB6bEDo= Subject key identifier: 83:33:37:EC:B9:5B:BF:88:93:0F:FC:97:68:A7:A1:B4:87:8C:9F:02 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581CD1588BF20C4A47BC280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f996186-08c9-30f8-8f9d-644e0acea188.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.198.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:cd:15:88:bf:20:c4:a4:7b:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=be276f1b-1240-4775-b145-b4c6df7a613a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d6:45:9c:cc:6f:f4:1d:e4:a9:3b:e5:5c:83: 84:0d:79:ef:8a:2c:ea:13:62:e3:6c:3d:49:e2:6e: 24:8b:ec:98:0a:4a:01:1d:4b:2a:d0:5f:50:39:5f: 0c:b8:5c:d0:33:81:11:09:bc:d7:35:3a:a8:45:48: 35:35:f7:7e:cf:39:d8:38:97:4f:ea:49:33:96:a8: ed:07:ea:98:c2:80:51:50:91:e9:63:78:ef:27:26: d0:11:30:85:d8:65:85:37:13:cf:30:6e:49:1c:00: 77:42:be:b3:c5:80:d4:78:eb:7c:84:db:cb:14:ea: c6:1a:65:cc:10:62:aa:b5:6f:73:46:09:66:7f:b7: 3d:81:d2:63:6b:34:53:21:bf:f3:16:7d:a6:0f:41: 6a:a1:03:6d:49:c3:35:dc:e5:6c:6a:3d:c3:8c:29: 4d:c8:e2:31:d0:1f:a7:20:e1:87:2e:29:25:7d:19: 2c:d5:f7:38:c4:f7:d9:c8:ba:b2:26:49:4a:9c:f3: 6e:93:04:95:e2:14:94:c3:1c:eb:f1:b0:98:f5:ba: 26:88:4f:5c:cb:86:f0:68:24:c0:d9:14:f4:5b:c0: 7c:fb:db:fe:75:db:9c:52:23:a9:6e:ee:da:70:ad: 38:d6:d3:6e:7e:a5:da:54:08:9e:5f:11:88:0a:be: 83:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:33:37:EC:B9:5B:BF:88:93:0F:FC:97:68:A7:A1:B4:87:8C:9F:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f996186-08c9-30f8-8f9d-644e0acea188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:c2:44:92:9e:8b:25:b9:55:1c:c1:79:3f:85:4c:b5:02:23: 68:e1:a4:19:99:76:ad:44:19:a3:04:bc:ca:cd:18:cb:f8:28: df:83:51:d7:77:3a:16:eb:42:80:3a:ba:99:3f:7d:4d:c2:8a: 4c:b1:d5:16:2d:ba:73:e3:0b:dd:e3:61:c3:99:48:2c:83:ef: 60:1b:12:8d:52:70:cc:93:5d:0a:d9:a5:8c:bb:46:dd:37:b1: 80:c6:24:54:ac:6c:00:bf:8f:45:c3:02:62:20:e5:59:5b:b6: c4:b0:64:88:ae:49:ad:c2:c3:07:42:50:6c:be:a5:57:a7:f8: f0:90:0e:a4:62:a1:41:f9:12:64:4a:ee:ce:c4:8b:73:18:1a: 55:65:55:7c:d3:dd:7c:58:fa:2c:9a:41:46:1f:6d:31:bc:34: 75:af:c4:14:ad:94:0d:3b:39:84:06:e6:76:07:90:71:15:58: 87:d2:41:d0:cf:4e:2d:02:e9:1d:fb:1a:1b:09:60:83:2e:27: fc:de:86:2f:e8:06:80:36:62:c4:90:2e:5c:ed:be:a7:22:b3: 33:98:46:52:b0:3b:e3:1f:30:85:70:a5:ac:93:06:62:bd:31: d0:52:c1:4c:30:09:03:f4:4f:45:e2:de:d6:56:10:09:1d:f1: 2f:91:f1:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgc0ViL8gxKR7woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YmUyNzZmMWItMTI0MC00Nzc1LWIxNDUtYjRjNmRmN2E2MTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldZFnMxv9B3kqTvlXIOEDXnviizqE2LjbD1J 4m4ki+yYCkoBHUsq0F9QOV8MuFzQM4ERCbzXNTqoRUg1Nfd+zznYOJdP6kkzlqjt B+qYwoBRUJHpY3jvJybQETCF2GWFNxPPMG5JHAB3Qr6zxYDUeOt8hNvLFOrGGmXM EGKqtW9zRglmf7c9gdJjazRTIb/zFn2mD0FqoQNtScM13OVsaj3DjClNyOIx0B+n IOGHLiklfRks1fc4xPfZyLqyJklKnPNukwSV4hSUwxzr8bCY9bomiE9cy4bwaCTA 2RT0W8B8+9v+dducUiOpbu7acK041tNufqXaVAieXxGICr6DWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMzN+y5W7+Ikw/8l2inobSHjJ8CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWY5OTYxODYtMDhjOS0z MGY4LThmOWQtNjQ0ZTBhY2VhMTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8ZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLCRJKeiyW5VRzBeT+FTLUCI2jhpBmZdq1EGaMEvMrNGMv4KN+DUdd3 OhbrQoA6upk/fU3Cikyx1RYtunPjC93jYcOZSCyD72AbEo1ScMyTXQrZpYy7Rt03 sYDGJFSsbAC/j0XDAmIg5VlbtsSwZIiuSa3CwwdCUGy+pVen+PCQDqRioUH5EmRK 7s7Ei3MYGlVlVXzT3XxY+iyaQUYfbTG8NHWvxBStlA07OYQG5nYHkHEVWIfSQdDP Ti0C6R37GhsJYIMuJ/zehi/oBoA2YsSQLlztvqciszOYRlKwO+MfMIVwpayTBmK9 MdBSwUwwCQP0T0Xi3tZWEAkd8S+R8TE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:03 2025 by rpki-client