$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6323c640-3dba-3db9-bbd9-764f48531d64.roa File: 6323c640-3dba-3db9-bbd9-764f48531d64.roa (raw, json) Hash identifier: sger/TM+97lwz4U805Odbr5qf0iRG8mNyxoLNRDSFP0= Subject key identifier: 1E:DC:18:F4:AA:0B:A6:11:20:8F:8A:3E:CE:74:BE:5F:B1:56:B1:4E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581BE75400C425B5FBB8E80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6323c640-3dba-3db9-bbd9-764f48531d64.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:be:75:40:0c:42:5b:5f:bb:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=ec3b3caa-a648-4068-94c0-4f3e90673eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8e:6b:1f:05:d0:c4:d3:b0:dd:f3:e7:77:77: 26:99:25:c0:c7:ef:46:15:f0:4b:78:38:1f:5a:b4: f1:78:d6:25:b2:c0:59:f6:9e:6d:2c:9a:10:c9:a4: 15:83:9f:11:d2:87:5f:e8:30:22:42:31:ea:ce:a2: 10:5b:4c:6f:0e:10:3f:2d:3a:b4:70:d1:35:4d:e3: de:ca:5f:1f:b4:db:08:1c:99:f7:ba:10:78:92:0b: bc:85:f5:ba:0a:38:1a:28:af:89:f5:d5:ee:37:f1: a8:be:fc:3d:c1:97:b7:83:32:a8:4b:34:3f:9c:1f: 30:b5:42:8c:7b:b4:61:d8:5a:6b:6d:38:0d:37:f7: e5:7f:c3:03:a5:02:70:c1:6a:cb:10:80:3e:c6:85: 42:88:d2:bc:0a:8c:34:81:0c:24:96:10:a9:36:40: b3:7a:49:3b:2d:ae:0e:4b:8d:44:06:38:1a:37:5a: 3f:5d:58:3a:4d:1d:d6:cc:da:14:fe:81:90:7a:a6: 4d:b3:1a:95:f8:96:30:da:e5:3a:ef:ac:42:be:f2: 6e:e7:17:cb:32:ea:f5:e7:19:e4:cc:62:91:0b:6d: 7e:ca:8c:38:99:1e:a0:0b:e4:a6:d7:0e:3e:34:bd: 36:d3:db:c7:93:11:6e:44:d6:70:84:fa:cc:b6:72: ac:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DC:18:F4:AA:0B:A6:11:20:8F:8A:3E:CE:74:BE:5F:B1:56:B1:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6323c640-3dba-3db9-bbd9-764f48531d64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:60:77:04:cc:bb:a8:de:a3:05:4e:6b:9b:a2:1e:21:43:d0: b0:7b:a0:b8:d0:cc:24:d4:a1:49:e4:75:7c:43:e1:02:f0:bf: 13:a9:cb:85:e3:e7:b9:71:33:f1:c2:4e:55:ee:89:bd:c3:53: 5c:a8:15:4d:0b:6d:60:86:40:2a:e1:ba:9f:6f:45:4a:26:88: a3:88:2b:85:c1:42:96:ea:4a:fc:47:33:a6:7f:90:92:64:84: b6:5f:61:cc:c2:1c:bf:14:bb:41:7a:f3:4c:99:3e:13:1b:29: 53:98:f8:83:a9:cf:3f:20:2f:ac:8f:b3:8a:8d:72:70:7c:53: 34:cf:bc:1d:01:a6:27:65:b5:51:4e:bd:80:eb:b2:bd:55:53: 77:ee:ba:12:9a:bf:0e:71:8d:ac:0d:29:96:e9:de:f9:70:63: c3:c7:76:19:29:fb:1c:07:8a:be:f9:ee:9a:23:bb:85:d0:9a: 27:c3:3f:f6:fc:3f:80:91:b2:00:ee:47:cc:8a:15:66:0e:7b: b0:74:52:a1:8e:87:6d:82:bf:6f:1a:ed:7a:c0:e9:ec:4b:c1: 2f:75:d6:9a:83:4e:39:32:72:d7:ad:68:d9:0a:d3:bd:e8:2e: 98:07:c2:e8:ba:97:ae:c7:a1:38:e4:3b:4b:d0:a9:f9:ea:4c: d0:17:6f:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgb51QAxCW1+7joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWMzYjNjYWEtYTY0OC00MDY4LTk0YzAtNGYzZTkwNjczZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho5rHwXQxNOw3fPnd3cmmSXAx+9GFfBLeDgf WrTxeNYlssBZ9p5tLJoQyaQVg58R0odf6DAiQjHqzqIQW0xvDhA/LTq0cNE1TePe yl8ftNsIHJn3uhB4kgu8hfW6CjgaKK+J9dXuN/Govvw9wZe3gzKoSzQ/nB8wtUKM e7Rh2FprbTgNN/flf8MDpQJwwWrLEIA+xoVCiNK8Cow0gQwklhCpNkCzekk7La4O S41EBjgaN1o/XVg6TR3WzNoU/oGQeqZNsxqV+JYw2uU676xCvvJu5xfLMur15xnk zGKRC21+yow4mR6gC+Sm1w4+NL0209vHkxFuRNZwhPrMtnKsoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7cGPSqC6YRII+KPs50vl+xVrFOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjMyM2M2NDAtM2RiYS0z ZGI5LWJiZDktNzY0ZjQ4NTMxZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNgdwTMu6jeowVOa5uiHiFD0LB7oLjQzCTUoUnkdXxD4QLwvxOpy4Xj 57lxM/HCTlXuib3DU1yoFU0LbWCGQCrhup9vRUomiKOIK4XBQpbqSvxHM6Z/kJJk hLZfYczCHL8Uu0F680yZPhMbKVOY+IOpzz8gL6yPs4qNcnB8UzTPvB0BpidltVFO vYDrsr1VU3fuuhKavw5xjawNKZbp3vlwY8PHdhkp+xwHir757poju4XQmifDP/b8 P4CRsgDuR8yKFWYOe7B0UqGOh22Cv28a7XrA6exLwS911pqDTjkyctetaNkK073o LpgHwui6l67HoTjkO0vQqfnqTNAXb0A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:57 2025 by rpki-client