$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67810e5b-d3dc-39d2-8ffe-ebfd55884f22.roa File: 67810e5b-d3dc-39d2-8ffe-ebfd55884f22.roa (raw, json) Hash identifier: ZpPoPFgIF7QgheCu+GqYB5qdd9UcvAIBTVPfpT06GLI= Subject key identifier: 69:D0:94:E3:0A:B8:51:23:AD:A1:DB:B5:71:3E:50:45:26:0D:6F:CF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581C31EFA394653D0B5AD80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67810e5b-d3dc-39d2-8ffe-ebfd55884f22.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:c3:1e:fa:39:46:53:d0:b5:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=334d1ee8-f8a8-4a37-9001-8a6abecf8be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e8:8c:78:f3:31:c7:5a:2c:99:da:53:1f:e0: 3c:89:91:2b:55:10:08:3e:60:5b:14:d8:b2:b7:8d: 98:7e:b9:6f:4b:f3:34:88:f4:9a:95:c8:75:66:8f: 7a:8b:10:db:67:a6:cb:fa:52:fc:63:8f:71:c3:5f: 26:ea:77:e9:e8:a3:92:92:7d:18:65:f4:ea:25:a9: 0e:0e:16:35:4d:33:ac:b4:80:0f:73:14:89:e7:3e: 9e:f8:c6:ed:b1:bc:13:11:33:84:7d:dd:e4:7a:3e: 37:94:5c:b5:62:6b:34:1b:d5:fc:9a:6a:4f:63:9a: 6e:a4:9d:ef:7f:50:60:e7:9f:7f:e1:6a:15:c5:60: ea:f8:f7:97:c2:bf:02:5d:07:e8:00:89:65:b9:0a: fd:5c:1b:85:41:03:84:e3:9c:ee:f9:20:01:ac:b7: 6e:9c:ae:70:f8:d5:23:a8:f5:ef:2c:35:73:de:1d: 6e:2f:4d:df:ed:49:01:02:3c:7f:32:64:e7:ee:b0: 05:54:6e:87:d5:ff:8e:a1:8b:4f:8d:0f:d4:9c:0f: b3:d4:f9:d8:11:b7:c7:6e:f6:c2:fd:03:ce:7e:15: a7:0f:95:da:a3:58:76:69:e4:54:3b:31:f6:fd:e0: cb:84:10:93:b7:b8:3d:23:e2:cf:34:f7:cd:e1:73: 36:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D0:94:E3:0A:B8:51:23:AD:A1:DB:B5:71:3E:50:45:26:0D:6F:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/67810e5b-d3dc-39d2-8ffe-ebfd55884f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:94:53:33:8d:f2:98:7f:7b:8f:52:69:43:aa:23:d1:68:e2: cf:f1:01:98:4a:59:76:49:04:23:71:34:d2:4b:96:68:16:af: 04:32:50:c3:f6:f0:1f:77:c7:47:b7:8b:44:18:20:b2:58:b1: b5:46:ba:29:1f:6e:67:10:76:24:67:2e:b4:b1:6f:af:a3:d8: 60:a9:c3:61:25:b3:df:2e:2f:37:dd:b5:66:5d:81:80:a0:a0: ab:49:57:d2:da:15:df:60:4c:dd:6f:ca:38:82:7b:99:1f:0b: e7:45:a9:16:d0:03:d3:ba:22:cf:e1:79:0c:0c:48:5d:d4:06: bb:c4:5e:87:05:02:5d:ac:4a:60:1b:23:81:39:d9:73:45:99: 1c:33:40:bd:56:3f:b5:65:39:fa:a3:28:14:d0:ee:6e:a9:eb: 01:91:75:f8:13:f6:51:9c:0b:d5:5b:17:2d:63:6d:16:c6:69: bb:c2:71:e5:7a:b6:06:02:c8:f5:18:e1:ba:6f:f6:09:71:19: 8a:03:dc:7c:c4:eb:95:6b:ec:a4:cb:ba:7c:59:21:73:49:11: 9d:c5:33:cb:f1:35:06:25:01:8c:05:f0:fa:58:e7:0e:80:d5: a5:da:98:b8:89:35:7e:42:b7:8d:6c:0d:f4:35:9e:64:e3:c7: 45:cc:4b:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcMe+jlGU9C1rYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzM0ZDFlZTgtZjhhOC00YTM3LTkwMDEtOGE2YWJlY2Y4YmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eiMePMxx1osmdpTH+A8iZErVRAIPmBbFNiy t42YfrlvS/M0iPSalch1Zo96ixDbZ6bL+lL8Y49xw18m6nfp6KOSkn0YZfTqJakO DhY1TTOstIAPcxSJ5z6e+MbtsbwTETOEfd3kej43lFy1Yms0G9X8mmpPY5pupJ3v f1Bg559/4WoVxWDq+PeXwr8CXQfoAIlluQr9XBuFQQOE45zu+SABrLdunK5w+NUj qPXvLDVz3h1uL03f7UkBAjx/MmTn7rAFVG6H1f+OoYtPjQ/UnA+z1PnYEbfHbvbC /QPOfhWnD5Xao1h2aeRUOzH2/eDLhBCTt7g9I+LPNPfN4XM21wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnQlOMKuFEjraHbtXE+UEUmDW/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjc4MTBlNWItZDNkYy0z OWQyLThmZmUtZWJmZDU1ODg0ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCUUzON8ph/e49SaUOqI9Fo4s/xAZhKWXZJBCNxNNJLlmgWrwQyUMP2 8B93x0e3i0QYILJYsbVGuikfbmcQdiRnLrSxb6+j2GCpw2Els98uLzfdtWZdgYCg oKtJV9LaFd9gTN1vyjiCe5kfC+dFqRbQA9O6Is/heQwMSF3UBrvEXocFAl2sSmAb I4E52XNFmRwzQL1WP7VlOfqjKBTQ7m6p6wGRdfgT9lGcC9VbFy1jbRbGabvCceV6 tgYCyPUY4bpv9glxGYoD3HzE65Vr7KTLunxZIXNJEZ3FM8vxNQYlAYwF8PpY5w6A 1aXamLiJNX5Ct41sDfQ1nmTjx0XMS9Y= -----END CERTIFICATE-----Generated at Fri Mar 14 08:31:59 2025 by rpki-client