$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72a70cba-3e79-3091-9028-5a95c5891014.roa File: 72a70cba-3e79-3091-9028-5a95c5891014.roa (raw, json) Hash identifier: XAUI6s0lj4EBGpWi9nAMSvG6clyxClLCQ1VtKHuGOyM= Subject key identifier: D3:18:97:F5:A9:EA:A4:FC:0A:53:49:6F:48:3C:54:D7:A3:D9:89:BC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581C5FA46A764FBED7CC680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72a70cba-3e79-3091-9028-5a95c5891014.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.197.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:c5:fa:46:a7:64:fb:ed:7c:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=7cc5f082-aefb-4322-8ea0-431a2192b0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:05:7b:f2:25:05:82:c3:88:6f:5d:46:61:38: ba:f3:eb:f9:17:64:a9:aa:6b:eb:17:c8:36:99:bf: 62:4f:c8:a8:ae:f5:56:f1:c9:9d:9b:0c:eb:86:b2: 65:3b:6c:53:b6:b2:49:ad:27:61:54:3a:65:15:25: 63:f1:d6:56:44:9e:bd:c5:5b:5b:4b:58:5d:5a:35: 3e:c1:f5:31:59:5a:7b:68:92:09:f9:44:21:f2:99: 85:f7:0c:10:96:ba:93:52:a3:95:dd:5c:80:ce:49: ca:dd:45:02:8e:eb:d2:16:e0:cc:9f:49:ff:d9:38: bd:67:19:df:34:b9:c1:fc:23:79:7c:4a:8f:71:8d: ed:3d:26:52:34:cf:bd:e8:cd:de:6f:a4:2f:09:f3: db:d2:25:f2:8f:22:5d:b2:4d:ae:f0:b0:6a:4a:d9: b9:64:21:6e:82:30:0c:55:6b:0c:e3:69:7d:ff:d8: 50:10:8a:63:10:ca:ba:38:f0:44:e8:8e:e4:c2:63: ea:d1:2e:37:80:7d:93:b7:bf:16:65:b2:c7:1c:5c: 64:c2:eb:92:ae:92:64:54:4a:00:eb:8f:f5:50:88: d1:cb:65:90:67:b5:e7:f1:82:ce:6e:2d:e6:77:ca: 76:4d:bc:59:cf:79:d1:ff:33:f9:4c:d6:e4:70:d0: 8f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:18:97:F5:A9:EA:A4:FC:0A:53:49:6F:48:3C:54:D7:A3:D9:89:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72a70cba-3e79-3091-9028-5a95c5891014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:51:f9:99:e7:11:02:07:a1:92:9d:f7:fb:2c:b2:20:34:07: 6d:26:ae:3b:01:f6:91:d9:94:fc:eb:4b:c0:3a:8c:c0:97:70: 07:ec:ec:69:f4:21:85:b3:f8:0c:5c:fd:c0:72:98:ce:43:3b: ed:cc:7b:f6:f4:aa:c9:86:9e:20:0c:bc:65:15:c6:48:d7:3a: 64:0c:3f:e2:0b:1e:62:8e:4d:a6:1c:df:75:d3:ed:c6:52:ce: 10:08:21:ca:a3:c2:37:ea:9b:b6:d4:1c:70:99:c6:44:00:f7: a2:3d:8b:6a:4c:0e:5b:4d:ca:a2:7e:7d:8a:7d:4c:f4:26:d2: 5d:d3:7e:2a:d5:9e:a6:ba:09:49:b6:d6:11:83:e6:e9:90:19: 64:7c:7f:f8:f6:33:88:d0:62:be:c2:bd:52:43:27:b6:0d:d6: 10:9b:44:e6:85:47:2a:92:72:29:1f:7e:48:3c:ff:01:1d:77: e1:3a:dc:df:2d:92:98:c8:22:6a:94:05:f5:33:42:1a:66:71: e7:2b:31:8f:ab:76:08:35:9e:46:b2:6e:e4:63:2c:5e:9c:38: bb:05:d6:64:c4:e8:64:c9:ff:d6:04:e3:87:52:13:8e:99:0a: 46:95:5c:b5:aa:b0:53:c4:99:41:a4:31:ae:5d:51:ef:47:92: e4:ce:83:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcX6Rqdk++18xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk N2NjNWYwODItYWVmYi00MzIyLThlYTAtNDMxYTIxOTJiMGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQV78iUFgsOIb11GYTi68+v5F2SpqmvrF8g2 mb9iT8iorvVW8cmdmwzrhrJlO2xTtrJJrSdhVDplFSVj8dZWRJ69xVtbS1hdWjU+ wfUxWVp7aJIJ+UQh8pmF9wwQlrqTUqOV3VyAzknK3UUCjuvSFuDMn0n/2Ti9Zxnf NLnB/CN5fEqPcY3tPSZSNM+96M3eb6QvCfPb0iXyjyJdsk2u8LBqStm5ZCFugjAM VWsM42l9/9hQEIpjEMq6OPBE6I7kwmPq0S43gH2Tt78WZbLHHFxkwuuSrpJkVEoA 64/1UIjRy2WQZ7Xn8YLObi3md8p2TbxZz3nR/zP5TNbkcNCPpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMYl/Wp6qT8ClNJb0g8VNej2Ym8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzJhNzBjYmEtM2U3OS0z MDkxLTkwMjgtNWE5NWM1ODkxMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpR+ZnnEQIHoZKd9/sssiA0B20mrjsB9pHZlPzrS8A6jMCXcAfs7Gn0 IYWz+Axc/cBymM5DO+3Me/b0qsmGniAMvGUVxkjXOmQMP+ILHmKOTaYc33XT7cZS zhAIIcqjwjfqm7bUHHCZxkQA96I9i2pMDltNyqJ+fYp9TPQm0l3TfirVnqa6CUm2 1hGD5umQGWR8f/j2M4jQYr7CvVJDJ7YN1hCbROaFRyqScikffkg8/wEdd+E63N8t kpjIImqUBfUzQhpmcecrMY+rdgg1nkaybuRjLF6cOLsF1mTE6GTJ/9YE44dSE46Z CkaVXLWqsFPEmUGkMa5dUe9HkuTOg8g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:34 2025 by rpki-client