$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/750812a3-504c-38e8-83cf-e3af72f1a976.roa File: 750812a3-504c-38e8-83cf-e3af72f1a976.roa (raw, json) Hash identifier: /9z8zT+nPFY3Zt2uKI+DCTNNMqkIhrQhjC2W/X/HZDA= Subject key identifier: A7:D5:59:CF:39:A1:9C:EC:87:97:5A:58:25:4B:D1:46:B4:21:14:4F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581C225068F3F7D10C13E70 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/750812a3-504c-38e8-83cf-e3af72f1a976.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:c2:25:06:8f:3f:7d:10:c1:3e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=597ea4b2-c04c-4537-948d-bf51a2b9158b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2c:e6:38:3f:bc:32:54:17:80:53:7a:6c:31: 0a:c2:cf:50:96:ad:ea:e5:07:cc:68:cf:bf:7a:94: 66:5c:71:78:40:af:1d:a6:3d:8a:2a:f5:f8:16:9b: 69:5b:47:fd:12:59:81:db:95:21:23:dd:eb:35:7d: 53:41:b5:91:e8:f5:40:50:2f:9e:19:43:e7:f4:c0: 58:b4:24:73:77:fc:19:6b:13:8d:ef:d3:4b:71:81: 81:b3:33:10:92:3e:66:7c:5b:34:8c:57:0e:10:38: be:e9:1f:81:34:17:94:7d:74:52:d4:a7:61:92:9f: d8:b0:da:2c:5d:33:9a:9e:4b:09:ff:7c:24:89:47: e1:16:5a:d1:bb:31:6a:a5:b4:75:6e:11:ef:38:ea: fd:e0:0e:39:91:ee:fd:65:9e:41:59:97:bc:25:f3: 9c:62:85:1e:66:b2:21:2e:95:01:02:4b:1c:91:38: 58:30:35:4e:c2:3f:6b:ad:15:b6:1b:50:9d:23:50: 87:00:96:e9:94:05:ef:a6:98:f3:c3:6e:46:74:6e: a8:b5:a1:a6:6e:07:55:86:f4:b0:48:ae:3d:92:5b: 46:ed:2e:aa:61:de:38:2b:c7:50:97:61:bc:6d:f9: c5:cd:ee:53:6f:7a:10:b9:22:85:98:3c:86:be:e2: 52:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D5:59:CF:39:A1:9C:EC:87:97:5A:58:25:4B:D1:46:B4:21:14:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/750812a3-504c-38e8-83cf-e3af72f1a976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:3c:2e:64:0d:02:d8:d8:41:a9:3d:b7:8d:3b:c5:19:c9:e8: 1c:f0:89:72:a9:82:c0:e1:01:9b:b2:0b:7c:8f:7a:fc:98:c0: 0f:53:41:02:8e:3e:36:20:91:92:86:ac:34:e1:75:72:c2:c6: d4:46:7e:3c:69:e1:c9:db:e5:22:4a:79:5c:85:3e:3c:6e:e4: 4e:08:12:6e:e1:bb:60:19:ad:30:0e:0b:b7:94:1e:6c:2a:0f: f1:f4:c8:af:3d:38:4d:28:03:38:5d:2d:6f:10:6b:3f:14:99: bb:11:43:a6:06:a6:f8:d6:d7:40:42:3c:25:4a:f7:c3:eb:2e: aa:7a:bf:2c:71:a9:16:2b:39:5a:f8:e8:86:e4:2a:d7:21:17: 26:85:aa:4a:dd:85:ae:99:b4:38:44:59:bb:8d:1d:c4:c4:79: 47:05:87:ac:e6:8a:47:d9:3f:fd:0e:9a:39:8d:ed:75:c4:f5: db:06:5e:3c:53:51:36:30:7e:77:59:e6:4e:6c:63:10:55:77: 42:34:ec:00:a3:b9:00:9a:a8:c4:96:2e:a6:67:af:52:b1:ff: f5:80:f0:f1:c8:40:27:fb:97:78:b6:25:81:18:a3:58:44:22: 8a:7c:10:93:9d:90:03:d9:4b:f6:20:73:8f:52:d1:99:35:37: e1:ea:d1:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcIlBo8/fRDBPnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTk3ZWE0YjItYzA0Yy00NTM3LTk0OGQtYmY1MWEyYjkxNThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSzmOD+8MlQXgFN6bDEKws9Qlq3q5QfMaM+/ epRmXHF4QK8dpj2KKvX4FptpW0f9ElmB25UhI93rNX1TQbWR6PVAUC+eGUPn9MBY tCRzd/wZaxON79NLcYGBszMQkj5mfFs0jFcOEDi+6R+BNBeUfXRS1Kdhkp/YsNos XTOanksJ/3wkiUfhFlrRuzFqpbR1bhHvOOr94A45ke79ZZ5BWZe8JfOcYoUeZrIh LpUBAksckThYMDVOwj9rrRW2G1CdI1CHAJbplAXvppjzw25GdG6otaGmbgdVhvSw SK49kltG7S6qYd44K8dQl2G8bfnFze5Tb3oQuSKFmDyGvuJSlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfVWc85oZzsh5daWCVL0Ua0IRRPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzUwODEyYTMtNTA0Yy0z OGU4LTgzY2YtZTNhZjcyZjFhOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8S8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAI8LmQNAtjYQak9t407xRnJ6BzwiXKpgsDhAZuyC3yPevyYwA9TQQKO PjYgkZKGrDThdXLCxtRGfjxp4cnb5SJKeVyFPjxu5E4IEm7hu2AZrTAOC7eUHmwq D/H0yK89OE0oAzhdLW8Qaz8UmbsRQ6YGpvjW10BCPCVK98PrLqp6vyxxqRYrOVr4 6IbkKtchFyaFqkrdha6ZtDhEWbuNHcTEeUcFh6zmikfZP/0OmjmN7XXE9dsGXjxT UTYwfndZ5k5sYxBVd0I07ACjuQCaqMSWLqZnr1Kx//WA8PHIQCf7l3i2JYEYo1hE Iop8EJOdkAPZS/Ygc49S0Zk1N+Hq0Yc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:25 2025 by rpki-client