$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78345f08-828d-33ca-b542-d545e34a9486.roa File: 78345f08-828d-33ca-b542-d545e34a9486.roa (raw, json) Hash identifier: UPAyrtR7Mascietwi6bueuqJFxWZ9rLzsCWboFe1DMU= Subject key identifier: 23:10:66:B1:42:0F:B5:97:56:C6:E4:E8:2C:31:0F:E9:98:2A:70:40 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581BE96D86C7C56274B91E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78345f08-828d-33ca-b542-d545e34a9486.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:be:96:d8:6c:7c:56:27:4b:91:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=85378bd5-3785-44ff-a840-3f09c4b073bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:3b:6d:3c:7a:3c:c0:62:58:18:aa:e7:f2: 92:b5:59:61:c8:01:4c:29:88:c0:ab:3c:d6:51:29: 81:79:57:1e:25:1e:9a:18:b4:c9:25:69:67:09:2a: 83:8f:2d:00:08:bd:28:b9:f5:72:42:39:bd:43:f0: 62:ad:b0:d3:22:fc:34:9b:8a:44:d1:2d:93:92:0e: dc:2a:28:8f:0b:12:6e:a6:d3:cf:e4:01:fe:a5:b0: cd:db:e3:b7:4f:c9:fb:12:fd:eb:44:26:ce:f7:7e: 18:f6:b7:35:b3:4d:ab:07:d4:53:e4:99:f5:81:54: 6a:d7:9f:21:6f:e6:2f:43:de:d2:c1:86:3d:b5:b9: c3:c1:f2:80:c5:7f:ee:9e:24:2a:1f:37:a3:7f:2f: fe:32:b4:59:1f:06:da:fa:58:68:fa:62:eb:49:a0: 89:50:0c:2e:fa:f6:9c:b9:72:9d:58:ad:a6:23:49: cb:ce:db:dc:0b:6d:6c:80:e1:8b:bf:d9:5f:6c:1d: 1d:a7:78:c6:8c:46:20:bc:1c:e1:dc:53:47:29:8c: f7:03:24:4c:94:d6:b3:cb:95:7d:d4:cc:ac:0c:f2: 61:d9:3e:3c:89:04:b1:07:14:0b:a6:2a:6a:3c:04: 61:41:8c:03:a5:0d:2e:b1:8e:c9:2c:57:e5:1d:23: f0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:10:66:B1:42:0F:B5:97:56:C6:E4:E8:2C:31:0F:E9:98:2A:70:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78345f08-828d-33ca-b542-d545e34a9486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c2:80:11:86:21:0b:5c:c2:5e:63:ef:5c:c8:a5:15:c4:a1: c1:c5:d0:58:ec:22:9b:0c:ce:3d:12:36:2b:4d:b6:41:60:55: 06:0c:eb:2a:7e:07:0c:28:4c:5e:1b:a8:94:39:41:15:21:80: d0:c4:f6:7a:e1:c5:62:b8:08:50:d2:98:a5:87:1f:a4:a2:ed: 8e:fd:7d:08:31:df:fe:86:95:4a:71:ef:d5:a0:d0:49:5e:4a: 6d:ca:1d:c8:d5:ac:9d:3e:f5:55:67:fd:00:1e:a0:4f:9b:5c: 6d:d8:79:0a:c7:ac:f0:e1:b4:70:87:c6:15:23:4f:bd:67:e8: 22:f0:c6:18:bb:8b:a1:8a:9a:fe:37:b1:3f:4e:1e:c5:96:d9: 0c:7e:4e:b1:b8:80:86:13:98:62:5e:98:e8:b4:f4:e1:58:4b: 38:5b:b4:45:77:0e:56:8d:91:d8:f8:74:d7:06:cb:40:2d:74: e4:4e:42:2d:82:a4:e5:65:ef:3c:11:6c:36:6b:5a:53:fc:c4: 15:bf:bb:87:d9:2c:fe:91:6a:70:90:85:b8:08:b9:4f:15:8f: 45:15:20:e4:3a:14:30:95:a9:9b:8a:ff:b8:a4:48:22:e0:d0: 09:13:d4:66:1b:cf:69:a6:2f:05:7a:99:82:00:48:b8:86:04: 52:64:86:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgb6W2Gx8VidLkeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODUzNzhiZDUtMzc4NS00NGZmLWE4NDAtM2YwOWM0YjA3M2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY07bTx6PMBiWBiq5/KStVlhyAFMKYjAqzzW USmBeVceJR6aGLTJJWlnCSqDjy0ACL0oufVyQjm9Q/BirbDTIvw0m4pE0S2Tkg7c KiiPCxJuptPP5AH+pbDN2+O3T8n7Ev3rRCbO934Y9rc1s02rB9RT5Jn1gVRq158h b+YvQ97SwYY9tbnDwfKAxX/uniQqHzejfy/+MrRZHwba+lho+mLrSaCJUAwu+vac uXKdWK2mI0nLztvcC21sgOGLv9lfbB0dp3jGjEYgvBzh3FNHKYz3AyRMlNazy5V9 1MysDPJh2T48iQSxBxQLpipqPARhQYwDpQ0usY7JLFflHSPw+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMQZrFCD7WXVsbk6CwxD+mYKnBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzgzNDVmMDgtODI4ZC0z M2NhLWI1NDItZDU0NWUzNGE5NDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTCgBGGIQtcwl5j71zIpRXEocHF0FjsIpsMzj0SNitNtkFgVQYM6yp+ BwwoTF4bqJQ5QRUhgNDE9nrhxWK4CFDSmKWHH6Si7Y79fQgx3/6GlUpx79Wg0Ele Sm3KHcjVrJ0+9VVn/QAeoE+bXG3YeQrHrPDhtHCHxhUjT71n6CLwxhi7i6GKmv43 sT9OHsWW2Qx+TrG4gIYTmGJemOi09OFYSzhbtEV3DlaNkdj4dNcGy0AtdOROQi2C pOVl7zwRbDZrWlP8xBW/u4fZLP6RanCQhbgIuU8Vj0UVIOQ6FDCVqZuK/7ikSCLg 0AkT1GYbz2mmLwV6mYIASLiGBFJkhrg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:38 2025 by rpki-client