$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7dbb0524-ce0e-3ffd-a5d4-69aef3a12452.roa File: 7dbb0524-ce0e-3ffd-a5d4-69aef3a12452.roa (raw, json) Hash identifier: ZTk8wW1Qq4OxhulJS0jEOMyXKdB7DGKVZv5I8KSVWjs= Subject key identifier: A2:B8:D1:80:31:C4:5D:F5:61:42:91:DB:FE:26:EC:54:56:E9:68:E6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581C120D3035916AC4C0DE0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7dbb0524-ce0e-3ffd-a5d4-69aef3a12452.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:c1:20:d3:03:59:16:ac:4c:0d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3625d8d0-a040-4ebc-baa8-c1eb947ba00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a1:c5:f5:a6:16:47:f9:29:7e:a8:ab:57:a9: 54:4c:06:b6:e8:3d:27:5d:2a:86:c2:bc:63:00:46: f9:3a:6f:24:c7:9d:b3:f5:17:4d:17:a5:bc:43:e8: d5:1a:4f:aa:be:a2:62:df:e0:bf:0c:37:eb:32:2c: 0d:36:aa:20:42:25:fd:08:32:2b:7e:47:1e:fd:84: 57:30:b4:eb:bd:9d:d6:00:9b:9d:d2:39:f7:63:b4: d8:6d:76:8f:18:40:7c:86:c5:dd:0e:3b:34:de:87: 5e:be:03:20:12:b8:d7:f3:21:63:68:d9:7f:66:00: 9e:5b:bc:b5:bb:27:a8:b0:c5:56:db:d6:47:2a:82: 00:77:cb:87:bd:7c:5e:e9:9b:ef:f6:1a:ff:73:18: 48:76:1a:27:1a:64:93:a1:07:b2:8d:28:c9:78:96: 3a:2c:5e:ec:4c:16:c9:76:85:6c:b3:50:48:7a:f1: 21:93:55:22:d4:16:32:d7:78:29:a5:8e:e4:f0:28: 33:db:6b:1c:6b:fe:7b:91:52:81:90:57:6a:fb:14: d0:f6:9a:a7:21:ca:c0:97:a9:5a:1b:b9:02:6e:1f: a2:2d:4b:79:c7:02:bf:cb:2b:b6:7e:7f:14:7a:4f: 37:cd:7d:99:df:59:c8:52:fe:fb:07:c2:4b:44:50: c6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B8:D1:80:31:C4:5D:F5:61:42:91:DB:FE:26:EC:54:56:E9:68:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7dbb0524-ce0e-3ffd-a5d4-69aef3a12452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:3c:8c:ae:e7:a8:9f:54:71:15:d4:88:03:18:bd:c3:89:6e: 4a:38:60:3e:99:dc:66:51:6f:21:30:d2:87:50:9b:26:65:7e: 70:8a:84:82:92:ed:15:fb:4c:00:01:ec:cf:48:0e:ff:1f:76: 4e:3c:b1:e9:2a:ab:f5:d7:53:3c:fb:d8:b5:76:a8:6a:cb:ad: 3c:42:54:2a:1f:e9:73:6f:09:e6:7c:0b:27:e1:8f:02:f0:7d: f1:d0:8c:95:14:3b:65:57:4f:64:eb:fe:a0:57:49:9a:2e:66: 1f:eb:0a:8e:ef:0c:a9:d5:4c:c4:5e:ea:28:4a:32:d5:e2:b6: c4:32:3c:c2:a9:26:05:48:cd:81:0b:f6:0e:56:a2:de:33:14: 09:c2:72:98:a4:0f:a6:5d:ee:d8:e7:84:aa:82:08:0a:6d:38: 31:24:7f:4d:85:7d:52:c8:59:14:cf:87:7b:af:f7:42:12:19: e3:d1:b0:8c:0a:a2:1b:8c:40:a8:40:27:a8:4d:5b:ef:5d:01: 71:78:d2:3c:a0:a4:19:ed:5b:9f:b6:0d:9b:96:5f:ac:58:fe: 4e:b8:db:89:4e:04:06:99:f1:f3:51:ff:d1:1e:ac:7e:83:1c: 54:9f:50:3e:14:65:a7:ab:39:19:47:7b:ab:8c:ad:d7:53:c1: f5:27:2e:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcEg0wNZFqxMDeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzYyNWQ4ZDAtYTA0MC00ZWJjLWJhYTgtYzFlYjk0N2JhMDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aHF9aYWR/kpfqirV6lUTAa26D0nXSqGwrxj AEb5Om8kx52z9RdNF6W8Q+jVGk+qvqJi3+C/DDfrMiwNNqogQiX9CDIrfkce/YRX MLTrvZ3WAJud0jn3Y7TYbXaPGEB8hsXdDjs03odevgMgErjX8yFjaNl/ZgCeW7y1 uyeosMVW29ZHKoIAd8uHvXxe6Zvv9hr/cxhIdhonGmSToQeyjSjJeJY6LF7sTBbJ doVss1BIevEhk1Ui1BYy13gppY7k8Cgz22sca/57kVKBkFdq+xTQ9pqnIcrAl6la G7kCbh+iLUt5xwK/yyu2fn8Uek83zX2Z31nIUv77B8JLRFDGfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKK40YAxxF31YUKR2/4m7FRW6WjmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2RiYjA1MjQtY2UwZS0z ZmZkLWE1ZDQtNjlhZWYzYTEyNDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKY8jK7nqJ9UcRXUiAMYvcOJbko4YD6Z3GZRbyEw0odQmyZlfnCKhIKS 7RX7TAAB7M9IDv8fdk48sekqq/XXUzz72LV2qGrLrTxCVCof6XNvCeZ8CyfhjwLw ffHQjJUUO2VXT2Tr/qBXSZouZh/rCo7vDKnVTMRe6ihKMtXitsQyPMKpJgVIzYEL 9g5Wot4zFAnCcpikD6Zd7tjnhKqCCAptODEkf02FfVLIWRTPh3uv90ISGePRsIwK ohuMQKhAJ6hNW+9dAXF40jygpBntW5+2DZuWX6xY/k6424lOBAaZ8fNR/9EerH6D HFSfUD4UZaerORlHe6uMrddTwfUnLrI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:38 2025 by rpki-client