$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a520675-6613-388a-be6a-1f5023da6b64.roa File: 8a520675-6613-388a-be6a-1f5023da6b64.roa (raw, json) Hash identifier: uydmumPeaWLLTZk7HAeMLRSimDNag55og6h2PiucYrU= Subject key identifier: C4:9D:B6:4D:7D:80:EE:58:E9:BF:19:71:8F:FC:A0:3B:52:39:59:B8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5812F870998779FF6DD5860 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a520675-6613-388a-be6a-1f5023da6b64.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:2f:87:09:98:77:9f:f6:dd:58:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2425db50-e9eb-4e1a-b473-db7d84abdbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b6:47:b6:08:ae:68:94:6c:59:9f:46:89:29: 0c:a7:13:0a:f8:e4:aa:e1:37:59:53:2d:9f:7e:e6: e1:6f:7e:47:e0:97:1d:18:6f:12:b1:36:71:e2:71: 8c:e4:4a:20:e0:02:e8:ce:cf:15:bd:0c:09:b7:44: 31:5c:bb:6c:86:87:a6:9c:99:7d:71:eb:da:1d:c4: e8:12:4c:f5:f8:16:80:7f:f8:21:36:00:c7:11:71: 52:42:f8:41:d7:14:2e:96:08:f8:cf:2d:16:87:7c: 70:bf:9b:14:0d:11:1a:53:40:07:bf:17:b4:12:c0: 0d:55:8f:2b:c8:88:6c:35:21:d6:21:d5:1b:e9:63: aa:9a:0d:10:82:33:2a:3b:eb:85:7d:71:24:d8:80: a7:7f:35:09:6a:c9:a4:f4:61:f1:84:0c:76:fc:69: 8c:1f:09:21:57:e4:fd:e9:09:bf:5b:74:64:53:ec: a0:30:a2:25:9b:af:a6:24:38:5f:4a:ef:4c:f0:8e: 42:5f:65:aa:ee:ef:6f:ae:fd:c9:7b:98:5d:24:ce: 93:98:4b:50:70:4e:83:51:8d:7e:4c:07:2e:40:51: 6b:74:a6:96:ad:d9:2e:5e:33:4f:d0:4d:8a:a1:ff: 80:41:01:c2:43:36:c1:25:23:70:cc:b6:24:8a:4f: ae:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9D:B6:4D:7D:80:EE:58:E9:BF:19:71:8F:FC:A0:3B:52:39:59:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a520675-6613-388a-be6a-1f5023da6b64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:34:9f:a9:ec:bd:6d:48:73:4e:81:29:b2:fe:be:bc:3f:64: b1:e6:d1:5d:95:c2:10:0d:4f:99:a7:03:19:7c:48:84:d2:1a: 1d:50:de:71:e1:b8:e0:8c:45:53:7a:c4:92:18:d2:54:bd:ff: 0d:b0:66:36:61:ca:b6:ff:aa:98:d4:29:d7:2d:32:4b:3c:6e: a5:b3:7d:90:a6:68:ba:8d:e9:8f:9b:9d:82:8f:94:b1:51:52: 36:c0:10:f9:73:df:b6:43:9d:a9:30:0b:2a:29:fc:c2:07:8e: 65:55:6d:59:ab:75:ee:10:b1:51:2d:89:db:a7:fc:78:18:db: 8f:94:44:d2:3a:99:49:f0:42:b5:bf:41:73:af:41:dc:19:ef: e5:c1:65:70:60:e7:8b:f7:4c:fe:7e:bb:ff:e9:6f:5c:06:44: e2:fa:61:0e:61:e6:d8:09:4b:79:a9:0b:5c:0c:19:28:a6:6b: 42:76:9f:75:a0:4e:65:04:f3:6b:f0:72:18:7f:76:ba:13:9c: 90:74:4b:7a:e3:7b:ee:af:8a:7d:e0:01:3a:66:4e:de:63:e4: e7:3e:32:1e:75:77:7b:82:18:ab:17:35:66:9f:4d:43:fd:49: f0:5f:5f:d1:3c:7d:14:46:63:69:94:47:d9:89:7d:a4:d2:8b: 40:0f:02:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgS+HCZh3n/bdWGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjQyNWRiNTAtZTllYi00ZTFhLWI0NzMtZGI3ZDg0YWJkYmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bZHtgiuaJRsWZ9GiSkMpxMK+OSq4TdZUy2f fubhb35H4JcdGG8SsTZx4nGM5Eog4ALozs8VvQwJt0QxXLtshoemnJl9cevaHcTo Ekz1+BaAf/ghNgDHEXFSQvhB1xQulgj4zy0Wh3xwv5sUDREaU0AHvxe0EsANVY8r yIhsNSHWIdUb6WOqmg0QgjMqO+uFfXEk2ICnfzUJasmk9GHxhAx2/GmMHwkhV+T9 6Qm/W3RkU+ygMKIlm6+mJDhfSu9M8I5CX2Wq7u9vrv3Je5hdJM6TmEtQcE6DUY1+ TAcuQFFrdKaWrdkuXjNP0E2Kof+AQQHCQzbBJSNwzLYkik+uPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSdtk19gO5Y6b8ZcY/8oDtSOVm4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGE1MjA2NzUtNjYxMy0z ODhhLWJlNmEtMWY1MDIzZGE2YjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANc0n6nsvW1Ic06BKbL+vrw/ZLHm0V2VwhANT5mnAxl8SITSGh1Q3nHh uOCMRVN6xJIY0lS9/w2wZjZhyrb/qpjUKdctMks8bqWzfZCmaLqN6Y+bnYKPlLFR UjbAEPlz37ZDnakwCyop/MIHjmVVbVmrde4QsVEtidun/HgY24+URNI6mUnwQrW/ QXOvQdwZ7+XBZXBg54v3TP5+u//pb1wGROL6YQ5h5tgJS3mpC1wMGSima0J2n3Wg TmUE82vwchh/droTnJB0S3rje+6vin3gATpmTt5j5Oc+Mh51d3uCGKsXNWafTUP9 SfBfX9E8fRRGY2mUR9mJfaTSi0APArE= -----END CERTIFICATE-----Generated at Fri Apr 11 23:08:47 2025 by rpki-client