$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f396276-3d59-34ad-8ee1-c940abc4c9c8.roa File: 8f396276-3d59-34ad-8ee1-c940abc4c9c8.roa (raw, json) Hash identifier: B4rULHs+Ly284yFP3T3+LgjJTi2LLGWipqZ/ywt6VAw= Subject key identifier: 21:9D:F9:CE:0D:7E:5A:F3:4B:05:3C:A4:29:21:2A:B6:43:C9:87:68 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581CC05F2F0A8C2D2B5EA80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f396276-3d59-34ad-8ee1-c940abc4c9c8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.198.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:cc:05:f2:f0:a8:c2:d2:b5:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=272c7354-060b-4af8-a5dd-f901b715f87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:83:1c:03:a4:a6:7b:69:80:7b:90:89:9e:63: a3:ac:91:3a:6a:7e:06:f7:f6:b9:18:e2:18:cc:bb: b9:05:8a:bd:86:59:ee:4a:e8:ca:ae:b0:2f:29:9b: ae:50:9a:ee:d0:b0:57:38:d8:95:6b:e2:28:f1:1a: a4:60:75:da:4b:63:42:0f:39:8e:67:d1:4d:4c:90: e6:4e:72:fe:55:13:ce:aa:d9:5a:68:0e:80:71:14: 52:60:65:88:b2:a1:9a:7c:4c:e1:87:03:9f:63:6f: ac:e0:ab:49:27:2f:f6:36:9f:f5:86:11:0c:c1:e5: f2:b7:79:59:5b:04:9e:07:28:b2:77:07:aa:d1:43: 95:1a:a8:73:c9:d9:9d:ae:f5:2b:bf:89:b9:b2:f4: ea:60:4e:8f:1c:20:b7:3b:57:af:f4:b6:26:c5:25: 80:53:ac:be:1d:50:53:be:cf:bc:02:f6:4d:b4:ec: 90:8c:9a:57:6f:2c:64:32:df:5c:36:60:be:a2:50: 71:75:92:10:cb:39:12:8e:25:b2:48:2c:fa:4b:63: 56:c0:e3:e8:0e:fc:0e:8f:b8:a7:91:ef:c8:70:d7: ef:b9:21:84:ea:49:bf:15:7d:18:84:bc:d6:78:86: 22:fb:e0:0c:13:1d:b7:5a:20:89:79:66:f4:5f:86: fc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9D:F9:CE:0D:7E:5A:F3:4B:05:3C:A4:29:21:2A:B6:43:C9:87:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f396276-3d59-34ad-8ee1-c940abc4c9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:d7:f7:6d:a9:51:fc:2b:91:48:5f:9f:7a:48:1f:c8:07:18: 2b:65:da:3f:96:9a:f9:c2:fd:7f:b1:5a:7b:e3:70:f9:a4:51: 11:20:94:34:53:7e:77:33:b6:e3:9b:02:aa:0f:2f:7c:a1:34: 0c:94:8c:f3:fd:56:f2:a9:1f:73:4e:24:e7:34:63:f4:7c:47: ad:9d:4b:c8:1a:4b:6c:12:3c:6c:a7:3a:7d:4c:4b:86:ab:c4: 8f:9d:d2:03:67:5f:2e:97:42:4a:d4:37:cc:03:93:a4:2f:ba: d5:9f:61:2e:4d:35:be:42:6d:7c:4f:b0:1d:30:12:89:4b:71: 48:8e:65:97:af:20:ae:c3:5e:e0:f1:41:8c:d4:9b:8b:55:f3: 61:ff:b5:85:fa:4f:5c:2d:68:73:35:3a:ff:fa:9b:af:2f:9e: 89:29:a6:0e:87:02:4c:6f:dd:97:ac:c4:77:66:7e:a4:db:c6: e6:12:e6:50:51:6e:94:a6:59:5b:6f:82:46:1f:a5:d3:54:14: d7:5c:37:b5:8e:f0:56:cb:8c:03:76:0c:ef:1e:7f:ff:16:93: d6:c9:95:3d:e4:63:8f:ae:d5:d7:4d:8e:8c:58:fc:6b:a1:a3: 3b:08:0f:2a:7b:46:ea:50:e9:66:8e:b4:c1:d2:35:4f:93:6d: fe:91:af:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcwF8vCowtK16oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjcyYzczNTQtMDYwYi00YWY4LWE1ZGQtZjkwMWI3MTVmODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4McA6Sme2mAe5CJnmOjrJE6an4G9/a5GOIY zLu5BYq9hlnuSujKrrAvKZuuUJru0LBXONiVa+Io8RqkYHXaS2NCDzmOZ9FNTJDm TnL+VRPOqtlaaA6AcRRSYGWIsqGafEzhhwOfY2+s4KtJJy/2Np/1hhEMweXyt3lZ WwSeByiydweq0UOVGqhzydmdrvUrv4m5svTqYE6PHCC3O1ev9LYmxSWAU6y+HVBT vs+8AvZNtOyQjJpXbyxkMt9cNmC+olBxdZIQyzkSjiWySCz6S2NWwOPoDvwOj7in ke/IcNfvuSGE6km/FX0YhLzWeIYi++AMEx23WiCJeWb0X4b86QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGd+c4NflrzSwU8pCkhKrZDyYdoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGYzOTYyNzYtM2Q1OS0z NGFkLThlZTEtYzk0MGFiYzRjOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3X922pUfwrkUhfn3pIH8gHGCtl2j+WmvnC/X+xWnvjcPmkUREglDRT fncztuObAqoPL3yhNAyUjPP9VvKpH3NOJOc0Y/R8R62dS8gaS2wSPGynOn1MS4ar xI+d0gNnXy6XQkrUN8wDk6QvutWfYS5NNb5CbXxPsB0wEolLcUiOZZevIK7DXuDx QYzUm4tV82H/tYX6T1wtaHM1Ov/6m68vnokppg6HAkxv3ZesxHdmfqTbxuYS5lBR bpSmWVtvgkYfpdNUFNdcN7WO8FbLjAN2DO8ef/8Wk9bJlT3kY4+u1ddNjoxY/Guh ozsIDyp7RupQ6WaOtMHSNU+Tbf6Rr1o= -----END CERTIFICATE-----Generated at Fri Apr 11 22:35:31 2025 by rpki-client