$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/91611b7b-3404-35bb-88e5-b714ed1e2c93.roa File: 91611b7b-3404-35bb-88e5-b714ed1e2c93.roa (raw, json) Hash identifier: 6kN9mIcLdSmORCV0AuG1n0j+pd2s5c10JEQ6KKgUGes= Subject key identifier: 16:0C:1C:5B:01:77:BD:77:FA:98:21:77:8D:3F:F6:94:86:2C:54:AF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581CA51005856BB98605EE0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/91611b7b-3404-35bb-88e5-b714ed1e2c93.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.197.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:ca:51:00:58:56:bb:98:60:5e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e256261c-bd9d-4d75-b5eb-45c64c76d162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d8:5d:90:8a:02:e9:c0:2e:3c:a2:08:0c:7f: d5:d1:07:64:80:ba:0b:12:f1:df:2e:c5:0f:ac:a4: 0a:89:21:f2:65:61:4a:0d:50:1a:2c:89:90:d0:af: 54:12:af:eb:6c:dd:ad:20:14:9b:1d:56:67:11:9f: 36:ce:c8:9b:c8:b5:d5:72:aa:f0:48:9b:84:82:c6: ab:55:22:8e:9e:98:96:ba:db:a6:97:66:2a:61:50: 67:c6:fd:af:c5:6d:fc:36:fd:20:e6:af:28:b0:01: c9:38:a0:fd:44:20:f5:ec:35:82:1b:cb:8b:9b:41: be:95:da:69:60:b9:72:08:69:af:83:c7:4d:5d:0f: 31:1c:28:2b:68:52:2e:c2:11:49:dc:2b:1e:54:3d: e1:67:9c:9b:1d:95:62:3e:e2:5a:30:1d:9f:25:c1: fa:22:28:d4:0c:eb:b0:93:d6:87:8b:44:94:d3:9c: 05:b0:30:f9:3d:c0:ce:55:e7:0f:5a:7b:aa:e5:0a: 44:22:18:7b:93:00:cf:a5:ce:6d:61:3a:05:77:58: 53:8e:5e:70:fc:f1:ab:54:07:53:a4:2b:40:9e:a6: 69:18:fe:5c:98:66:6a:ce:c7:7e:f4:69:85:84:cb: 28:67:05:2f:5b:5f:dc:fc:68:dc:bd:76:7c:95:4b: 0c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0C:1C:5B:01:77:BD:77:FA:98:21:77:8D:3F:F6:94:86:2C:54:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/91611b7b-3404-35bb-88e5-b714ed1e2c93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1a:f8:f8:dd:b4:b7:40:45:63:49:4b:22:93:6a:af:9a:09: 9b:53:a5:fd:d5:a1:6c:d4:c3:ca:bf:af:e6:90:b5:84:31:1d: 9b:a1:3e:2a:b9:de:2a:ff:62:89:18:70:4a:15:ae:98:c5:e1: 2b:d9:75:df:ec:77:93:b3:e8:18:51:8d:cd:e1:cb:77:a8:b4: 3a:22:fb:90:56:8b:dc:47:11:69:0e:f7:be:1a:68:99:ef:7a: 19:3a:a2:11:d0:e1:98:92:7a:44:0b:2e:f6:d0:c2:cf:d6:96: a4:ff:24:34:8f:17:ce:b8:7a:f9:b3:bf:94:b5:d7:e7:7b:5d: f2:f2:ff:de:50:70:d4:8d:d4:ec:06:e7:02:02:f7:f7:66:e4: 3f:5a:b1:ae:21:eb:bc:c8:c7:20:87:c9:0d:0f:57:54:5a:3f: d9:15:e3:16:d7:08:81:28:2f:1f:b4:1f:5b:be:c0:9d:5e:5a: 70:93:e2:6e:41:55:5a:d0:16:27:ef:1e:70:ac:1c:c3:e3:ff: 05:a2:7e:a7:f6:4c:c5:95:c7:db:52:40:75:a6:8f:72:bd:49: 52:c0:20:91:ed:e5:61:20:7c:83:20:b7:77:d2:59:37:da:9a: bb:de:64:05:35:f4:73:01:f9:d6:14:c8:2b:5a:d1:30:00:96: 95:f8:f9:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcpRAFhWu5hgXuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTI1NjI2MWMtYmQ5ZC00ZDc1LWI1ZWItNDVjNjRjNzZkMTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNhdkIoC6cAuPKIIDH/V0QdkgLoLEvHfLsUP rKQKiSHyZWFKDVAaLImQ0K9UEq/rbN2tIBSbHVZnEZ82zsibyLXVcqrwSJuEgsar VSKOnpiWutuml2YqYVBnxv2vxW38Nv0g5q8osAHJOKD9RCD17DWCG8uLm0G+ldpp YLlyCGmvg8dNXQ8xHCgraFIuwhFJ3CseVD3hZ5ybHZViPuJaMB2fJcH6IijUDOuw k9aHi0SU05wFsDD5PcDOVecPWnuq5QpEIhh7kwDPpc5tYToFd1hTjl5w/PGrVAdT pCtAnqZpGP5cmGZqzsd+9GmFhMsoZwUvW1/c/GjcvXZ8lUsMwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYMHFsBd713+pghd40/9pSGLFSvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTE2MTFiN2ItMzQwNC0z NWJiLTg4ZTUtYjcxNGVkMWUyYzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsa+PjdtLdARWNJSyKTaq+aCZtTpf3VoWzUw8q/r+aQtYQxHZuhPiq5 3ir/YokYcEoVrpjF4SvZdd/sd5Oz6BhRjc3hy3eotDoi+5BWi9xHEWkO974aaJnv ehk6ohHQ4ZiSekQLLvbQws/WlqT/JDSPF864evmzv5S11+d7XfLy/95QcNSN1OwG 5wIC9/dm5D9asa4h67zIxyCHyQ0PV1RaP9kV4xbXCIEoLx+0H1u+wJ1eWnCT4m5B VVrQFifvHnCsHMPj/wWifqf2TMWVx9tSQHWmj3K9SVLAIJHt5WEgfIMgt3fSWTfa mrveZAU19HMB+dYUyCta0TAAlpX4+ak= -----END CERTIFICATE-----Generated at Fri Apr 11 22:42:37 2025 by rpki-client