$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9717bcfb-34eb-3b40-a0eb-35d5ff90456a.roa File: 9717bcfb-34eb-3b40-a0eb-35d5ff90456a.roa (raw, json) Hash identifier: hafHhV2+Hv7N0qf2aU1b4SFzVSdd2ZLlCnieagjO1Yg= Subject key identifier: 83:3C:C4:1C:A7:52:5D:A8:26:CC:61:5F:3D:DE:70:91:B9:1D:F1:95 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E31DE97D01C4C16A97BE0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9717bcfb-34eb-3b40-a0eb-35d5ff90456a.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 99.197.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:31:de:97:d0:1c:4c:16:a9:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=bfefd057-428c-446c-b4a3-a56cfdd0d40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4f:9f:7d:ec:ba:f5:32:7d:78:c6:53:35:7d: ba:ae:68:94:e7:1a:79:09:18:7f:05:15:5f:6d:a0: c4:fd:db:1b:2a:da:2e:55:e0:22:14:8b:05:68:2a: 62:6e:d8:4a:af:2f:ee:b1:b8:02:12:f1:53:41:38: e1:4d:1b:b9:f0:3c:11:97:72:35:e0:51:ac:ff:9f: 14:07:57:39:fb:83:be:97:15:09:a5:6f:6e:fc:99: bb:c0:e7:3f:41:f9:36:fb:0f:d2:de:da:2c:3c:f1: cf:99:48:0e:2f:6a:02:38:94:a9:ca:b1:87:57:6d: d1:54:18:3d:e5:5e:8f:1d:03:ae:05:66:67:a6:71: 41:f6:3a:80:e6:6b:37:39:33:fa:25:1b:96:2c:cb: 42:03:c7:ba:72:3c:0b:65:e4:67:0c:f7:4f:ad:c1: 4b:5d:38:9c:f9:ed:d2:ed:cc:de:2b:90:4a:de:39: 17:ae:f8:01:d0:44:aa:7f:c5:7b:7d:5a:b6:e6:27: c1:df:17:9d:cb:ae:b8:81:f2:05:18:59:f1:e6:47: 20:d3:70:4a:eb:be:82:fb:1e:a8:66:b3:88:f5:d9: 91:52:81:5d:80:ad:e7:07:2a:d1:17:eb:b4:30:8c: 67:03:21:d3:64:98:10:b4:34:0e:02:33:5d:28:dc: 1e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3C:C4:1C:A7:52:5D:A8:26:CC:61:5F:3D:DE:70:91:B9:1D:F1:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9717bcfb-34eb-3b40-a0eb-35d5ff90456a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:5a:62:a9:62:f4:4c:42:05:e5:af:f9:03:27:b2:75:ea:c5: 3e:d5:a5:b2:e3:c5:f0:31:3b:0a:3b:4b:e7:7e:a7:3a:fe:4a: d0:bd:5c:56:d5:e3:e8:7c:09:60:ea:ed:58:58:a9:a9:56:5a: 45:cf:e1:40:2f:a9:85:47:22:a8:be:f1:d6:15:26:49:7a:ad: 84:47:7b:f5:55:1b:f0:f6:68:b3:ca:c9:d1:78:31:cd:25:93: cb:22:46:31:a0:f9:1c:db:74:20:0b:eb:bd:64:c5:a0:5d:b9: b4:1d:fc:4c:a6:5d:37:ca:a6:f7:c6:cf:b9:cc:38:14:9a:f1: bb:66:cb:c2:e4:93:95:87:ee:bb:84:28:ff:40:75:b5:49:a5: 4b:9f:69:20:87:94:13:3c:a5:af:59:75:c3:74:36:16:af:8b: 67:8e:b1:fc:64:5b:25:7d:8b:84:cc:ac:10:17:e2:f7:4b:e5: 80:61:6d:76:7d:75:30:1a:99:0e:c3:fa:11:82:c5:32:8f:0d: 04:4a:08:87:44:c4:8c:76:b7:f6:d5:6f:9c:d3:ff:44:49:f5: 94:29:97:15:4c:e6:71:33:fb:47:18:27:6c:4f:fc:cb:e4:79: 3c:c5:06:c0:d9:d4:30:7f:b9:90:23:dd:2c:54:b4:9f:6a:6e: 88:bc:53:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPjHel9AcTBape+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk YmZlZmQwNTctNDI4Yy00NDZjLWI0YTMtYTU2Y2ZkZDBkNDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU+ffey69TJ9eMZTNX26rmiU5xp5CRh/BRVf baDE/dsbKtouVeAiFIsFaCpibthKry/usbgCEvFTQTjhTRu58DwRl3I14FGs/58U B1c5+4O+lxUJpW9u/Jm7wOc/Qfk2+w/S3tosPPHPmUgOL2oCOJSpyrGHV23RVBg9 5V6PHQOuBWZnpnFB9jqA5ms3OTP6JRuWLMtCA8e6cjwLZeRnDPdPrcFLXTic+e3S 7czeK5BK3jkXrvgB0ESqf8V7fVq25ifB3xedy664gfIFGFnx5kcg03BK676C+x6o ZrOI9dmRUoFdgK3nByrRF+u0MIxnAyHTZJgQtDQOAjNdKNweRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIM8xBynUl2oJsxhXz3ecJG5HfGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTcxN2JjZmItMzRlYi0z YjQwLWEwZWItMzVkNWZmOTA0NTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8X4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1aYqli9ExCBeWv+QMnsnXqxT7VpbLjxfAxOwo7S+d+pzr+StC9XFbV 4+h8CWDq7VhYqalWWkXP4UAvqYVHIqi+8dYVJkl6rYRHe/VVG/D2aLPKydF4Mc0l k8siRjGg+RzbdCAL671kxaBdubQd/EymXTfKpvfGz7nMOBSa8btmy8Lkk5WH7ruE KP9AdbVJpUufaSCHlBM8pa9ZdcN0Nhavi2eOsfxkWyV9i4TMrBAX4vdL5YBhbXZ9 dTAamQ7D+hGCxTKPDQRKCIdExIx2t/bVb5zT/0RJ9ZQplxVM5nEz+0cYJ2xP/Mvk eTzFBsDZ1DB/uZAj3SxUtJ9qboi8U9s= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:36 2024 by rpki-client on console-ams.rpki-client.org