$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/973f885c-3a19-3167-b4cc-cd0bbcc63df1.roa File: 973f885c-3a19-3167-b4cc-cd0bbcc63df1.roa (raw, json) Hash identifier: sz3XUuoc46Jaim2DQY1/oto5EcnwOhVC6LEB9osBiVI= Subject key identifier: 49:24:8B:D3:61:1A:A1:D7:CE:D6:9C:60:CA:39:3C:36:AC:1E:7D:8C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB204A31C00F78BF1D7A48 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/973f885c-3a19-3167-b4cc-cd0bbcc63df1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.196.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:20:4a:31:c0:0f:78:bf:1d:7a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7f3d11e1-d8eb-41a9-8d2c-a251bd9abcd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:df:2d:a2:3e:d5:3c:44:54:7a:99:2e:57:ff: 0d:bd:ac:6a:74:05:6b:f5:c0:5c:fe:cb:f6:b9:d4: 3e:99:a0:dd:6a:47:00:c5:19:38:5b:ca:60:36:c4: 4d:a8:67:dc:43:d7:73:7a:a1:69:52:fd:fb:73:76: ec:e3:a6:e4:16:a3:4a:7e:0e:97:e0:8d:df:7d:31: 02:ae:52:77:cf:fa:76:08:b9:94:11:84:e5:3a:b8: cc:1c:5d:92:eb:ec:27:e9:dd:8b:69:29:f4:37:9c: 7d:96:e4:7f:2b:98:ae:e0:75:b9:bc:7f:03:9f:a3: 26:3b:f2:e9:70:e3:5f:74:4f:75:b8:bd:11:85:eb: 11:40:1f:85:00:2c:d8:8a:68:a1:69:12:e6:3e:d2: bb:07:de:a9:21:a2:a4:5f:e4:23:5c:85:c1:07:2a: b9:ca:b1:1b:59:f9:21:5e:1c:0a:ca:58:c7:07:af: 84:ad:32:df:db:6e:2e:20:72:7b:83:93:db:e5:90: 91:e0:ef:43:90:b8:d3:13:f2:9c:bd:22:62:b6:97: 52:ea:80:b2:45:12:5a:27:7c:b1:45:e4:34:bd:8c: 43:3e:4d:50:e7:19:9e:3e:73:e4:0b:38:a8:f7:6c: 24:2e:79:72:72:34:51:7a:7f:2d:f7:08:30:1c:17: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:24:8B:D3:61:1A:A1:D7:CE:D6:9C:60:CA:39:3C:36:AC:1E:7D:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/973f885c-3a19-3167-b4cc-cd0bbcc63df1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:69:7f:e5:f8:74:a3:9e:6f:9d:20:82:9a:f0:9a:39:f9:40: 62:5b:dc:fd:e5:00:58:40:f9:63:17:13:10:29:92:49:22:c2: d8:84:20:69:b3:2b:16:f4:2c:2f:15:cb:9a:8c:ce:58:a5:b4: ce:fe:02:67:3b:6b:fc:aa:85:d5:f2:a0:01:6c:78:c9:3e:ac: 13:84:83:0b:1b:00:de:69:ec:82:57:5e:d1:56:b1:fa:db:33: 56:a7:b6:46:c4:da:89:32:b1:6c:4d:8a:18:e6:cc:de:59:16: 55:1b:7e:b6:a2:47:fa:3b:7d:20:ae:8a:6a:a6:cd:e9:ca:c3: 49:a6:38:08:7d:1e:6b:63:b2:11:24:f8:9d:87:cb:1c:e0:e9: f4:34:5c:84:10:e6:d6:2d:8f:ce:66:85:3d:95:c0:91:8e:e0: a5:5e:ed:5b:c3:d7:05:67:f1:50:9b:ed:e7:dc:85:98:19:6a: 20:a4:43:29:15:10:3d:f6:e6:af:f2:70:cc:08:e7:09:32:91: d2:5e:49:62:da:82:2b:04:f6:b2:2d:5e:af:94:6e:95:08:39: d8:84:8d:cb:6a:7a:bc:85:ab:20:f7:13:4f:03:4a:72:b7:b1: 76:35:05:8c:96:99:05:43:76:73:81:83:41:06:8f:38:22:75: d6:71:28:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuyBKMcAPeL8dekgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2YzZDExZTEtZDhlYi00MWE5LThkMmMtYTI1MWJkOWFiY2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN8toj7VPERUepkuV/8NvaxqdAVr9cBc/sv2 udQ+maDdakcAxRk4W8pgNsRNqGfcQ9dzeqFpUv37c3bs46bkFqNKfg6X4I3ffTEC rlJ3z/p2CLmUEYTlOrjMHF2S6+wn6d2LaSn0N5x9luR/K5iu4HW5vH8Dn6MmO/Lp cONfdE91uL0RhesRQB+FACzYimihaRLmPtK7B96pIaKkX+QjXIXBByq5yrEbWfkh XhwKyljHB6+ErTLf224uIHJ7g5Pb5ZCR4O9DkLjTE/KcvSJitpdS6oCyRRJaJ3yx ReQ0vYxDPk1Q5xmePnPkCzio92wkLnlycjRRen8t9wgwHBfCmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkki9NhGqHXztacYMo5PDasHn2MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTczZjg4NWMtM2ExOS0z MTY3LWI0Y2MtY2QwYmJjYzYzZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFpf+X4dKOeb50ggprwmjn5QGJb3P3lAFhA+WMXExApkkkiwtiEIGmz Kxb0LC8Vy5qMzliltM7+Amc7a/yqhdXyoAFseMk+rBOEgwsbAN5p7IJXXtFWsfrb M1antkbE2okysWxNihjmzN5ZFlUbfraiR/o7fSCuimqmzenKw0mmOAh9HmtjshEk +J2Hyxzg6fQ0XIQQ5tYtj85mhT2VwJGO4KVe7VvD1wVn8VCb7efchZgZaiCkQykV ED325q/ycMwI5wkykdJeSWLagisE9rItXq+UbpUIOdiEjctqeryFqyD3E08DSnK3 sXY1BYyWmQVDdnOBg0EGjzgiddZxKCY= -----END CERTIFICATE-----Generated at Fri Jun 6 17:45:08 2025 by rpki-client