$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d6a8b11-b4ab-3738-b1bc-5fd29d92f317.roa File: 9d6a8b11-b4ab-3738-b1bc-5fd29d92f317.roa (raw, json) Hash identifier: rQtdD1PKwWyjbwWLnz6Lx7gYL1EDE3uDUxRTPl6VXX8= Subject key identifier: 95:70:26:13:1C:1C:10:BB:39:49:5C:59:1C:9A:DA:00:69:E0:57:03 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581BE3F93134BE8F403FA40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d6a8b11-b4ab-3738-b1bc-5fd29d92f317.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:be:3f:93:13:4b:e8:f4:03:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e9ab965d-bc15-42a1-8812-279787e4386e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6e:8a:33:62:f9:68:04:82:24:b0:f4:a7:87: 91:e0:a7:85:df:9c:79:97:5c:1f:25:4c:ab:20:d5: 2b:63:f9:9c:8e:86:2a:e8:aa:d3:c8:64:8b:3d:05: 2e:a2:de:0d:ea:5c:3b:79:03:21:c3:d3:27:c9:aa: 5e:e0:b4:a7:09:6c:31:a5:67:0d:3f:9f:a9:53:2b: 9a:ff:8a:33:ab:56:5b:11:3a:fe:1e:65:c9:a2:00: 13:ab:5c:a1:68:eb:c5:db:5c:ee:a8:03:89:92:8a: f1:f3:38:33:fd:c1:98:20:57:7e:04:00:02:60:ac: c9:1a:2a:12:0a:06:e1:ae:4d:67:a8:07:92:44:f0: f1:c0:f4:d5:d3:d9:7d:12:3c:85:19:17:78:da:91: 59:ab:1b:95:d8:c7:98:bd:1e:42:d0:4e:d5:f5:46: a9:95:10:21:b8:88:92:8a:65:39:13:6f:fa:34:fa: 39:07:07:c9:e5:ce:ad:fe:9b:4a:02:d5:c3:dd:f8: b5:70:45:48:70:39:02:28:6a:bb:7a:2f:1d:ad:f2: 3d:39:bc:61:4a:38:07:d1:90:3b:0a:bb:f8:5e:f7: 93:88:ab:ec:58:ee:e7:83:28:75:c7:12:b9:a5:43: 63:1b:83:c5:ea:9b:c9:b4:78:c5:6f:2d:bd:64:51: 68:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:70:26:13:1C:1C:10:BB:39:49:5C:59:1C:9A:DA:00:69:E0:57:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d6a8b11-b4ab-3738-b1bc-5fd29d92f317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e7:31:60:de:fa:f2:56:8b:34:73:8d:16:53:ef:4e:02:20: fd:f3:f7:6f:fd:6c:e9:02:b4:d6:71:02:c3:a6:0a:48:5b:d6: 59:9b:26:40:43:0a:d8:89:69:fd:ae:8b:21:a8:d9:0f:63:ac: 14:9a:bd:76:bc:4e:75:0e:da:ce:c0:f4:5f:ba:35:8c:82:28: 56:a8:62:63:5c:2e:ff:f7:7a:f9:70:b7:12:cc:22:ba:3e:aa: 80:88:90:2a:0e:51:26:94:9d:02:d8:79:91:71:76:82:ea:97: 81:54:1b:81:a3:31:bc:06:9c:7e:99:f6:f7:72:24:d0:c0:03: de:ba:32:30:44:68:2b:8a:52:4f:e3:5d:1a:f1:1c:aa:39:77: 0f:a0:e8:87:e8:b5:d9:d0:71:3e:89:b6:5e:45:aa:03:7a:12: 6b:23:e2:81:8f:8e:44:bd:d6:5e:a0:19:d5:a5:f9:9a:2e:b1: ae:73:98:bf:f7:dd:34:31:80:40:9f:55:af:15:e2:c8:ac:4d: 5f:93:fb:1f:b2:ae:0d:27:9a:d5:aa:12:44:a6:54:1f:4f:4e: 26:e2:29:94:16:f0:14:50:4e:de:c4:f7:e8:62:fc:1a:d5:23: 64:0b:e1:d6:87:1e:9a:59:b0:73:c9:c9:7e:f0:f0:5d:d5:2b: 9f:c2:ab:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgb4/kxNL6PQD+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTlhYjk2NWQtYmMxNS00MmExLTg4MTItMjc5Nzg3ZTQzODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu26KM2L5aASCJLD0p4eR4KeF35x5l1wfJUyr INUrY/mcjoYq6KrTyGSLPQUuot4N6lw7eQMhw9Mnyape4LSnCWwxpWcNP5+pUyua /4ozq1ZbETr+HmXJogATq1yhaOvF21zuqAOJkorx8zgz/cGYIFd+BAACYKzJGioS Cgbhrk1nqAeSRPDxwPTV09l9EjyFGRd42pFZqxuV2MeYvR5C0E7V9UaplRAhuIiS imU5E2/6NPo5BwfJ5c6t/ptKAtXD3fi1cEVIcDkCKGq7ei8drfI9ObxhSjgH0ZA7 Crv4XveTiKvsWO7ngyh1xxK5pUNjG4PF6pvJtHjFby29ZFFozwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVwJhMcHBC7OUlcWRya2gBp4FcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWQ2YThiMTEtYjRhYi0z NzM4LWIxYmMtNWZkMjlkOTJmMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELnMWDe+vJWizRzjRZT704CIP3z92/9bOkCtNZxAsOmCkhb1lmbJkBD CtiJaf2uiyGo2Q9jrBSavXa8TnUO2s7A9F+6NYyCKFaoYmNcLv/3evlwtxLMIro+ qoCIkCoOUSaUnQLYeZFxdoLql4FUG4GjMbwGnH6Z9vdyJNDAA966MjBEaCuKUk/j XRrxHKo5dw+g6IfotdnQcT6Jtl5FqgN6Emsj4oGPjkS91l6gGdWl+Zousa5zmL/3 3TQxgECfVa8V4sisTV+T+x+yrg0nmtWqEkSmVB9PTibiKZQW8BRQTt7E9+hi/BrV I2QL4daHHppZsHPJyX7w8F3VK5/Cqxk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:41 2025 by rpki-client