$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1c9ba88-2946-3b25-9469-aefb99e5021d.roa File: a1c9ba88-2946-3b25-9469-aefb99e5021d.roa (raw, json) Hash identifier: o7ZsY9lNnTVxsmzshSo62cR0R7pSHE7ZbO456CVEr00= Subject key identifier: EF:4F:E0:26:42:4E:AB:59:9C:AD:54:73:77:39:3F:D6:D3:CF:95:7E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5813639BC05E7A723F9B480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1c9ba88-2946-3b25-9469-aefb99e5021d.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:36:39:bc:05:e7:a7:23:f9:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f36d8e92-c8c8-4d1e-9a7a-5149fd03a3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:5d:3e:de:af:e6:ab:b3:de:ce:00:84:5d: e2:c5:64:0d:ed:91:b3:cf:9f:f9:30:99:89:a9:3f: b5:17:a1:cc:da:70:24:bd:29:d8:3a:37:d2:ea:d7: 5a:26:f4:94:d6:fb:6f:82:7e:77:f0:b2:2e:8b:69: f3:d9:4b:ce:ca:bc:c0:69:5f:a8:40:6e:df:bb:be: 48:21:fc:51:f4:29:76:b3:bf:50:f5:24:0b:e3:88: e1:3a:ac:4e:8a:f6:98:d5:82:9d:20:87:79:8c:7d: a5:3d:b9:c9:99:44:92:ed:8c:76:94:5b:1e:e7:db: ec:f6:5a:74:39:97:2f:af:8e:87:dd:7b:c0:22:b1: ad:48:1f:5e:fa:a4:a9:fc:84:a8:56:7e:e5:b5:8c: 3e:73:05:ea:af:36:35:b5:bb:88:b4:47:5a:6f:50: b4:d4:6c:c0:62:16:ec:93:8e:12:18:99:9f:5f:12: 09:8b:7f:07:66:3b:71:29:db:ab:f1:1f:a0:aa:4c: e2:96:12:24:3c:cb:52:23:c5:bf:79:e8:23:bb:39: cf:c4:5a:fc:d3:09:8e:47:50:e5:af:25:f8:9d:1c: 68:f9:dc:1e:a9:89:e9:49:f1:d1:e9:75:3b:74:60: 32:3f:a6:9c:97:72:9e:4f:78:93:63:13:a0:27:1b: 2f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4F:E0:26:42:4E:AB:59:9C:AD:54:73:77:39:3F:D6:D3:CF:95:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1c9ba88-2946-3b25-9469-aefb99e5021d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7b:94:44:63:8e:d8:c0:1c:cb:fc:9d:a4:d2:d2:90:63:25: ee:42:75:2c:5c:8f:45:e6:8a:12:fd:c1:65:3f:5d:5d:2b:0e: 2b:0e:7c:bc:83:88:3a:79:ff:e4:cf:3c:2c:db:b5:1b:f5:6b: ef:0d:63:78:b2:1f:f8:65:f8:e4:61:a8:a5:70:40:dd:12:68: b3:37:a5:ce:df:09:48:51:bf:57:c0:55:2b:5b:47:b6:81:60: e5:d6:48:14:ae:45:25:83:69:ee:63:85:35:05:27:58:e8:2b: 7a:7d:1b:01:68:94:3f:cf:35:64:f9:25:29:34:37:08:bd:2e: 2d:af:86:ce:e6:35:3a:80:d0:f4:24:c7:00:dd:4e:5b:73:fc: b3:b2:c3:44:d2:56:15:24:82:0b:b9:9d:61:33:f5:1b:8a:ee: cf:64:c5:2b:3e:2e:e8:d5:2e:2e:b0:3f:4d:c1:93:ca:de:cf: 4e:3c:af:83:15:59:52:0b:28:5c:0e:17:15:a0:8d:06:83:88: cd:0c:70:30:13:32:aa:87:5e:94:29:9a:f6:93:08:a9:1a:fe: eb:d9:fa:16:e6:67:b9:71:89:2f:a9:2e:7a:39:f9:6a:44:aa: 71:17:ed:fd:61:e9:f4:e9:67:3a:02:fc:c4:27:73:57:f0:fa: dc:f5:3d:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgTY5vAXnpyP5tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjM2ZDhlOTItYzhjOC00ZDFlLTlhN2EtNTE0OWZkMDNhM2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG9dPt6v5quz3s4AhF3ixWQN7ZGzz5/5MJmJ qT+1F6HM2nAkvSnYOjfS6tdaJvSU1vtvgn538LIui2nz2UvOyrzAaV+oQG7fu75I IfxR9Cl2s79Q9SQL44jhOqxOivaY1YKdIId5jH2lPbnJmUSS7Yx2lFse59vs9lp0 OZcvr46H3XvAIrGtSB9e+qSp/ISoVn7ltYw+cwXqrzY1tbuItEdab1C01GzAYhbs k44SGJmfXxIJi38HZjtxKdur8R+gqkzilhIkPMtSI8W/eegjuznPxFr80wmOR1Dl ryX4nRxo+dweqYnpSfHR6XU7dGAyP6acl3KeT3iTYxOgJxsv2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9P4CZCTqtZnK1Uc3c5P9bTz5V+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTFjOWJhODgtMjk0Ni0z YjI1LTk0NjktYWVmYjk5ZTUwMjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8T9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ7lERjjtjAHMv8naTS0pBjJe5CdSxcj0XmihL9wWU/XV0rDisOfLyD iDp5/+TPPCzbtRv1a+8NY3iyH/hl+ORhqKVwQN0SaLM3pc7fCUhRv1fAVStbR7aB YOXWSBSuRSWDae5jhTUFJ1joK3p9GwFolD/PNWT5JSk0Nwi9Li2vhs7mNTqA0PQk xwDdTltz/LOyw0TSVhUkggu5nWEz9RuK7s9kxSs+LujVLi6wP03Bk8rez048r4MV WVILKFwOFxWgjQaDiM0McDATMqqHXpQpmvaTCKka/uvZ+hbmZ7lxiS+pLno5+WpE qnEX7f1h6fTpZzoC/MQnc1fw+tz1PVI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:36 2025 by rpki-client