$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4239e8f-07a1-313a-a7a8-9a2479cfa30d.roa File: a4239e8f-07a1-313a-a7a8-9a2479cfa30d.roa (raw, json) Hash identifier: OsP7JXh9X5sWCuuVtg7KTOo2KYW0jPj6eT6re4fGSLE= Subject key identifier: 33:CE:5F:88:80:A2:D6:CF:12:B8:90:0A:A3:C6:2D:CE:17:65:AB:65 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB24A18971609DE1572F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4239e8f-07a1-313a-a7a8-9a2479cfa30d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.197.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:24:a1:89:71:60:9d:e1:57:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ce01fd12-7bbe-41b2-99b1-feea77a622a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b9:bf:fd:a8:d5:0a:76:92:50:10:31:b8:2f: 32:a3:69:b9:74:f2:93:ac:6c:73:8d:0c:98:fa:9c: cf:51:36:46:e7:75:7e:02:bc:43:18:c5:85:6b:d4: ac:83:64:c3:11:7f:0a:58:82:d1:aa:09:89:3e:33: 8f:c7:9a:1e:37:1a:cd:61:89:e9:25:b0:29:34:12: ba:39:95:56:90:86:1a:0b:ea:56:6e:30:17:86:fb: 07:b6:a8:2a:db:f5:bd:80:ea:a1:81:22:f6:e7:9e: c8:30:05:a8:b7:36:52:48:04:0c:4f:3b:30:24:91: 06:cb:df:60:dd:17:1b:49:1b:81:e5:39:30:25:39: 9e:57:39:95:57:b8:7f:2d:1d:5f:ce:55:2b:24:32: 39:ce:5b:d0:2b:3f:33:97:1d:9f:7a:8e:13:8b:71: 73:cb:80:78:00:23:58:7c:e3:b6:db:45:c1:39:45: 24:a8:c7:b0:60:d4:2c:f3:ad:46:c5:b7:83:aa:56: 68:65:51:43:a6:9c:bd:dd:e8:4c:6a:db:34:aa:d4: 28:69:a0:25:eb:2c:90:65:0e:fa:e1:2a:48:07:e1: ef:90:f9:40:6e:23:20:4c:93:d1:be:c6:c4:63:f5: db:a1:03:4b:34:1c:54:93:c7:4b:13:6b:af:f5:ea: 1d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CE:5F:88:80:A2:D6:CF:12:B8:90:0A:A3:C6:2D:CE:17:65:AB:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4239e8f-07a1-313a-a7a8-9a2479cfa30d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:16:ea:f4:b7:f0:fb:1b:01:cf:49:9e:a8:c8:03:83:53:95: b6:67:d4:dd:23:00:94:61:81:62:c6:8d:6e:96:2f:9c:6d:3b: d4:11:17:2e:fb:ac:e8:87:f1:df:82:00:b8:87:73:d9:1d:04: 0a:a5:73:29:77:e8:e6:d2:4e:ed:59:c7:d4:21:64:db:cd:78: 0d:dc:f1:b9:eb:2e:19:a6:e8:e3:39:ee:a6:31:d4:d1:06:3b: e7:aa:0b:30:07:17:6f:82:29:a6:a8:e0:16:69:51:51:e5:47: 76:91:99:65:07:1a:59:7c:36:9f:7d:cd:06:5a:16:7a:a0:53: d5:da:8a:fa:9b:9c:fc:c8:99:ec:db:6b:ca:f2:fd:05:1a:30: 42:e5:2f:da:4d:15:2d:0d:c0:4e:d6:b3:fd:c5:00:e3:9d:7c: c3:43:f4:8e:b8:6f:d4:9c:cd:b0:7b:87:fb:0f:96:60:51:73: 70:34:6e:b9:46:d6:33:90:79:8c:ed:32:14:b5:ef:02:20:31: 65:60:15:26:68:b0:0d:a9:5d:60:f5:a1:e7:d5:4a:03:0d:6c: 60:9f:84:56:9e:d6:b0:eb:91:a6:80:e7:d7:ea:a2:bd:45:52: af:87:fc:19:eb:ea:c2:db:50:e9:a7:c5:60:71:21:3e:a4:39: db:d0:0a:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuyShiXFgneFXLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2UwMWZkMTItN2JiZS00MWIyLTk5YjEtZmVlYTc3YTYyMmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubm//ajVCnaSUBAxuC8yo2m5dPKTrGxzjQyY +pzPUTZG53V+ArxDGMWFa9Ssg2TDEX8KWILRqgmJPjOPx5oeNxrNYYnpJbApNBK6 OZVWkIYaC+pWbjAXhvsHtqgq2/W9gOqhgSL2557IMAWotzZSSAQMTzswJJEGy99g 3RcbSRuB5TkwJTmeVzmVV7h/LR1fzlUrJDI5zlvQKz8zlx2feo4Ti3Fzy4B4ACNY fOO220XBOUUkqMewYNQs861GxbeDqlZoZVFDppy93ehMats0qtQoaaAl6yyQZQ76 4SpIB+HvkPlAbiMgTJPRvsbEY/XboQNLNBxUk8dLE2uv9eodaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPOX4iAotbPEriQCqPGLc4XZatlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTQyMzllOGYtMDdhMS0z MTNhLWE3YTgtOWEyNDc5Y2ZhMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwW6vS38PsbAc9JnqjIA4NTlbZn1N0jAJRhgWLGjW6WL5xtO9QRFy77 rOiH8d+CALiHc9kdBAqlcyl36ObSTu1Zx9QhZNvNeA3c8bnrLhmm6OM57qYx1NEG O+eqCzAHF2+CKaao4BZpUVHlR3aRmWUHGll8Np99zQZaFnqgU9XaivqbnPzImezb a8ry/QUaMELlL9pNFS0NwE7Ws/3FAOOdfMND9I64b9SczbB7h/sPlmBRc3A0brlG 1jOQeYztMhS17wIgMWVgFSZosA2pXWD1oefVSgMNbGCfhFae1rDrkaaA59fqor1F Uq+H/Bnr6sLbUOmnxWBxIT6kOdvQCjw= -----END CERTIFICATE-----Generated at Fri Jun 6 17:49:11 2025 by rpki-client