$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af30c7b1-34db-3ab3-8096-4c1a3ca1401b.roa File: af30c7b1-34db-3ab3-8096-4c1a3ca1401b.roa (raw, json) Hash identifier: 2/OUse8N1FR7yHDw0vqMRS6oYQKDYM7IVcWqbpMNhSQ= Subject key identifier: BD:02:DA:8E:A9:66:ED:26:2E:A8:EE:B5:13:45:E2:45:E4:78:64:9F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581C9E74BCB80D7555F28A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af30c7b1-34db-3ab3-8096-4c1a3ca1401b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.197.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:c9:e7:4b:cb:80:d7:55:5f:28:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2e2d31cb-dab9-4d8f-b7be-fcb3cccce772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:82:5c:79:c5:4f:2a:1c:c7:49:a2:b4:1e:dc: ca:2b:d8:71:35:e5:7c:8b:1b:0a:64:5b:ef:38:c4: b8:c7:e8:b1:34:29:dd:13:af:ca:01:d5:11:66:f6: d8:fc:f7:62:be:5e:62:33:17:dc:4c:0a:bc:84:eb: 23:c3:31:e5:59:dc:2a:68:ba:2b:78:3d:56:1d:22: a6:67:c6:12:48:88:ea:08:20:39:19:53:23:48:0d: 3d:72:1b:27:5c:7b:a9:09:96:61:46:c4:5b:84:8f: fc:34:15:4b:b9:bf:75:51:08:22:6b:7c:70:f9:81: 26:79:98:4f:ee:f8:c2:a3:eb:68:18:73:91:da:7c: a4:31:08:e2:61:b8:7c:52:5c:1e:bb:40:ea:4c:3b: c6:71:7d:c5:02:ad:a5:d4:77:8e:2b:77:dd:1c:04: 10:5e:bd:5c:fe:dd:a5:75:60:ad:33:5f:10:55:69: 0e:2c:cb:c8:3c:be:31:23:6b:2d:9c:05:da:f5:1f: c7:a6:06:e9:fe:7f:80:29:be:7c:c4:c6:80:6b:6f: db:43:69:eb:cf:63:0e:a9:50:8f:8d:47:94:a2:64: 96:87:1a:7e:54:23:d4:25:47:0f:de:8a:0f:dd:38: 29:de:0c:00:7e:00:f8:a3:19:11:9f:e4:63:b2:4f: 3c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:02:DA:8E:A9:66:ED:26:2E:A8:EE:B5:13:45:E2:45:E4:78:64:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af30c7b1-34db-3ab3-8096-4c1a3ca1401b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:c7:f6:86:ab:16:bc:a5:91:65:ad:00:ee:cd:81:88:0d:90: 0e:5e:41:3a:89:50:36:b1:f9:7e:be:2b:95:da:53:34:6f:11: 9b:26:d4:21:ad:8f:e4:3d:d6:92:be:21:ca:5d:0a:0f:a4:d0: 23:cb:da:c5:dd:b1:ef:72:dc:4b:49:0a:9c:ca:39:5f:d3:bc: 3c:29:08:b8:fc:53:1a:f1:09:e4:75:48:b3:df:12:ce:9c:cf: 2f:55:f7:4e:ad:c5:84:b5:80:f6:07:e3:dd:85:ee:aa:6f:3a: 2d:3d:b0:92:df:28:25:fa:6f:60:2b:72:cb:3f:f6:20:e7:b9: 87:5d:93:ac:53:c4:b7:45:cf:70:ea:8a:7e:f3:21:c7:35:00: 59:12:4f:81:f4:c1:4a:cc:4d:be:6e:b7:98:23:0f:59:4a:42: 14:21:6c:de:94:a6:d1:73:fb:33:38:7e:bb:0f:90:15:34:00: f0:9a:a8:12:e4:62:df:f9:17:b8:f2:73:e4:0c:4d:f8:88:90: 94:40:41:4f:63:49:a6:09:19:fa:af:59:56:d7:3d:1d:5d:07: cd:23:86:26:c8:ac:16:57:70:55:87:cb:ff:3c:e2:b9:da:0b: d8:11:49:50:f0:d7:57:31:33:a0:d9:e3:fe:9a:52:ff:8b:60: de:aa:4c:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcnnS8uA11VfKKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MmUyZDMxY2ItZGFiOS00ZDhmLWI3YmUtZmNiM2NjY2NlNzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoJcecVPKhzHSaK0HtzKK9hxNeV8ixsKZFvv OMS4x+ixNCndE6/KAdURZvbY/Pdivl5iMxfcTAq8hOsjwzHlWdwqaLoreD1WHSKm Z8YSSIjqCCA5GVMjSA09chsnXHupCZZhRsRbhI/8NBVLub91UQgia3xw+YEmeZhP 7vjCo+toGHOR2nykMQjiYbh8Ulweu0DqTDvGcX3FAq2l1HeOK3fdHAQQXr1c/t2l dWCtM18QVWkOLMvIPL4xI2stnAXa9R/Hpgbp/n+AKb58xMaAa2/bQ2nrz2MOqVCP jUeUomSWhxp+VCPUJUcP3ooP3Tgp3gwAfgD4oxkRn+Rjsk88RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0C2o6pZu0mLqjutRNF4kXkeGSfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWYzMGM3YjEtMzRkYi0z YWIzLTgwOTYtNGMxYTNjYTE0MDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPH9oarFrylkWWtAO7NgYgNkA5eQTqJUDax+X6+K5XaUzRvEZsm1CGt j+Q91pK+IcpdCg+k0CPL2sXdse9y3EtJCpzKOV/TvDwpCLj8UxrxCeR1SLPfEs6c zy9V906txYS1gPYH492F7qpvOi09sJLfKCX6b2Arcss/9iDnuYddk6xTxLdFz3Dq in7zIcc1AFkST4H0wUrMTb5ut5gjD1lKQhQhbN6UptFz+zM4frsPkBU0APCaqBLk Yt/5F7jyc+QMTfiIkJRAQU9jSaYJGfqvWVbXPR1dB80jhibIrBZXcFWHy/884rna C9gRSVDw11cxM6DZ4/6aUv+LYN6qTBc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:45 2025 by rpki-client