$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b0a92924-4beb-3221-b184-d9d16fc9588b.roa File: b0a92924-4beb-3221-b184-d9d16fc9588b.roa (raw, json) Hash identifier: lrtYJ5VfkfGBe2m29ZDQOjsYssWWp/VrLMa2uuR8rbo= Subject key identifier: 3C:C2:F0:DC:15:C6:14:83:98:35:6C:0B:41:06:BF:5F:C2:BC:1E:75 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581C9F56153C56E8A1F8C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b0a92924-4beb-3221-b184-d9d16fc9588b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.197.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:c9:f5:61:53:c5:6e:8a:1f:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=07898dee-824e-4516-91aa-2413e9d82bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:64:34:9a:a9:33:12:2b:da:03:f9:9d:a8:24: 81:67:cb:82:cf:fd:e5:38:19:4c:df:c2:a7:4e:2b: 8e:01:32:99:c8:61:dd:12:a8:37:b6:bc:d3:81:c3: 34:6c:69:59:e3:e3:dc:33:06:cc:53:c2:4f:02:99: af:1c:3c:cb:7b:c3:b5:25:1f:e7:b2:6e:34:13:8a: a4:3a:5e:29:74:46:c0:69:5f:eb:97:e8:6c:a3:3a: 92:80:a9:fc:83:84:90:02:3c:97:ff:7d:ab:4f:ed: a5:b8:9a:b7:db:a2:0c:46:3c:cb:50:12:44:47:e6: 6f:cd:e9:40:c2:28:2a:eb:1e:04:f6:a2:44:37:ca: d2:32:b3:3e:c6:6f:40:ad:d2:c5:42:c5:a9:22:b1: 86:35:d9:ed:db:4f:57:c4:1c:c4:72:fd:c0:a9:9d: a5:22:51:46:b5:60:b6:19:d2:4f:b0:82:62:56:d2: 51:1e:4c:00:12:6e:b3:22:98:0b:d4:f4:b3:37:69: 38:bd:51:50:ca:00:6d:8b:82:b7:53:c4:2e:ee:35: 53:27:e3:07:b8:02:dd:6b:0e:5a:b3:5b:84:3b:61: 49:1e:88:44:4f:6b:a6:a3:f7:2c:6a:1d:79:50:f9: 8d:04:3b:86:c2:f8:d7:9e:c1:dc:50:53:97:a8:0e: 49:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C2:F0:DC:15:C6:14:83:98:35:6C:0B:41:06:BF:5F:C2:BC:1E:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b0a92924-4beb-3221-b184-d9d16fc9588b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:9e:54:6a:25:a9:9e:6a:45:c2:50:b8:c7:e9:ea:77:e6:8e: a8:5b:b8:10:9c:df:41:a9:52:71:90:ae:7f:3c:59:45:c0:19: c8:00:d8:b8:c5:4e:78:ad:80:3a:c6:e6:8a:4d:86:6b:f7:ae: 7b:96:b1:28:aa:e1:70:9d:15:e2:3f:76:52:0d:b5:45:e3:c3: fc:d1:36:cf:38:b0:f0:50:69:f8:82:cd:b4:5a:90:47:e9:f7: 79:d3:5d:56:e9:b5:83:07:46:a9:a7:bb:bc:28:c1:c4:b7:bf: 70:79:41:5e:16:f5:e8:06:f1:0a:92:09:13:d2:29:b6:f2:c4: 04:19:3e:0c:b2:b7:64:38:e4:74:01:39:e6:da:3d:01:d1:19: 65:7e:ce:cb:13:bf:ff:c1:45:2f:7d:0f:ad:55:2b:70:29:c1: 73:f0:9c:28:af:80:f0:6f:65:33:a2:5a:8f:d9:d1:68:4f:32: d3:7a:ae:58:a4:0f:9a:a2:c5:ba:da:d7:10:35:41:7c:11:f7: 0a:27:14:95:07:5a:0d:ff:4f:da:9c:2d:2a:1f:ba:5c:97:cf: 13:08:13:0c:5b:c1:ca:f8:94:24:2c:18:3f:10:ba:33:9c:a5: 19:77:3c:c8:59:25:c1:56:0b:a0:19:cf:1f:41:29:26:89:cb: 11:16:e4:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcn1YVPFboofjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MDc4OThkZWUtODI0ZS00NTE2LTkxYWEtMjQxM2U5ZDgyYmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGQ0mqkzEivaA/mdqCSBZ8uCz/3lOBlM38Kn TiuOATKZyGHdEqg3trzTgcM0bGlZ4+PcMwbMU8JPApmvHDzLe8O1JR/nsm40E4qk Ol4pdEbAaV/rl+hsozqSgKn8g4SQAjyX/32rT+2luJq326IMRjzLUBJER+ZvzelA wigq6x4E9qJEN8rSMrM+xm9ArdLFQsWpIrGGNdnt209XxBzEcv3AqZ2lIlFGtWC2 GdJPsIJiVtJRHkwAEm6zIpgL1PSzN2k4vVFQygBti4K3U8Qu7jVTJ+MHuALdaw5a s1uEO2FJHohET2umo/csah15UPmNBDuGwvjXnsHcUFOXqA5JPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzC8NwVxhSDmDVsC0EGv1/CvB51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjBhOTI5MjQtNGJlYi0z MjIxLWIxODQtZDlkMTZmYzk1ODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADueVGolqZ5qRcJQuMfp6nfmjqhbuBCc30GpUnGQrn88WUXAGcgA2LjF TnitgDrG5opNhmv3rnuWsSiq4XCdFeI/dlINtUXjw/zRNs84sPBQafiCzbRakEfp 93nTXVbptYMHRqmnu7wowcS3v3B5QV4W9egG8QqSCRPSKbbyxAQZPgyyt2Q45HQB OebaPQHRGWV+zssTv//BRS99D61VK3ApwXPwnCivgPBvZTOiWo/Z0WhPMtN6rlik D5qixbra1xA1QXwR9wonFJUHWg3/T9qcLSofulyXzxMIEwxbwcr4lCQsGD8QujOc pRl3PMhZJcFWC6AZzx9BKSaJyxEW5J8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:30 2025 by rpki-client