$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b25d60b9-2a69-396d-a49a-52282c67a03b.roa File: b25d60b9-2a69-396d-a49a-52282c67a03b.roa (raw, json) Hash identifier: /pCjlj/diM9vJdV2z5vaXt8dzjGpjqffAXT6PCgedQY= Subject key identifier: 4D:2C:77:71:4E:FE:30:4C:68:0C:76:7F:10:3C:07:DA:95:64:37:E5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581C566CF83D2500961EA00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b25d60b9-2a69-396d-a49a-52282c67a03b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.197.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:c5:66:cf:83:d2:50:09:61:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e299bf08-e0f0-4730-8f0d-6d5e8dfa85e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:a3:53:70:c2:39:da:60:e2:ea:86:46:05: ef:9b:dc:75:66:a6:9a:1d:81:3e:89:54:14:1e:27: d4:89:40:bb:cb:6e:e5:f9:66:dd:f1:70:36:59:1a: 26:a2:47:fb:0f:28:5b:07:83:d1:1e:00:17:3b:40: e4:0d:57:1d:98:a5:0a:60:69:5a:84:37:44:3f:f5: e5:1d:71:25:be:5c:dd:70:4f:7f:d3:bc:43:f2:2c: 9d:79:92:10:49:49:45:a6:d0:79:d2:02:19:63:5f: 81:58:9e:e1:22:ba:fb:6f:4c:22:c3:e8:61:b1:6f: 75:c4:a9:5b:17:8c:02:5b:51:11:d4:bf:13:49:20: 18:38:e6:2f:f3:1e:ae:c0:ca:9a:17:f4:ee:7e:e4: c0:26:56:03:44:b2:d3:26:31:ed:c1:0c:6e:ba:26: 06:e8:3e:70:47:7c:aa:c5:47:0f:42:d2:38:9b:07: 1c:16:b2:75:8b:8b:c3:7f:d9:e6:a4:3d:3c:74:3d: d2:c9:38:a7:1e:ae:77:4a:d8:2a:f9:51:c7:0f:ce: 42:4f:57:a2:92:e9:d5:17:28:5a:c7:6d:e1:00:fa: 2c:05:16:e5:1b:52:4a:51:db:7d:4c:f8:e7:32:36: 90:17:27:85:ba:ae:6b:42:42:a3:0b:8c:3e:d0:19: 6f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2C:77:71:4E:FE:30:4C:68:0C:76:7F:10:3C:07:DA:95:64:37:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b25d60b9-2a69-396d-a49a-52282c67a03b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:36:e2:9b:04:c2:af:82:f1:5d:be:df:69:98:07:2e:30:48: 0e:4e:df:a5:a0:b2:e9:db:74:8a:3c:c4:8a:7b:3a:f5:cb:6a: 97:68:46:19:3f:43:37:52:06:95:46:fb:92:87:9f:0f:1e:fe: 1f:49:cc:a6:bf:04:14:f8:2f:18:cd:94:8c:b6:51:d8:b8:50: 6f:09:a3:18:37:b1:74:b9:24:e9:7e:e2:1b:02:ef:ee:4c:ae: e8:dd:44:91:06:85:d0:bb:8b:ff:6c:ec:15:0d:b1:8b:1b:7e: de:5c:d9:bb:82:dd:92:65:85:7c:8e:ce:7c:95:b7:29:dd:d3: 6f:44:ee:ac:02:95:fa:32:8b:06:b9:bd:fa:d4:b4:59:3b:77: 36:77:81:eb:67:e6:14:ed:11:b9:92:b8:a4:4d:7e:f9:c6:36: eb:4e:1d:4f:f0:7d:98:c9:3f:2d:14:a7:64:2c:44:d1:02:6f: 68:21:36:0d:80:95:a5:c0:ec:a6:98:b6:80:6a:96:42:72:26: d0:e0:00:47:02:6d:fc:b1:2a:29:c8:7f:82:dd:28:80:ad:f8: 72:0c:49:e5:41:fa:a8:5d:df:b8:6b:7a:e4:af:b8:e7:89:3a: 9a:2b:66:76:02:66:68:72:e0:2c:11:e6:e0:ea:fd:c0:8d:a4: dc:6c:76:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcVmz4PSUAlh6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTI5OWJmMDgtZTBmMC00NzMwLThmMGQtNmQ1ZThkZmE4NWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf+jU3DCOdpg4uqGRgXvm9x1ZqaaHYE+iVQU HifUiUC7y27l+Wbd8XA2WRomokf7DyhbB4PRHgAXO0DkDVcdmKUKYGlahDdEP/Xl HXElvlzdcE9/07xD8iydeZIQSUlFptB50gIZY1+BWJ7hIrr7b0wiw+hhsW91xKlb F4wCW1ER1L8TSSAYOOYv8x6uwMqaF/TufuTAJlYDRLLTJjHtwQxuuiYG6D5wR3yq xUcPQtI4mwccFrJ1i4vDf9nmpD08dD3SyTinHq53Stgq+VHHD85CT1eikunVFyha x23hAPosBRblG1JKUdt9TPjnMjaQFyeFuq5rQkKjC4w+0BlvzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0sd3FO/jBMaAx2fxA8B9qVZDflMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjI1ZDYwYjktMmE2OS0z OTZkLWE0OWEtNTIyODJjNjdhMDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALI24psEwq+C8V2+32mYBy4wSA5O36WgsunbdIo8xIp7OvXLapdoRhk/ QzdSBpVG+5KHnw8e/h9JzKa/BBT4LxjNlIy2Udi4UG8Joxg3sXS5JOl+4hsC7+5M rujdRJEGhdC7i/9s7BUNsYsbft5c2buC3ZJlhXyOznyVtynd029E7qwClfoyiwa5 vfrUtFk7dzZ3getn5hTtEbmSuKRNfvnGNutOHU/wfZjJPy0Up2QsRNECb2ghNg2A laXA7KaYtoBqlkJyJtDgAEcCbfyxKinIf4LdKICt+HIMSeVB+qhd37hreuSvuOeJ OporZnYCZmhy4CwR5uDq/cCNpNxsdoc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:15 2025 by rpki-client