$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b280e960-69f5-3ea0-ac54-67518d85ca43.roa File: b280e960-69f5-3ea0-ac54-67518d85ca43.roa (raw, json) Hash identifier: vl2vlM9pzQ0xK9UtCxlWdvDV5y8dgk08aRH2CoFSyO0= Subject key identifier: 0C:E9:71:07:C9:2E:45:84:B5:1D:43:87:B6:A5:8C:B6:A6:75:CE:96 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C580FB7A32201C85518D6B20 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b280e960-69f5-3ea0-ac54-67518d85ca43.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 40306 IP address blocks: 99.196.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:fb:7a:32:20:1c:85:51:8d:6b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=c7d6a30a-1af8-4a57-bb47-92794f32ad4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f3:77:63:73:84:73:bd:15:96:e5:b7:d2:7c: af:95:f7:f8:7a:c1:b3:31:c6:8a:10:fc:08:76:11: 27:a1:ab:51:49:b8:68:44:55:07:95:68:6b:b7:b9: 97:9b:e7:83:b2:b2:97:23:60:b1:b0:9c:28:25:f4: 21:7e:92:76:e4:d7:df:6e:aa:d1:51:15:35:51:7e: 97:b4:6c:52:0f:58:b7:f2:1f:1f:63:19:5f:64:e3: c3:63:34:2c:8c:d9:a5:09:8f:4d:a8:e9:3b:31:99: 55:7f:45:8b:1e:42:54:63:69:c8:4c:a8:f1:68:60: f5:08:75:97:32:4f:63:ed:5a:b8:d6:4b:5e:f2:b7: 30:47:a0:d2:84:93:e5:35:ff:18:b8:9c:8d:da:05: 19:e4:16:3b:a3:a4:ee:f4:53:0b:99:88:8c:27:b2: 02:f2:7f:89:1f:c1:80:cb:9d:ea:2a:18:b2:d2:53: 54:20:9c:b9:36:4a:d9:19:a6:f8:aa:81:5d:a4:16: d8:93:e0:35:0d:70:6d:17:54:48:78:7d:35:f7:db: 83:6d:a8:bf:f1:6f:f5:55:af:98:00:ab:39:bb:b5: d7:00:5c:1f:50:f8:9a:0e:85:ab:00:04:25:e4:e4: 27:66:a4:2f:91:09:e0:cc:42:bc:39:5c:a9:a5:c1: 26:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E9:71:07:C9:2E:45:84:B5:1D:43:87:B6:A5:8C:B6:A6:75:CE:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b280e960-69f5-3ea0-ac54-67518d85ca43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:db:25:cf:ec:12:a9:ed:97:ba:42:c0:55:d0:f7:e0:32:a0: b5:f1:cd:69:93:40:a3:94:6c:33:e9:87:e8:f8:18:44:a6:d0: 06:21:1c:5e:45:45:c8:b8:db:37:b7:ac:d7:a7:bf:fc:9d:ad: a7:31:3e:44:e4:9e:dd:e7:75:1b:29:1b:73:6f:27:21:9a:94: e1:41:c5:1b:c1:97:59:9b:71:95:84:e2:16:da:3d:5a:96:a2: bf:b5:e7:ac:f4:38:0e:51:e8:b0:01:0b:c8:59:5e:0f:d9:a9: 1b:9e:26:75:db:d7:97:a0:d1:3a:e0:15:43:94:0f:33:2c:35: 05:d2:52:1c:6a:2a:ae:07:17:b7:e9:03:54:03:9f:fd:09:d6: 13:be:7c:73:79:c7:34:48:c0:f9:b6:1b:a3:b6:2b:a6:fe:69: 63:d0:ff:a4:2f:eb:88:fd:6f:21:b4:7f:b5:e6:1e:5e:3b:6d: 66:4f:06:4a:b1:11:c1:1f:15:e8:8a:e8:2a:a5:ee:87:83:e5: 97:b8:6f:56:1b:53:f3:b4:25:33:b6:d3:8c:ba:7f:49:8c:6c: 01:63:b0:1e:f7:95:f6:1a:d6:38:7a:89:69:e0:e6:f6:66:6e: 8d:1e:c3:79:3c:c6:60:2a:c3:2f:5d:9c:07:13:b8:02:1e:ab: aa:1e:9b:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgPt6MiAchVGNayAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YzdkNmEzMGEtMWFmOC00YTU3LWJiNDctOTI3OTRmMzJhZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/N3Y3OEc70VluW30nyvlff4esGzMcaKEPwI dhEnoatRSbhoRFUHlWhrt7mXm+eDsrKXI2CxsJwoJfQhfpJ25NffbqrRURU1UX6X tGxSD1i38h8fYxlfZOPDYzQsjNmlCY9NqOk7MZlVf0WLHkJUY2nITKjxaGD1CHWX Mk9j7Vq41kte8rcwR6DShJPlNf8YuJyN2gUZ5BY7o6Tu9FMLmYiMJ7IC8n+JH8GA y53qKhiy0lNUIJy5NkrZGab4qoFdpBbYk+A1DXBtF1RIeH0199uDbai/8W/1Va+Y AKs5u7XXAFwfUPiaDoWrAAQl5OQnZqQvkQngzEK8OVyppcEmvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzpcQfJLkWEtR1Dh7aljLamdc6WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjI4MGU5NjAtNjlmNS0z ZWEwLWFjNTQtNjc1MThkODVjYTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8R5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXbJc/sEqntl7pCwFXQ9+AyoLXxzWmTQKOUbDPph+j4GESm0AYhHF5F Rci42ze3rNenv/ydracxPkTknt3ndRspG3NvJyGalOFBxRvBl1mbcZWE4hbaPVqW or+156z0OA5R6LABC8hZXg/ZqRueJnXb15eg0TrgFUOUDzMsNQXSUhxqKq4HF7fp A1QDn/0J1hO+fHN5xzRIwPm2G6O2K6b+aWPQ/6Qv64j9byG0f7XmHl47bWZPBkqx EcEfFeiK6Cql7oeD5Ze4b1YbU/O0JTO204y6f0mMbAFjsB73lfYa1jh6iWng5vZm bo0ew3k8xmAqwy9dnAcTuAIeq6oem0M= -----END CERTIFICATE-----Generated at Fri Mar 14 11:28:03 2025 by rpki-client