$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b584538d-8cfa-3e1c-b90a-87531f52ad28.roa File: b584538d-8cfa-3e1c-b90a-87531f52ad28.roa (raw, json) Hash identifier: cwLFvg7NUUqIodKgleow59KWvW57VFe1VRBW70mMz0Y= Subject key identifier: FA:B8:F4:CD:69:D5:46:3F:B0:D5:9A:5E:85:FE:1F:CB:EC:C5:FD:9B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819368E3491EFA1D252E80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b584538d-8cfa-3e1c-b90a-87531f52ad28.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.198.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:93:68:e3:49:1e:fa:1d:25:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=a80dd6eb-93fd-40d7-9a02-145a9fc71bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:32:57:f8:26:59:f7:da:e5:63:6f:d2:e2: 21:18:a4:9e:0b:9b:4f:7c:da:89:98:0e:3e:8f:f0: 58:b9:c0:7d:54:ef:42:9d:b5:62:d0:a4:fb:51:41: 4f:e7:48:b2:88:1e:3a:a0:54:4f:47:33:6e:4f:18: 5c:8f:bf:00:6f:16:b8:e6:36:30:83:53:c0:ad:5b: 45:ae:f5:0e:de:8d:8d:b0:c4:f7:e4:29:a8:62:a9: f4:94:78:42:6e:d3:1a:4d:61:53:da:02:2a:26:51: 73:3f:ea:d4:0a:28:2c:9c:12:d4:64:15:73:31:df: 22:4d:53:7c:34:40:95:fa:f8:1a:b7:13:36:74:ad: 2b:6c:af:aa:26:e8:c0:6c:8b:ca:1d:18:84:a7:90: f6:82:a9:dd:76:27:ea:50:c0:a5:fa:02:27:6a:d1: 3a:5b:df:5e:f8:0e:f3:4f:60:77:4f:6e:5f:90:33: be:6d:51:0d:11:6a:22:a9:af:44:1d:52:a5:12:9a: 26:51:dc:87:8f:0a:d9:54:b0:a4:9d:28:e8:bf:5e: 5c:4d:72:85:ca:5f:47:78:63:1a:60:95:d4:b6:80: bd:47:1b:05:36:1c:78:14:77:59:21:29:38:54:c8: 70:ef:70:e7:3a:f2:f7:de:61:65:fd:da:49:32:2b: 17:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B8:F4:CD:69:D5:46:3F:B0:D5:9A:5E:85:FE:1F:CB:EC:C5:FD:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b584538d-8cfa-3e1c-b90a-87531f52ad28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:30:20:35:be:1b:75:08:9e:2b:37:40:f6:fd:b7:27:ba:d6: 88:46:da:09:56:ce:70:d6:22:9b:19:37:d4:e0:70:40:4c:81: 84:6c:2c:75:c5:b8:c9:bf:67:80:77:19:27:9c:5d:f2:0c:e5: d1:80:5e:57:d3:a9:a9:ce:96:61:bc:ed:12:a5:d0:15:1b:51: 48:47:df:1b:72:2c:bd:8a:ce:b0:73:6c:91:63:28:0c:db:1b: 0f:e9:c5:8c:ac:ed:71:50:56:00:94:f3:e3:b7:0d:fa:c1:6f: 96:fa:af:ea:91:0a:ac:4d:ef:e5:03:09:6c:e8:58:ec:e3:41: f3:b8:b8:2b:d2:36:98:4d:76:25:84:c3:6a:00:86:c1:f9:49: 1b:70:85:10:00:50:6b:b4:b1:79:c9:05:65:41:16:53:00:d6: 18:82:46:d7:2f:9c:2e:87:8d:9f:f6:06:2d:d6:ab:57:b9:e5: 6d:cc:f5:a0:c4:dd:11:2f:a0:7b:4e:82:66:07:d3:2c:c5:cc: 7b:0f:c8:2e:09:e7:4c:69:62:f0:eb:61:1a:df:32:f4:95:73: b8:73:6d:2d:0f:0c:4a:eb:a2:35:8d:87:8e:38:67:48:2d:61: 9e:f3:96:f3:69:e3:0b:fc:93:12:5d:4b:70:ef:1b:d2:ed:37: ca:33:f2:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZNo40ke+h0lLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YTgwZGQ2ZWItOTNmZC00MGQ3LTlhMDItMTQ1YTlmYzcxYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiQyV/gmWffa5WNv0uIhGKSeC5tPfNqJmA4+ j/BYucB9VO9CnbVi0KT7UUFP50iyiB46oFRPRzNuTxhcj78Abxa45jYwg1PArVtF rvUO3o2NsMT35CmoYqn0lHhCbtMaTWFT2gIqJlFzP+rUCigsnBLUZBVzMd8iTVN8 NECV+vgatxM2dK0rbK+qJujAbIvKHRiEp5D2gqnddifqUMCl+gInatE6W99e+A7z T2B3T25fkDO+bVENEWoiqa9EHVKlEpomUdyHjwrZVLCknSjov15cTXKFyl9HeGMa YJXUtoC9RxsFNhx4FHdZISk4VMhw73DnOvL33mFl/dpJMisXJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPq49M1p1UY/sNWaXoX+H8vsxf2bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjU4NDUzOGQtOGNmYS0z ZTFjLWI5MGEtODc1MzFmNTJhZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEY8ZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUwIDW+G3UInis3QPb9tye61ohG2glWznDWIpsZN9TgcEBMgYRsLHXF uMm/Z4B3GSecXfIM5dGAXlfTqanOlmG87RKl0BUbUUhH3xtyLL2KzrBzbJFjKAzb Gw/pxYys7XFQVgCU8+O3DfrBb5b6r+qRCqxN7+UDCWzoWOzjQfO4uCvSNphNdiWE w2oAhsH5SRtwhRAAUGu0sXnJBWVBFlMA1hiCRtcvnC6HjZ/2Bi3Wq1e55W3M9aDE 3REvoHtOgmYH0yzFzHsPyC4J50xpYvDrYRrfMvSVc7hzbS0PDErrojWNh444Z0gt YZ7zlvNp4wv8kxJdS3DvG9LtN8oz8qQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:49 2025 by rpki-client