$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa File: b858aae4-a2d0-3206-926a-11f8600ccc2a.roa (raw, json) Hash identifier: zz6F7nqpfEqoYgKJ8ohBE0qlyC3tyQ1oQlummAD/ctY= Subject key identifier: 5F:18:71:7C:E9:53:9F:41:28:97:A2:DD:DF:3B:12:E6:88:6F:3F:49 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA51B500E45D93F8BCB4C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 40306 IP address blocks: 99.196.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:51:b5:00:e4:5d:93:f8:bc:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fbd34c2c-71cf-46e1-995e-a7e0460d4494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:af:14:f7:31:5e:77:37:a7:8a:27:d1:a3:05: 07:9f:e7:70:50:29:5b:44:1a:3c:be:e0:bd:26:97: 3b:7d:7f:2e:f2:64:96:b0:2d:8b:23:39:99:90:1c: 09:17:b9:07:53:04:c0:5d:41:8b:fc:99:c7:ad:c6: 31:26:a1:bd:5a:52:51:a9:c6:51:fd:39:fb:bc:a2: d7:03:5e:16:6e:e6:a1:90:60:7c:bf:92:cf:86:4d: 6f:34:9e:07:bb:f3:60:c2:9c:d7:9d:47:21:de:b1: 4a:5b:75:45:6e:8e:10:52:0f:99:1c:c1:b8:9e:82: 2a:a1:4e:5b:fc:68:69:22:ae:21:42:66:76:d8:ff: 55:f6:a9:85:2e:5e:e4:8e:1e:80:94:3a:8a:b0:e7: d5:4c:78:32:80:ae:0b:77:c0:03:fa:8a:22:03:7f: 38:0e:5f:c7:df:f9:be:1a:a1:f0:b9:64:cb:13:24: 96:6e:4e:9a:52:3a:90:97:bd:93:a7:7c:4f:4e:fc: b8:7d:30:12:fa:2e:00:40:3a:68:2b:5a:46:35:cf: 8b:cb:89:8a:92:3c:84:25:9a:9c:9f:f7:66:53:28: 5b:ff:ab:ca:f2:d8:17:50:4a:fe:c1:95:13:e6:35: 26:c5:f7:a8:6d:76:15:7c:1c:bb:fb:34:c7:df:2e: 92:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:18:71:7C:E9:53:9F:41:28:97:A2:DD:DF:3B:12:E6:88:6F:3F:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:13:b6:4a:f0:42:d4:0a:7b:67:47:92:96:e5:11:bf:af:a8: 54:4a:c7:c4:6e:bd:b9:fc:0a:d6:b3:e9:22:ce:e9:32:fb:82: 29:3c:fe:81:8e:97:96:43:35:ca:73:d3:c2:9e:73:0e:fc:2b: 1b:4f:59:d8:71:c6:29:92:b2:d1:bf:9d:46:19:f2:1c:ca:17: 65:f2:9e:5b:fa:6c:96:6a:68:ee:e8:de:a3:84:f5:b1:07:58: b6:31:61:28:dd:f6:b8:68:59:31:cd:f2:e7:68:5b:38:8e:6c: bc:8b:75:81:76:b3:48:44:c1:4d:08:51:0b:98:08:1f:d9:2c: 47:2a:38:23:a4:6e:71:8d:d5:c0:7e:ec:73:cd:46:ac:95:aa: 8f:87:76:bd:95:ef:65:c3:b3:33:47:cb:80:54:62:89:9f:dd: 7e:87:18:ee:82:61:38:f1:51:46:c8:b8:c0:3c:b9:1e:85:73: da:0b:41:e2:6b:1d:04:89:57:9a:37:02:9f:3e:24:71:67:5c: bf:d8:f2:b3:54:a0:fc:82:61:e0:53:54:d4:b5:ec:09:67:68: 4a:15:98:f8:a8:83:62:b2:8e:00:a2:83:6c:2e:6a:24:d7:24: c7:ae:96:c0:7a:b0:64:c8:cf:a2:08:f8:10:21:f9:5b:01:89: c3:70:da:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulG1AORdk/i8tMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmJkMzRjMmMtNzFjZi00NmUxLTk5NWUtYTdlMDQ2MGQ0NDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia8U9zFedzeniifRowUHn+dwUClbRBo8vuC9 Jpc7fX8u8mSWsC2LIzmZkBwJF7kHUwTAXUGL/JnHrcYxJqG9WlJRqcZR/Tn7vKLX A14WbuahkGB8v5LPhk1vNJ4Hu/NgwpzXnUch3rFKW3VFbo4QUg+ZHMG4noIqoU5b /GhpIq4hQmZ22P9V9qmFLl7kjh6AlDqKsOfVTHgygK4Ld8AD+ooiA384Dl/H3/m+ GqHwuWTLEySWbk6aUjqQl72Tp3xPTvy4fTAS+i4AQDpoK1pGNc+Ly4mKkjyEJZqc n/dmUyhb/6vK8tgXUEr+wZUT5jUmxfeobXYVfBy7+zTH3y6SvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8YcXzpU59BKJei3d87EuaIbz9JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjg1OGFhZTQtYTJkMC0z MjA2LTkyNmEtMTFmODYwMGNjYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8R7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkTtkrwQtQKe2dHkpblEb+vqFRKx8Ruvbn8Ctaz6SLO6TL7gik8/oGO l5ZDNcpz08Kecw78KxtPWdhxximSstG/nUYZ8hzKF2Xynlv6bJZqaO7o3qOE9bEH WLYxYSjd9rhoWTHN8udoWziObLyLdYF2s0hEwU0IUQuYCB/ZLEcqOCOkbnGN1cB+ 7HPNRqyVqo+Hdr2V72XDszNHy4BUYomf3X6HGO6CYTjxUUbIuMA8uR6Fc9oLQeJr HQSJV5o3Ap8+JHFnXL/Y8rNUoPyCYeBTVNS17AlnaEoVmPiog2KyjgCig2wuaiTX JMeulsB6sGTIz6II+BAh+VsBicNw2rQ= -----END CERTIFICATE-----Generated at Sat Jun 7 23:16:33 2025 by rpki-client