$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb8b6fe5-e8f2-353c-8b91-9581b52091f7.roa File: bb8b6fe5-e8f2-353c-8b91-9581b52091f7.roa (raw, json) Hash identifier: qM68LJFNLmC18i9aLT66sjwW6CtsoCRC8P7pZF1y3Ag= Subject key identifier: D3:63:B0:1D:11:80:C0:12:6D:84:12:13:AF:42:5E:5F:BE:17:D0:85 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5813DCAAA9D015039A94F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb8b6fe5-e8f2-353c-8b91-9581b52091f7.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.198.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:3d:ca:aa:9d:01:50:39:a9:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2a47d050-6573-43a8-ae58-af3dcfa26f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:09:e6:0b:24:37:2a:84:15:65:63:aa:19:68: 27:f2:09:6a:44:56:67:40:9e:d4:ec:75:72:f6:7c: 59:55:f7:5f:87:a6:13:67:0b:c9:8a:b9:34:60:2b: c9:9b:a4:72:da:6e:41:e2:47:6e:ab:3a:97:49:f6: 8e:0d:fe:21:1a:29:ec:72:ae:8d:22:0a:a6:e8:00: 23:56:8f:25:f1:85:ed:ba:c7:fa:b5:77:6b:6c:64: fd:e5:1f:25:73:0d:75:1c:04:e3:30:51:67:56:05: 9a:82:35:f7:d8:7b:3b:fc:72:9d:70:d3:47:1c:6c: dd:e3:fb:ee:a7:57:e3:09:2a:21:b7:2c:4a:94:b9: d4:03:bd:4f:15:83:98:eb:31:98:3d:71:cd:c8:2b: 63:d0:67:53:87:88:f6:bb:f9:56:59:71:5f:e2:6f: 44:42:6e:2d:8a:3c:d7:56:82:88:62:ad:55:70:ec: 2b:9b:18:0a:f0:21:e9:57:9d:e9:78:b5:de:3d:9d: 22:6c:23:68:01:df:3a:c8:f5:6f:48:7f:d1:a4:35: 3c:af:0e:8b:9b:24:33:3f:6f:a8:f0:d5:8e:36:7d: cd:a4:94:c1:0e:08:62:33:94:58:f7:10:8e:ce:0e: b4:61:c6:4a:05:a7:4b:98:9d:ae:b9:73:3a:ba:50: a7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:63:B0:1D:11:80:C0:12:6D:84:12:13:AF:42:5E:5F:BE:17:D0:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb8b6fe5-e8f2-353c-8b91-9581b52091f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:81:83:c4:11:ff:40:7b:d6:99:7a:aa:5a:47:72:40:d4:c5: ce:5f:f1:c9:ea:b6:cc:68:46:46:ad:02:c0:93:47:55:4f:7b: a5:82:ef:a0:91:46:8e:d8:91:82:ed:c8:85:3b:79:b7:80:d7: 70:33:04:fa:5b:75:a0:c7:c3:73:6f:7b:a1:d6:23:cd:64:3a: 18:a0:7b:5b:87:47:82:e2:8a:f0:93:81:70:7c:bc:4d:a8:43: 4a:6c:cc:77:9e:07:dc:7e:c8:e6:bf:83:b1:28:42:b2:9e:14: 18:16:02:0d:a9:ad:1c:27:b3:72:c0:ff:22:9b:56:15:45:cf: 5c:81:6a:e4:34:86:a1:5c:5f:08:f7:c2:4b:e9:21:88:b0:8d: e9:86:c9:47:13:e4:f8:a2:51:d6:43:c8:1a:ab:a5:d2:6a:21: 6f:f0:c7:76:e5:8c:59:ea:92:af:f3:0e:1a:3a:8d:0e:34:53: c0:20:94:b6:d5:ed:6f:e4:60:07:8a:fb:c9:af:bf:eb:e3:2d: 6a:28:1d:35:0b:21:f9:ce:bf:40:24:4c:5b:b3:9f:30:37:de: 35:af:7d:d1:2e:81:93:5e:1f:c1:c4:f4:c9:96:9c:84:23:b1: 56:6a:dd:01:3c:5a:62:7b:de:5d:16:7a:04:b7:5d:0c:8f:4f: 42:2c:ac:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgT3Kqp0BUDmpT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MmE0N2QwNTAtNjU3My00M2E4LWFlNTgtYWYzZGNmYTI2ZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAnmCyQ3KoQVZWOqGWgn8glqRFZnQJ7U7HVy 9nxZVfdfh6YTZwvJirk0YCvJm6Ry2m5B4kduqzqXSfaODf4hGinscq6NIgqm6AAj Vo8l8YXtusf6tXdrbGT95R8lcw11HATjMFFnVgWagjX32Hs7/HKdcNNHHGzd4/vu p1fjCSohtyxKlLnUA71PFYOY6zGYPXHNyCtj0GdTh4j2u/lWWXFf4m9EQm4tijzX VoKIYq1VcOwrmxgK8CHpV53peLXePZ0ibCNoAd86yPVvSH/RpDU8rw6LmyQzP2+o 8NWONn3NpJTBDghiM5RY9xCOzg60YcZKBadLmJ2uuXM6ulCnswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNjsB0RgMASbYQSE69CXl++F9CFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmI4YjZmZTUtZThmMi0z NTNjLThiOTEtOTU4MWI1MjA5MWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8ZOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGBg8QR/0B71pl6qlpHckDUxc5f8cnqtsxoRkatAsCTR1VPe6WC76CR Ro7YkYLtyIU7ebeA13AzBPpbdaDHw3Nve6HWI81kOhige1uHR4LiivCTgXB8vE2o Q0pszHeeB9x+yOa/g7EoQrKeFBgWAg2prRwns3LA/yKbVhVFz1yBauQ0hqFcXwj3 wkvpIYiwjemGyUcT5PiiUdZDyBqrpdJqIW/wx3bljFnqkq/zDho6jQ40U8AglLbV 7W/kYAeK+8mvv+vjLWooHTULIfnOv0AkTFuznzA33jWvfdEugZNeH8HE9MmWnIQj sVZq3QE8WmJ73l0WegS3XQyPT0IsrCY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:28 2025 by rpki-client