$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bbb8337a-8c73-3691-9038-f5a02949da6f.roa File: bbb8337a-8c73-3691-9038-f5a02949da6f.roa (raw, json) Hash identifier: Cy+UtgX8wmKaACEPp1Q5CZJBFbkOJAB73V2A7YugOS8= Subject key identifier: 42:DF:FF:54:3B:FA:75:0B:96:D2:26:CD:25:7C:75:8F:49:4E:67:DC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5813A086B770929C7B18880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bbb8337a-8c73-3691-9038-f5a02949da6f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.197.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:3a:08:6b:77:09:29:c7:b1:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d0c458bd-ae16-4a3d-a5a3-c848a2d4b3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:00:d8:7f:69:28:c6:b8:6f:5b:c8:1b:ff: 37:a5:4a:e7:a9:a8:39:4f:b8:77:b9:c6:d6:08:ff: be:ac:40:ee:53:87:03:97:08:c0:0a:10:e1:73:f3: 35:58:3a:da:17:26:48:3d:df:f6:ca:50:99:9b:1d: 36:a6:a1:f2:71:3e:c9:fe:5b:80:82:28:2f:48:0c: b7:60:ed:87:a5:ef:66:08:5c:3a:fc:bb:95:0b:2d: 89:f0:c2:32:5f:d9:19:30:8a:83:5b:f2:70:a9:55: 61:74:0e:9a:6c:42:4d:51:67:40:d5:0d:b1:7a:fd: ab:14:13:a9:d9:3d:a4:41:95:94:98:73:fa:42:46: b1:9a:b9:e3:73:7a:54:db:62:af:2e:58:ed:dc:e7: a3:7c:e0:35:a6:b4:ff:78:0e:30:46:0c:62:be:50: 67:c1:d4:1f:df:bc:8e:d8:13:ac:38:6b:3a:5a:e6: 04:15:ed:b6:17:e5:c0:1a:41:dd:3f:64:cd:00:8c: fc:9f:98:59:6c:60:79:94:2d:28:78:d1:8e:74:d9: f2:80:52:7b:6c:80:67:52:67:29:72:2f:05:37:08: 65:06:aa:09:66:92:0f:20:bb:ed:77:e1:81:21:72: b8:c2:b2:9a:1a:0d:0a:64:60:5b:22:0d:be:33:37: 8a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DF:FF:54:3B:FA:75:0B:96:D2:26:CD:25:7C:75:8F:49:4E:67:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bbb8337a-8c73-3691-9038-f5a02949da6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:83:69:18:dc:9f:51:c2:7b:eb:d8:fd:46:37:57:ed:76:02: b8:cc:cb:0f:f2:db:39:02:20:b3:33:6d:ae:a9:be:61:c0:78: d0:9f:39:6a:97:be:ac:76:55:a9:aa:af:59:ce:5b:a5:55:48: a7:98:2e:1a:75:ec:06:4a:60:99:0e:fc:90:db:dd:22:76:11: 7d:36:32:9c:ed:9d:59:54:0f:a6:f1:7c:24:75:37:96:e0:a0: 74:a7:62:ce:23:87:c3:f6:e1:8c:58:71:9c:9d:4f:21:1f:8b: ff:1b:50:ba:0d:ad:04:22:d0:6e:43:70:19:18:b9:69:97:50: e2:96:99:f3:5c:d0:c2:b9:64:ae:fe:da:04:bb:44:b2:aa:49: fb:1f:c2:ea:0c:ab:5e:bb:31:62:cd:61:79:8e:21:f6:bb:f7: 20:d0:1d:19:b5:c9:01:67:c2:33:b2:fa:3a:0c:28:8e:fb:7e: 08:3f:67:f3:b8:57:ce:c2:a0:7a:82:43:d7:d1:7d:bf:6f:70: 3f:c6:7a:08:03:93:9b:47:ac:7b:0d:01:22:4e:fd:78:60:a3: 9c:8b:45:98:b9:f0:4d:76:82:d2:d9:b1:80:e3:5a:2e:cb:a3: 31:9b:9d:77:48:48:7d:2c:1d:52:07:d4:26:70:83:39:41:e4: 5a:3c:82:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgToIa3cJKcexiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDBjNDU4YmQtYWUxNi00YTNkLWE1YTMtYzg0OGEyZDRiM2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVgA2H9pKMa4b1vIG/83pUrnqag5T7h3ucbW CP++rEDuU4cDlwjAChDhc/M1WDraFyZIPd/2ylCZmx02pqHycT7J/luAgigvSAy3 YO2Hpe9mCFw6/LuVCy2J8MIyX9kZMIqDW/JwqVVhdA6abEJNUWdA1Q2xev2rFBOp 2T2kQZWUmHP6Qkaxmrnjc3pU22KvLljt3OejfOA1prT/eA4wRgxivlBnwdQf37yO 2BOsOGs6WuYEFe22F+XAGkHdP2TNAIz8n5hZbGB5lC0oeNGOdNnygFJ7bIBnUmcp ci8FNwhlBqoJZpIPILvtd+GBIXK4wrKaGg0KZGBbIg2+MzeKxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELf/1Q7+nULltImzSV8dY9JTmfcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmJiODMzN2EtOGM3My0z NjkxLTkwMzgtZjVhMDI5NDlkYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGDaRjcn1HCe+vY/UY3V+12ArjMyw/y2zkCILMzba6pvmHAeNCfOWqX vqx2Vamqr1nOW6VVSKeYLhp17AZKYJkO/JDb3SJ2EX02MpztnVlUD6bxfCR1N5bg oHSnYs4jh8P24YxYcZydTyEfi/8bULoNrQQi0G5DcBkYuWmXUOKWmfNc0MK5ZK7+ 2gS7RLKqSfsfwuoMq167MWLNYXmOIfa79yDQHRm1yQFnwjOy+joMKI77fgg/Z/O4 V87CoHqCQ9fRfb9vcD/GeggDk5tHrHsNASJO/Xhgo5yLRZi58E12gtLZsYDjWi7L ozGbnXdISH0sHVIH1CZwgzlB5Fo8glo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:13 2025 by rpki-client