$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bd4f0ff9-a650-38e7-bf43-75822ec0cb69.roa File: bd4f0ff9-a650-38e7-bf43-75822ec0cb69.roa (raw, json) Hash identifier: z6VMBB8CUg/mBHM+KKxUsmgLQZKdIrML8Plc9QbwnR0= Subject key identifier: 1A:53:12:04:AF:FC:43:EF:4C:17:87:72:0E:57:33:0D:CB:63:21:A0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581C4688B2349FB101FE040 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bd4f0ff9-a650-38e7-bf43-75822ec0cb69.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.197.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:c4:68:8b:23:49:fb:10:1f:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=7e91438c-ff7f-452f-a1d2-dad83479ffb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:94:14:0c:a4:e6:b7:d4:b4:92:c8:80:1a:2d: c3:32:fe:ff:b0:31:16:e4:57:7c:3c:ba:7d:17:c7: 11:a3:08:01:74:11:93:dc:85:37:8a:8a:f3:68:18: 4f:ff:21:22:75:dc:25:10:36:c0:4e:19:96:f6:16: 52:c7:79:4c:55:f9:5e:6a:cc:20:50:55:82:28:0e: db:94:51:72:50:28:91:19:0c:78:c1:e8:4f:5b:5c: bb:b0:d7:b4:6b:a8:44:1e:b6:70:68:7c:75:9d:7e: 54:65:a2:f4:c9:bf:d2:b1:88:00:59:9d:14:a9:60: 84:ec:2c:47:f4:69:cb:48:df:40:e4:1b:e0:7e:cf: 76:67:12:66:78:70:3a:80:d9:c5:46:ae:9b:c3:b0: 45:18:e9:5a:8c:59:f9:cb:b5:56:58:e5:89:e7:6c: fb:e7:9f:7d:4a:c0:42:67:3b:3e:f9:4d:52:69:83: 43:b8:0e:70:ff:30:76:cf:fc:b0:69:7e:46:97:d6: ac:5d:c5:ac:0f:e7:bb:4c:7c:3f:aa:ae:20:52:da: 23:17:e7:22:f9:87:a5:57:47:e4:16:4a:ca:8a:76: 3c:f4:39:79:03:52:e8:b2:5e:ef:cd:b9:29:92:e7: 1b:8f:15:a6:b0:c2:50:6f:4e:be:56:f6:dc:d9:38: e1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:53:12:04:AF:FC:43:EF:4C:17:87:72:0E:57:33:0D:CB:63:21:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bd4f0ff9-a650-38e7-bf43-75822ec0cb69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:bb:3c:6c:11:c7:2b:1b:37:5e:40:18:86:e6:c2:7c:2b:bf: 23:1a:fa:61:06:dd:d4:06:d1:7b:b9:d6:2c:ce:95:2c:1e:8b: 66:8d:1e:e4:2c:49:73:2a:c6:9e:5d:75:6b:43:7b:28:94:fe: ba:98:cc:09:65:ad:af:0d:40:ff:e6:2f:51:51:15:b1:3f:a4: 0b:40:b8:ab:c4:43:bd:ec:df:e8:09:f2:2f:24:5d:cd:66:9e: 5d:b7:22:12:ab:a3:0c:7c:97:c1:fe:5a:82:03:77:8a:4e:46: b0:1d:d9:ed:a6:1f:c7:9c:f2:fc:a2:08:4f:f3:e0:7a:23:b1: 31:0a:a9:9a:6a:0e:3a:e8:98:5f:ae:71:6c:73:94:34:8b:34: 09:f3:55:79:0f:15:04:ec:d1:df:04:90:b2:cb:76:85:ce:09: 13:3f:89:9d:77:e3:84:e4:57:3a:6a:b9:22:bc:80:4f:4b:70: f9:d2:7e:13:b5:df:38:68:55:3f:a3:db:35:11:33:ce:3a:21: 6c:df:71:80:16:bf:9e:21:ec:ab:3b:33:f3:42:58:5d:06:f9: 2c:4d:71:55:38:46:b8:86:27:ab:5d:bb:e7:51:eb:32:95:36: d3:e4:8a:ed:71:5b:80:a9:61:ab:bc:50:c3:08:80:71:de:0d: f8:c7:94:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcRoiyNJ+xAf4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk N2U5MTQzOGMtZmY3Zi00NTJmLWExZDItZGFkODM0NzlmZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JQUDKTmt9S0ksiAGi3DMv7/sDEW5Fd8PLp9 F8cRowgBdBGT3IU3iorzaBhP/yEiddwlEDbAThmW9hZSx3lMVfleaswgUFWCKA7b lFFyUCiRGQx4wehPW1y7sNe0a6hEHrZwaHx1nX5UZaL0yb/SsYgAWZ0UqWCE7CxH 9GnLSN9A5Bvgfs92ZxJmeHA6gNnFRq6bw7BFGOlajFn5y7VWWOWJ52z75599SsBC Zzs++U1SaYNDuA5w/zB2z/ywaX5Gl9asXcWsD+e7THw/qq4gUtojF+ci+YelV0fk FkrKinY89Dl5A1Losl7vzbkpkucbjxWmsMJQb06+Vvbc2TjhXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpTEgSv/EPvTBeHcg5XMw3LYyGgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmQ0ZjBmZjktYTY1MC0z OGU3LWJmNDMtNzU4MjJlYzBjYjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8UUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKi7PGwRxysbN15AGIbmwnwrvyMa+mEG3dQG0Xu51izOlSwei2aNHuQs SXMqxp5ddWtDeyiU/rqYzAllra8NQP/mL1FRFbE/pAtAuKvEQ73s3+gJ8i8kXc1m nl23IhKrowx8l8H+WoIDd4pORrAd2e2mH8ec8vyiCE/z4HojsTEKqZpqDjromF+u cWxzlDSLNAnzVXkPFQTs0d8EkLLLdoXOCRM/iZ1344TkVzpquSK8gE9LcPnSfhO1 3zhoVT+j2zURM846IWzfcYAWv54h7Ks7M/NCWF0G+SxNcVU4RriGJ6tdu+dR6zKV NtPkiu1xW4CpYau8UMMIgHHeDfjHlOc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:40 2025 by rpki-client