$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c34d3de3-f888-3d22-939e-9a0482dd6064.roa File: c34d3de3-f888-3d22-939e-9a0482dd6064.roa (raw, json) Hash identifier: zAXijZY8OS5T5PsTNvK3qIg49VwKKkMJkdsQ/8CXtbg= Subject key identifier: 27:47:0C:46:36:8C:E6:86:13:F0:F0:CF:45:07:B6:3D:91:F5:A3:73 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581BEE687FE68F7E8E45010 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c34d3de3-f888-3d22-939e-9a0482dd6064.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:be:e6:87:fe:68:f7:e8:e4:50:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=4dfc3dee-eea4-4dd4-b31b-b0f5de418221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:2b:f3:e9:57:3f:11:f6:f7:78:e6:0d:6d: 17:de:12:c0:14:b9:95:2d:c4:46:2d:b1:ca:9f:83: ef:52:a0:eb:d5:cf:78:de:ff:a9:5c:a2:44:d8:28: 3a:f0:c5:25:c3:db:e1:bc:9a:30:c9:67:a2:3b:20: cb:35:71:e5:5a:3e:cd:eb:36:80:b7:cb:ac:b5:ee: f5:76:0b:db:e8:64:09:8f:23:ce:12:fe:b5:e0:54: 4d:5c:9c:36:93:e3:b9:e0:25:72:e9:a8:8a:05:f3: c2:48:f8:d1:aa:fd:54:f5:8a:3d:cc:1d:3d:c8:4f: 48:13:a4:c6:5d:ee:f2:c0:fd:b2:4d:6d:39:d7:6c: 37:5b:05:87:e1:a9:35:a4:a9:61:a4:06:73:de:a3: 88:d1:59:1d:39:2c:a1:e9:31:61:80:32:a0:38:18: 5a:c4:d7:1e:2f:73:74:52:31:b7:8a:a1:20:58:a8: 3e:41:73:8e:e4:2f:89:1b:5f:be:cf:22:c3:1a:8d: 89:fe:0d:e2:d7:22:d3:fb:de:82:07:f6:a5:ee:d4: 22:67:bf:05:5f:bb:09:49:02:d2:c0:49:9b:ad:2b: 6a:28:30:d0:c4:69:10:cf:36:eb:9e:91:b0:3c:b9: 85:f7:3d:e3:2f:38:b8:45:e4:f4:30:ca:d6:ca:eb: 49:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:47:0C:46:36:8C:E6:86:13:F0:F0:CF:45:07:B6:3D:91:F5:A3:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c34d3de3-f888-3d22-939e-9a0482dd6064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:72:95:1a:c7:ed:3f:1e:96:fb:06:53:0c:01:86:77:82:18: 8a:56:57:b1:bf:0d:c0:13:1f:26:1d:34:92:0f:40:ec:08:f6: 91:cc:69:42:e1:23:2b:03:f5:1f:8e:da:f4:c3:4e:2b:45:9d: 02:ab:c0:b1:7e:24:8f:1d:f8:14:d7:75:0c:29:99:7a:a4:b6: b2:03:9e:22:8f:eb:4b:7e:07:35:da:a1:22:7e:c7:09:42:ea: 50:ae:85:c5:42:1f:a9:d5:25:7e:bb:49:2b:1c:67:d8:dd:58: 6b:1b:47:6f:25:33:d8:aa:fd:60:46:7b:1a:58:4e:67:32:65: 2f:0e:9c:83:04:71:50:44:cd:6e:1b:08:94:af:28:09:f4:30: 68:06:23:d3:f1:05:6c:a2:73:ef:04:64:a3:f6:11:d4:86:05: d4:29:9d:60:88:66:2d:22:76:88:17:84:c6:3c:a8:0f:63:25: 2c:8c:8c:2b:2a:60:50:9d:b4:d0:27:1a:0e:6a:b8:34:dc:81: 68:5d:b6:36:9b:15:b9:63:22:ec:92:ae:e2:0b:1a:b3:d8:4c: ca:92:96:40:20:96:6a:92:3e:a6:bb:20:1e:79:dc:13:01:3c: 88:2d:3c:9f:63:5b:42:ff:03:16:f7:b8:40:25:62:8a:ad:29: 04:d3:ca:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgb7mh/5o9+jkUBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NGRmYzNkZWUtZWVhNC00ZGQ0LWIzMWItYjBmNWRlNDE4MjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorEr8+lXPxH293jmDW0X3hLAFLmVLcRGLbHK n4PvUqDr1c943v+pXKJE2Cg68MUlw9vhvJowyWeiOyDLNXHlWj7N6zaAt8uste71 dgvb6GQJjyPOEv614FRNXJw2k+O54CVy6aiKBfPCSPjRqv1U9Yo9zB09yE9IE6TG Xe7ywP2yTW0512w3WwWH4ak1pKlhpAZz3qOI0VkdOSyh6TFhgDKgOBhaxNceL3N0 UjG3iqEgWKg+QXOO5C+JG1++zyLDGo2J/g3i1yLT+96CB/al7tQiZ78FX7sJSQLS wEmbrStqKDDQxGkQzzbrnpGwPLmF9z3jLzi4ReT0MMrWyutJ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdHDEY2jOaGE/Dwz0UHtj2R9aNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzM0ZDNkZTMtZjg4OC0z ZDIyLTkzOWUtOWEwNDgyZGQ2MDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8Q2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdylRrH7T8elvsGUwwBhneCGIpWV7G/DcATHyYdNJIPQOwI9pHMaULh IysD9R+O2vTDTitFnQKrwLF+JI8d+BTXdQwpmXqktrIDniKP60t+BzXaoSJ+xwlC 6lCuhcVCH6nVJX67SSscZ9jdWGsbR28lM9iq/WBGexpYTmcyZS8OnIMEcVBEzW4b CJSvKAn0MGgGI9PxBWyic+8EZKP2EdSGBdQpnWCIZi0idogXhMY8qA9jJSyMjCsq YFCdtNAnGg5quDTcgWhdtjabFbljIuySruILGrPYTMqSlkAglmqSPqa7IB553BMB PIgtPJ9jW0L/Axb3uEAlYoqtKQTTyp0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:36 2025 by rpki-client