$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c669e815-026d-366a-a38a-f39022708b0c.roa File: c669e815-026d-366a-a38a-f39022708b0c.roa (raw, json) Hash identifier: RFGLRNVpO1Xy4swLZEvVpnhQg3TEBuN5kQABJ7yBVRM= Subject key identifier: 70:AF:D6:11:AF:A4:1C:F0:7B:6D:95:DF:7D:FE:13:62:2F:4B:D6:E8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581331DEB8FA790ADAE8600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c669e815-026d-366a-a38a-f39022708b0c.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:33:1d:eb:8f:a7:90:ad:ae:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3a7031f2-cbae-46ab-b7c2-73fe0a33a459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:94:36:ea:40:6f:b2:7c:72:2e:dd:c3:cb:52: 22:7e:f7:04:27:0c:f6:6c:7d:d9:1f:95:29:6b:e1: f2:22:60:fc:ce:64:26:d1:cb:2d:1f:8c:c4:f8:0a: 95:d3:1b:e4:36:f3:a9:88:cd:ce:3c:92:b4:b0:cc: bc:dd:7e:e7:ff:c9:1f:6a:b1:d5:e3:26:25:10:8c: 0c:7e:f5:c3:68:d5:34:62:bf:f2:4d:05:94:ed:f8: 2a:25:8a:e2:ac:bd:4f:ae:5b:bd:25:64:f7:24:bb: 99:76:66:61:75:27:32:a7:9f:38:04:a3:0d:e8:9c: 78:d9:c1:49:da:9b:68:ae:85:e7:45:09:3e:00:83: d5:3d:3b:84:e9:71:4b:ff:32:90:3a:12:2f:f1:23: 5c:a8:2d:c3:10:5b:fd:74:dd:bf:2e:f1:07:db:d3: 05:34:b9:76:b3:e5:29:00:f3:4b:5a:3f:7c:38:39: b7:74:d5:30:61:43:24:ac:4a:68:63:13:ee:42:9d: fb:88:74:90:f2:d6:5d:b8:75:25:be:80:9f:58:ac: 46:2f:d3:cb:88:c9:83:70:e0:d4:b8:11:f2:5e:97: 6d:c7:77:d8:71:76:d1:0b:0f:13:57:a1:aa:80:85: 00:fe:20:f7:5d:c6:34:9f:54:fe:a1:f7:81:18:e2: 02:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AF:D6:11:AF:A4:1C:F0:7B:6D:95:DF:7D:FE:13:62:2F:4B:D6:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c669e815-026d-366a-a38a-f39022708b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:a0:48:09:fa:0c:fa:56:d4:0f:9c:81:e1:c6:0c:b7:ba:0e: af:65:1f:7f:57:d4:9d:13:3b:ec:e3:d4:36:4a:23:32:20:ec: d6:57:4d:af:6a:f8:30:90:d2:5e:88:bf:a9:bd:2b:8c:99:38: fe:25:7f:19:45:46:ad:8f:ba:72:01:44:4e:79:d9:dd:b7:27: 11:64:02:45:e6:f0:8b:9c:2f:88:33:86:b2:13:bd:ea:96:1b: 1a:51:cd:cd:2a:18:2a:de:29:6a:c0:82:b9:1b:f8:44:72:1c: 2f:0b:39:56:12:75:14:13:0f:f7:c6:1b:ae:ad:a4:ce:10:bc: 0e:be:4a:87:a8:2d:82:6f:8f:19:e2:f8:d7:f1:a4:a1:92:82: 79:62:3e:ca:06:87:7d:5e:89:5b:b5:70:65:b1:f7:d3:fb:50: bc:77:ad:c3:7b:34:c5:b1:7c:01:d0:4c:a6:2a:03:32:27:4d: b4:df:5c:be:09:c4:f8:36:bc:b2:70:7a:3d:18:cb:02:d8:63: c7:f2:34:38:47:9a:05:25:6a:49:ea:c4:8a:83:55:bf:b2:c7: 32:a4:0a:3d:6c:f5:19:1d:ef:39:cf:42:eb:8b:7e:c4:b5:80: 6e:55:a7:9a:db:27:3a:a0:d5:3d:64:15:19:33:23:97:cf:8e: 01:e2:46:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgTMd64+nkK2uhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2E3MDMxZjItY2JhZS00NmFiLWI3YzItNzNmZTBhMzNhNDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5Q26kBvsnxyLt3Dy1IifvcEJwz2bH3ZH5Up a+HyImD8zmQm0cstH4zE+AqV0xvkNvOpiM3OPJK0sMy83X7n/8kfarHV4yYlEIwM fvXDaNU0Yr/yTQWU7fgqJYrirL1Prlu9JWT3JLuZdmZhdScyp584BKMN6Jx42cFJ 2ptoroXnRQk+AIPVPTuE6XFL/zKQOhIv8SNcqC3DEFv9dN2/LvEH29MFNLl2s+Up APNLWj98ODm3dNUwYUMkrEpoYxPuQp37iHSQ8tZduHUlvoCfWKxGL9PLiMmDcODU uBHyXpdtx3fYcXbRCw8TV6GqgIUA/iD3XcY0n1T+ofeBGOICMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCv1hGvpBzwe22V333+E2IvS9boMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzY2OWU4MTUtMDI2ZC0z NjZhLWEzOGEtZjM5MDIyNzA4YjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANWgSAn6DPpW1A+cgeHGDLe6Dq9lH39X1J0TO+zj1DZKIzIg7NZXTa9q +DCQ0l6Iv6m9K4yZOP4lfxlFRq2PunIBRE552d23JxFkAkXm8IucL4gzhrITveqW GxpRzc0qGCreKWrAgrkb+ERyHC8LOVYSdRQTD/fGG66tpM4QvA6+SoeoLYJvjxni +NfxpKGSgnliPsoGh31eiVu1cGWx99P7ULx3rcN7NMWxfAHQTKYqAzInTbTfXL4J xPg2vLJwej0YywLYY8fyNDhHmgUlaknqxIqDVb+yxzKkCj1s9Rkd7znPQuuLfsS1 gG5Vp5rbJzqg1T1kFRkzI5fPjgHiRrc= -----END CERTIFICATE-----Generated at Fri Mar 14 10:58:40 2025 by rpki-client