$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc9d7011-71a1-3180-aab5-f01eb8c9b5a9.roa File: cc9d7011-71a1-3180-aab5-f01eb8c9b5a9.roa (raw, json) Hash identifier: cXB71ZlBfQqcI3OJk2H8N5azpoD8S+szgd6ye8ZAFUs= Subject key identifier: 07:38:1A:66:66:CF:F7:6E:B1:7E:6F:BA:0F:63:4D:F7:70:D8:5F:E9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5813D4F0EA1D4CCF7F8B780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc9d7011-71a1-3180-aab5-f01eb8c9b5a9.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.198.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:3d:4f:0e:a1:d4:cc:f7:f8:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=c1270f1f-903d-4284-af51-20dbb9501dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:71:1f:29:67:3f:16:46:ac:74:12:98:0a:03: 90:68:71:f7:6b:dd:35:13:eb:c6:1f:3e:0c:79:64: bd:02:35:af:78:d2:ab:c9:09:67:05:e0:bf:d7:81: 90:4e:5a:9a:3f:f5:02:ba:61:87:ab:45:73:a1:69: dc:0c:00:63:55:b8:c7:ac:1e:c6:24:2b:1f:ff:c4: d3:85:80:7b:26:da:5b:64:4b:4b:10:b2:e3:7c:97: 7e:83:dc:9a:97:5a:2a:63:5f:c3:b3:40:ef:a5:27: 63:f8:a8:ab:90:70:e0:72:66:04:92:e9:6f:77:dd: 59:ed:26:fe:4e:b3:de:a4:dc:99:22:68:94:8e:b2: 31:b3:28:23:ed:c8:06:8c:93:63:4d:c6:fe:c6:3e: 0d:ac:27:2c:f7:8f:73:46:16:f8:57:d8:f0:99:19: 00:22:58:1c:c7:d7:88:bd:0f:c3:b4:5f:ae:4f:57: 82:96:e5:04:55:2f:78:16:55:7b:d4:37:bc:09:a1: 3d:54:d2:3e:d4:85:f6:a1:92:3e:9b:3b:4c:6e:51: 6c:4e:07:85:25:35:3d:f7:17:84:4a:76:d2:66:eb: 3b:c9:a9:26:65:c2:f9:d7:ed:51:cd:66:fd:a1:0e: 11:de:fd:ae:ff:73:bf:a2:72:e8:81:78:85:21:55: 17:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:38:1A:66:66:CF:F7:6E:B1:7E:6F:BA:0F:63:4D:F7:70:D8:5F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc9d7011-71a1-3180-aab5-f01eb8c9b5a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d1:f7:96:31:4d:a8:cc:99:bd:f5:5f:b6:fe:22:b5:2d:cd: 88:22:9b:1e:ad:fb:f3:8a:65:0f:89:5a:a2:5b:5b:ea:89:b9: 30:53:7b:86:ed:6c:7f:3d:3e:32:42:77:e7:c8:a6:48:6c:19: 3c:df:f5:2f:08:70:28:50:a9:58:f7:74:e2:df:c9:88:cd:60: 8d:d0:70:9c:64:8b:74:ed:66:ec:70:72:a3:45:a4:eb:bb:5e: d2:fd:ca:dd:4b:86:b6:ae:c6:32:a2:6f:56:18:8d:68:b0:43: e8:af:7d:64:8e:b2:8f:2e:a1:61:39:cc:c0:c7:10:a3:a6:7e: fc:3e:9b:8d:e2:89:51:e1:46:5d:de:98:24:ae:d2:00:93:0a: 2a:b1:85:d0:69:10:ce:ce:d1:a2:53:de:0a:dd:33:15:b0:94: 8c:22:fd:c3:03:e5:b6:36:10:4a:54:32:4d:b9:c1:c7:7a:2f: a2:81:1a:89:1d:40:7b:15:fc:32:28:4e:c4:16:0f:dd:30:c7: 9a:87:b8:2e:a0:54:c7:40:1b:e6:85:d0:dd:94:54:89:df:e0: 84:bc:ea:60:60:cf:37:f0:72:a9:93:44:02:d0:18:3f:d7:2c: 09:11:09:b7:9e:c3:52:85:e1:5c:14:7f:79:33:d1:20:29:c4: b5:26:45:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgT1PDqHUzPf4t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YzEyNzBmMWYtOTAzZC00Mjg0LWFmNTEtMjBkYmI5NTAxZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXEfKWc/FkasdBKYCgOQaHH3a901E+vGHz4M eWS9AjWveNKryQlnBeC/14GQTlqaP/UCumGHq0VzoWncDABjVbjHrB7GJCsf/8TT hYB7JtpbZEtLELLjfJd+g9yal1oqY1/Ds0DvpSdj+KirkHDgcmYEkulvd91Z7Sb+ TrPepNyZImiUjrIxsygj7cgGjJNjTcb+xj4NrCcs949zRhb4V9jwmRkAIlgcx9eI vQ/DtF+uT1eCluUEVS94FlV71De8CaE9VNI+1IX2oZI+mztMblFsTgeFJTU99xeE SnbSZus7yakmZcL51+1RzWb9oQ4R3v2u/3O/onLogXiFIVUXHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAc4GmZmz/dusX5vug9jTfdw2F/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2M5ZDcwMTEtNzFhMS0z MTgwLWFhYjUtZjAxZWI4YzliNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8Y0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzR95YxTajMmb31X7b+IrUtzYgimx6t+/OKZQ+JWqJbW+qJuTBTe4bt bH89PjJCd+fIpkhsGTzf9S8IcChQqVj3dOLfyYjNYI3QcJxki3TtZuxwcqNFpOu7 XtL9yt1LhrauxjKib1YYjWiwQ+ivfWSOso8uoWE5zMDHEKOmfvw+m43iiVHhRl3e mCSu0gCTCiqxhdBpEM7O0aJT3grdMxWwlIwi/cMD5bY2EEpUMk25wcd6L6KBGokd QHsV/DIoTsQWD90wx5qHuC6gVMdAG+aF0N2UVInf4IS86mBgzzfwcqmTRALQGD/X LAkRCbeew1KF4VwUf3kz0SApxLUmRVs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:17 2025 by rpki-client