$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d48d4bc8-27b3-38c5-a800-f9f932029937.roa File: d48d4bc8-27b3-38c5-a800-f9f932029937.roa (raw, json) Hash identifier: DU0j5lBO4NYVPvsHuUYRfztFifo+MWwfPEUlRJAoy0Q= Subject key identifier: 6A:5F:34:47:D2:40:66:A7:C2:7B:44:A3:C0:95:3D:69:B0:B1:00:FA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581BE2960E5F86086287780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d48d4bc8-27b3-38c5-a800-f9f932029937.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:be:29:60:e5:f8:60:86:28:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=70380b8c-583d-4a7e-a476-1f52b6cc5a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:27:aa:54:7e:a6:8f:f5:d1:67:a5:8f:d6:de: ba:ae:70:15:70:c9:76:96:e4:91:d1:4b:c6:43:8b: 6f:1a:70:52:e8:dd:d4:66:b3:b3:df:40:90:6f:b6: 7a:2e:9a:55:c4:99:92:91:18:4f:6d:e4:5a:bb:5e: 8c:3c:69:93:9f:d5:20:e0:81:0a:10:e0:4c:fa:aa: ad:10:df:60:2c:45:c8:34:60:d4:9f:51:b7:33:29: b7:07:8e:f1:95:71:d0:3d:85:42:1b:bd:63:4f:e4: 9f:25:8e:cf:91:0a:cb:94:de:95:c3:60:4f:c8:11: 1b:9c:41:53:a7:0d:66:f2:73:49:3b:58:ef:fe:b1: 8f:96:88:6e:f7:59:67:63:08:be:23:39:08:52:fa: 5a:c8:42:1a:74:97:58:1a:7f:57:9a:86:55:c4:e2: f2:81:ab:26:45:f2:ee:76:03:d3:08:a5:d5:2d:7c: c7:54:f0:c0:02:07:05:1d:23:94:0b:cf:c6:a0:96: a9:d2:aa:09:a4:91:50:5d:d0:d1:d3:ec:16:8c:9e: 79:8c:08:ba:e7:54:dd:70:dd:70:94:67:5f:a3:3c: 8a:da:ea:71:11:31:7e:66:6c:37:af:2d:40:fc:f7: 8c:5a:f5:36:32:29:d8:7c:88:17:ef:49:0e:02:23: 99:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5F:34:47:D2:40:66:A7:C2:7B:44:A3:C0:95:3D:69:B0:B1:00:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d48d4bc8-27b3-38c5-a800-f9f932029937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ad:1e:06:33:dc:40:29:c0:ee:14:21:11:17:29:ff:48:f9: ed:cc:eb:90:9a:46:7c:55:13:09:dd:88:3c:2f:f2:ce:ca:da: 84:69:36:9b:bd:df:5e:18:fd:20:2e:0d:2f:10:b2:b2:5d:e8: fd:9e:7a:5c:fb:4d:10:07:ac:0d:e6:f8:48:3e:d9:e7:06:c3: 82:77:c4:8d:6d:12:74:60:ba:38:57:c9:d5:2a:fd:20:eb:53: 67:d8:98:55:27:fe:5b:df:5c:fb:b5:38:42:bc:7e:37:92:23: 26:da:ed:d4:b6:65:6f:df:f1:ed:7e:49:c9:a5:15:e8:7f:33: c4:fa:25:9c:95:83:f6:93:cb:12:6c:2e:c5:f0:4b:f4:f9:ed: 36:8c:34:ff:ba:3b:da:c0:73:b1:2f:5c:4b:01:86:d9:39:8b: 52:3b:b6:a6:0a:59:18:ca:69:c9:1f:49:54:d4:17:9d:e4:04: 70:ae:3f:19:e5:41:c9:c0:ce:c8:64:08:53:d4:51:d9:1f:42: 67:d4:49:99:60:d9:29:0a:33:bd:10:3f:29:dc:a7:58:10:1d: 16:38:7c:d8:0a:7b:71:18:65:6e:81:f5:c0:21:5f:cd:46:90: 01:2a:45:83:4a:54:2c:d0:aa:10:b1:dd:07:76:c3:9f:21:4a: 88:60:b6:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgb4pYOX4YIYod4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzAzODBiOGMtNTgzZC00YTdlLWE0NzYtMWY1MmI2Y2M1YTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyeqVH6mj/XRZ6WP1t66rnAVcMl2luSR0UvG Q4tvGnBS6N3UZrOz30CQb7Z6LppVxJmSkRhPbeRau16MPGmTn9Ug4IEKEOBM+qqt EN9gLEXINGDUn1G3Mym3B47xlXHQPYVCG71jT+SfJY7PkQrLlN6Vw2BPyBEbnEFT pw1m8nNJO1jv/rGPlohu91lnYwi+IzkIUvpayEIadJdYGn9XmoZVxOLygasmRfLu dgPTCKXVLXzHVPDAAgcFHSOUC8/GoJap0qoJpJFQXdDR0+wWjJ55jAi651TdcN1w lGdfozyK2upxETF+Zmw3ry1A/PeMWvU2MinYfIgX70kOAiOZ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpfNEfSQGanwntEo8CVPWmwsQD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDQ4ZDRiYzgtMjdiMy0z OGM1LWE4MDAtZjlmOTMyMDI5OTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEitHgYz3EApwO4UIREXKf9I+e3M65CaRnxVEwndiDwv8s7K2oRpNpu9 314Y/SAuDS8QsrJd6P2eelz7TRAHrA3m+Eg+2ecGw4J3xI1tEnRgujhXydUq/SDr U2fYmFUn/lvfXPu1OEK8fjeSIyba7dS2ZW/f8e1+ScmlFeh/M8T6JZyVg/aTyxJs LsXwS/T57TaMNP+6O9rAc7EvXEsBhtk5i1I7tqYKWRjKackfSVTUF53kBHCuPxnl QcnAzshkCFPUUdkfQmfUSZlg2SkKM70QPyncp1gQHRY4fNgKe3EYZW6B9cAhX81G kAEqRYNKVCzQqhCx3Qd2w58hSohgttw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:52 2025 by rpki-client