$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8b5700d-2567-396c-8699-74ebc94251d1.roa File: d8b5700d-2567-396c-8699-74ebc94251d1.roa (raw, json) Hash identifier: VYFLb7bo9VL3DWdHANcHgyHB3bh0A/TftkN5yscpJp8= Subject key identifier: 81:D0:0D:3F:8E:A8:7F:6F:1D:15:C5:6E:B6:A5:14:60:99:C1:B3:A7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581CA88D75D16CAC928BB00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8b5700d-2567-396c-8699-74ebc94251d1.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.197.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:ca:88:d7:5d:16:ca:c9:28:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=75cca70e-a43e-4fb0-98a1-247b5fe1d941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d0:d9:0e:b1:ce:3b:17:29:d0:5c:a8:18:6b: 3c:71:3e:dd:5c:0b:c2:16:ba:45:1d:b0:db:47:8f: ac:48:8f:65:30:76:0e:5a:e7:e2:d8:90:d6:b4:69: fc:58:10:81:f4:d8:6a:aa:09:3f:63:8d:d1:d2:d4: 57:eb:23:77:f7:1d:16:3f:0d:75:45:5c:59:e6:77: 7f:76:df:8a:e9:90:be:e3:02:f6:ab:97:ab:d0:57: 23:66:14:e3:c2:97:6d:eb:7e:57:fb:76:17:c3:86: 6b:05:9d:16:e1:2c:2c:27:58:68:36:8f:e2:f7:aa: d4:77:5a:a6:de:94:dc:19:4e:51:1c:f6:27:64:19: 1c:a0:3b:c4:7a:63:26:9a:ad:ae:f7:ff:20:69:e6: a6:84:94:2c:9e:3c:be:2b:cc:01:87:15:b9:54:94: eb:bd:9c:d6:e7:7d:3c:dd:0a:ac:00:3b:62:76:e6: 0c:7f:2f:15:ad:47:b9:b8:ae:51:7b:8d:fc:84:56: c6:c3:d5:5d:51:4c:5d:83:fe:f6:04:86:37:3e:f1: 1d:3f:4a:a8:61:d7:22:0d:ff:dd:af:ef:bc:a9:2f: 66:37:34:eb:5f:3e:53:c6:b4:08:e9:17:e1:40:ed: e2:ee:6f:13:2f:47:de:16:05:4b:05:89:c0:31:36: 7d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D0:0D:3F:8E:A8:7F:6F:1D:15:C5:6E:B6:A5:14:60:99:C1:B3:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8b5700d-2567-396c-8699-74ebc94251d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:5d:2c:59:cf:43:43:c1:cf:eb:49:54:cd:9a:31:88:93:dd: b7:a5:b3:5c:41:31:9e:ba:8e:bf:e6:71:fb:2c:23:7d:7a:59: fc:9c:8f:11:58:74:1b:17:95:fb:8f:76:b4:46:c8:83:14:9c: 9d:a6:d2:1f:39:c1:c6:a4:42:55:64:3e:e2:9d:32:62:34:37: f5:00:bc:64:5b:de:f6:dd:6d:6b:f3:de:08:3a:a6:13:45:d3: d8:0f:db:79:0a:b8:ad:89:71:b7:57:db:b5:bb:8c:7c:4a:3f: b0:48:8d:c6:ba:dd:5d:11:a5:c8:2b:46:52:fd:2c:ee:45:bd: 2d:11:5a:f4:00:af:fc:02:b2:61:eb:52:e0:66:6f:bd:79:70: a3:cd:f2:19:94:ba:72:b9:39:10:52:d5:af:60:37:31:a1:0a: ba:1d:86:a0:e8:78:97:da:e6:30:fd:57:5a:b2:58:ab:6e:e4: d5:e0:b6:55:0b:4e:a8:83:da:5a:a4:88:fd:41:00:1f:61:11: 49:cc:bf:75:1d:9d:e6:35:a0:ed:39:ae:5c:6e:87:4c:43:71: bf:2b:08:72:b4:52:54:c5:b9:0d:2c:dd:ca:5e:c4:25:b8:cb: da:c7:99:cb:f8:17:8c:e1:d5:c7:33:e3:30:02:16:36:c5:bf: 20:39:2b:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcqI110WyskouwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzVjY2E3MGUtYTQzZS00ZmIwLTk4YTEtMjQ3YjVmZTFkOTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNDZDrHOOxcp0FyoGGs8cT7dXAvCFrpFHbDb R4+sSI9lMHYOWufi2JDWtGn8WBCB9Nhqqgk/Y43R0tRX6yN39x0WPw11RVxZ5nd/ dt+K6ZC+4wL2q5er0FcjZhTjwpdt635X+3YXw4ZrBZ0W4SwsJ1hoNo/i96rUd1qm 3pTcGU5RHPYnZBkcoDvEemMmmq2u9/8gaeamhJQsnjy+K8wBhxW5VJTrvZzW5308 3QqsADtiduYMfy8VrUe5uK5Re438hFbGw9VdUUxdg/72BIY3PvEdP0qoYdciDf/d r++8qS9mNzTrXz5TxrQI6RfhQO3i7m8TL0feFgVLBYnAMTZ9UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHQDT+OqH9vHRXFbralFGCZwbOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDhiNTcwMGQtMjU2Ny0z OTZjLTg2OTktNzRlYmM5NDI1MWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhdLFnPQ0PBz+tJVM2aMYiT3bels1xBMZ66jr/mcfssI316WfycjxFY dBsXlfuPdrRGyIMUnJ2m0h85wcakQlVkPuKdMmI0N/UAvGRb3vbdbWvz3gg6phNF 09gP23kKuK2JcbdX27W7jHxKP7BIjca63V0RpcgrRlL9LO5FvS0RWvQAr/wCsmHr UuBmb715cKPN8hmUunK5ORBS1a9gNzGhCrodhqDoeJfa5jD9V1qyWKtu5NXgtlUL TqiD2lqkiP1BAB9hEUnMv3UdneY1oO05rlxuh0xDcb8rCHK0UlTFuQ0s3cpexCW4 y9rHmcv4F4zh1ccz4zACFjbFvyA5K9A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:50 2025 by rpki-client