$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de42c664-223b-3e3b-b4bf-2d94c6e8983b.roa File: de42c664-223b-3e3b-b4bf-2d94c6e8983b.roa (raw, json) Hash identifier: nMJeUgO1jzgpYLM/SN6VyM4wuFdNAjKMpPCbTjcYX4M= Subject key identifier: 0C:25:FB:20:D2:A6:FA:E1:38:FA:52:26:05:1D:F6:D7:5D:F4:B4:CA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581C4747E17D4E3F7CBE180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de42c664-223b-3e3b-b4bf-2d94c6e8983b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.197.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:c4:74:7e:17:d4:e3:f7:cb:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f3b08b28-42a3-409a-ba6a-ebb88c88ebab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ec:61:57:b3:84:7e:8f:54:aa:b7:bf:57:d7: 59:2c:12:8f:b0:7d:8b:53:c3:d5:0b:7d:f2:e8:bb: 07:3c:da:eb:93:60:3d:63:ab:bf:0d:a7:d4:b2:52: 37:0b:9d:04:0f:cf:50:08:44:c4:96:99:c3:6d:75: 74:d2:83:b7:7c:23:f9:d7:6c:3a:fa:34:3a:3d:1a: 04:57:b4:0a:cb:10:b1:b0:27:a5:11:21:e6:4a:60: 3a:e8:3d:1e:5c:97:aa:88:db:ed:3d:7a:ea:55:08: 42:6b:ed:90:74:ce:7a:31:db:5a:a2:3b:c0:7d:5c: dd:6f:dd:c0:58:89:25:31:56:40:08:94:97:22:cf: aa:a7:1b:1a:b6:a7:71:a1:c0:4d:1c:67:4c:78:e9: 3d:5e:02:83:77:c3:24:f9:64:47:3f:41:6d:59:2a: 39:b0:5e:12:ed:52:8f:63:a2:16:c4:76:09:cd:91: 3c:f1:f4:c0:3b:c3:91:ed:ee:b3:10:da:d7:3c:9e: 09:95:a8:57:47:05:ee:c4:0f:fd:7f:45:77:2c:74: 6d:06:8f:27:0c:93:9e:fb:57:9c:9f:0d:e8:40:4a: 1e:e5:8c:87:07:89:70:73:82:c5:4d:03:fa:2f:0a: 74:79:49:64:51:a5:38:6b:4a:a5:88:2d:ab:90:f6: f1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:25:FB:20:D2:A6:FA:E1:38:FA:52:26:05:1D:F6:D7:5D:F4:B4:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de42c664-223b-3e3b-b4bf-2d94c6e8983b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:65:5b:5c:52:b3:2c:62:a0:c0:d3:1d:58:f1:30:91:f7:66: b3:9a:27:fa:a5:03:8e:32:0c:9e:15:c3:76:3a:e2:62:10:d6: 63:17:09:05:5d:b2:12:cc:e0:b6:7c:6b:5a:2c:d0:75:4c:60: 58:18:0a:ff:9c:62:5a:33:79:68:fe:7c:50:14:06:e2:38:09: 9d:3b:e5:a6:fd:32:f3:a7:f1:c0:97:65:ee:5f:30:7f:34:d9: b9:0c:8e:d9:c8:2a:8b:dc:95:db:1a:7b:aa:12:4c:d7:a4:1c: b1:83:bb:2a:0e:c1:c1:94:68:1e:bd:96:bb:e3:f5:ab:c3:b6: ca:5a:e8:91:73:8c:23:c3:7e:86:bc:f7:b2:36:ec:19:33:75: 5b:e9:0d:17:88:ed:f0:e4:08:bc:7f:31:55:fd:0d:48:84:2f: 7e:34:75:d4:5e:c8:ab:6c:2e:4c:4d:a4:29:4f:3b:9f:d3:e5: 5c:19:f6:0b:e7:ed:cd:f5:0a:5c:08:0f:c8:fe:d3:d9:5e:e0: 25:86:11:44:b9:17:c2:f5:0b:e7:72:ec:3a:26:78:e0:01:49: d7:1e:30:51:a9:1f:b1:49:af:1f:23:be:00:aa:6b:32:e8:27: ed:9b:b4:97:e2:97:b1:0b:3c:9c:9c:e4:b7:15:03:5c:f4:a0: 66:51:51:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgcR0fhfU4/fL4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjNiMDhiMjgtNDJhMy00MDlhLWJhNmEtZWJiODhjODhlYmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+xhV7OEfo9Uqre/V9dZLBKPsH2LU8PVC33y 6LsHPNrrk2A9Y6u/DafUslI3C50ED89QCETElpnDbXV00oO3fCP512w6+jQ6PRoE V7QKyxCxsCelESHmSmA66D0eXJeqiNvtPXrqVQhCa+2QdM56MdtaojvAfVzdb93A WIklMVZACJSXIs+qpxsatqdxocBNHGdMeOk9XgKDd8Mk+WRHP0FtWSo5sF4S7VKP Y6IWxHYJzZE88fTAO8OR7e6zENrXPJ4JlahXRwXuxA/9f0V3LHRtBo8nDJOe+1ec nw3oQEoe5YyHB4lwc4LFTQP6Lwp0eUlkUaU4a0qliC2rkPbx6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwl+yDSpvrhOPpSJgUd9tdd9LTKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGU0MmM2NjQtMjIzYi0z ZTNiLWI0YmYtMmQ5NGM2ZTg5ODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8UXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAllW1xSsyxioMDTHVjxMJH3ZrOaJ/qlA44yDJ4Vw3Y64mIQ1mMXCQVd shLM4LZ8a1os0HVMYFgYCv+cYlozeWj+fFAUBuI4CZ075ab9MvOn8cCXZe5fMH80 2bkMjtnIKovcldsae6oSTNekHLGDuyoOwcGUaB69lrvj9avDtspa6JFzjCPDfoa8 97I27BkzdVvpDReI7fDkCLx/MVX9DUiEL340ddReyKtsLkxNpClPO5/T5VwZ9gvn 7c31ClwID8j+09le4CWGEUS5F8L1C+dy7DomeOABSdceMFGpH7FJrx8jvgCqazLo J+2btJfil7ELPJyc5LcVA1z0oGZRUcM= -----END CERTIFICATE-----Generated at Fri Mar 14 11:04:22 2025 by rpki-client