$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df1d22c9-697a-39c7-be63-8a50da8780d1.roa File: df1d22c9-697a-39c7-be63-8a50da8780d1.roa (raw, json) Hash identifier: U5QwnFzWk817lTstNTqHBUScDOaoI6UAhRQrxWGCmy4= Subject key identifier: 6B:1D:E4:F5:11:E7:06:D2:33:36:3C:80:A9:09:B3:3A:0D:77:D7:AB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5813D406B14E5CB56EBDD00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df1d22c9-697a-39c7-be63-8a50da8780d1.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.198.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:3d:40:6b:14:e5:cb:56:eb:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=0a20b1b3-bb75-4b3f-a143-03b668e2fa29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5a:6a:b2:33:82:48:8f:34:84:f2:8e:06:24: ce:c7:24:b2:e3:62:f3:b1:52:3f:c3:93:a6:b3:b6: 97:28:56:b9:33:9a:7b:db:7d:a2:4a:f7:bb:15:88: 5e:d0:37:54:8f:73:ff:4f:7b:b7:b0:33:27:a8:e4: b3:a5:7c:9c:fd:97:81:ff:b8:f6:bb:a1:94:fa:53: ef:ac:fa:cb:92:80:a5:c6:e1:05:38:0b:5a:8d:b6: 97:3f:d3:f4:de:be:be:e1:ae:5f:77:6e:01:a9:47: ba:1b:dc:44:be:88:12:5f:16:31:74:49:c2:1e:c6: af:a4:ca:a2:1f:91:c4:8c:81:77:57:40:ce:c5:65: 29:98:c1:11:68:79:7c:6f:30:ac:24:66:66:e7:1a: ef:02:8c:80:7a:3d:fa:ce:42:79:29:38:ed:15:35: 0c:7c:2d:2f:bd:58:95:ad:9e:87:9c:c7:45:4c:b4: bf:15:14:30:2a:73:f6:11:24:06:d1:ae:68:7a:71: f6:aa:7f:e6:4a:71:5c:47:da:5a:84:e2:f8:90:aa: 87:64:80:4b:b4:bc:80:76:df:70:75:42:23:55:95: e3:e1:ae:01:5d:cd:e1:3c:81:ab:0b:3d:b3:3e:88: 69:65:21:79:21:d5:16:68:fc:d8:50:ec:00:0a:8e: 2e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1D:E4:F5:11:E7:06:D2:33:36:3C:80:A9:09:B3:3A:0D:77:D7:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df1d22c9-697a-39c7-be63-8a50da8780d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:5a:b3:f7:28:62:6b:7a:53:7b:a2:3a:50:c6:83:e7:ed:61: 54:51:a7:e0:69:d8:55:d3:af:1e:d7:da:c0:df:9f:8c:ed:ce: f4:0b:dc:39:e2:22:ab:2f:90:0f:1d:80:0d:2b:62:f3:35:72: 22:d2:31:62:46:11:3f:7e:21:d0:e0:2a:30:3a:84:e0:f2:78: b1:50:a3:11:da:21:e9:94:0a:ce:b9:f3:cb:24:75:d6:75:69: 41:87:29:80:08:c0:27:f9:b4:99:19:1d:4c:8e:81:20:43:64: 7e:ac:f8:93:6d:19:e8:bf:8f:d3:c8:94:cb:6d:67:3f:38:bc: 31:7b:a3:4e:1e:08:6e:e8:83:7f:0d:08:7b:41:b4:ec:c6:53: 35:93:a0:35:76:56:85:4d:89:c5:0b:03:2f:bf:57:49:c0:30: 20:cf:28:16:f5:5c:d3:7a:fb:e4:01:66:68:92:ce:b1:10:ae: 3d:32:ce:61:d1:68:2f:08:99:11:1d:a1:f4:3d:21:3b:93:c8: 14:11:16:6c:f4:a8:7e:ad:27:4a:71:3b:04:3f:6c:a1:4e:14: ec:0d:08:45:28:68:d8:dd:89:30:5c:8e:6a:48:65:04:5f:51: 47:82:bc:25:e6:5d:50:b3:a5:8b:9c:c5:e5:51:e1:dc:3d:2b: 48:7c:03:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgT1AaxTly1br3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MGEyMGIxYjMtYmI3NS00YjNmLWExNDMtMDNiNjY4ZTJmYTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1pqsjOCSI80hPKOBiTOxySy42LzsVI/w5Om s7aXKFa5M5p7232iSve7FYhe0DdUj3P/T3u3sDMnqOSzpXyc/ZeB/7j2u6GU+lPv rPrLkoClxuEFOAtajbaXP9P03r6+4a5fd24BqUe6G9xEvogSXxYxdEnCHsavpMqi H5HEjIF3V0DOxWUpmMERaHl8bzCsJGZm5xrvAoyAej36zkJ5KTjtFTUMfC0vvViV rZ6HnMdFTLS/FRQwKnP2ESQG0a5oenH2qn/mSnFcR9pahOL4kKqHZIBLtLyAdt9w dUIjVZXj4a4BXc3hPIGrCz2zPohpZSF5IdUWaPzYUOwACo4uTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsd5PUR5wbSMzY8gKkJszoNd9erMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGYxZDIyYzktNjk3YS0z OWM3LWJlNjMtOGE1MGRhODc4MGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZas/coYmt6U3uiOlDGg+ftYVRRp+Bp2FXTrx7X2sDfn4ztzvQL3Dni IqsvkA8dgA0rYvM1ciLSMWJGET9+IdDgKjA6hODyeLFQoxHaIemUCs6588skddZ1 aUGHKYAIwCf5tJkZHUyOgSBDZH6s+JNtGei/j9PIlMttZz84vDF7o04eCG7og38N CHtBtOzGUzWToDV2VoVNicULAy+/V0nAMCDPKBb1XNN6++QBZmiSzrEQrj0yzmHR aC8ImREdofQ9ITuTyBQRFmz0qH6tJ0pxOwQ/bKFOFOwNCEUoaNjdiTBcjmpIZQRf UUeCvCXmXVCzpYucxeVR4dw9K0h8A1E= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:34 2025 by rpki-client