$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2b0cb04-941b-37f0-b04f-1ba092f8e313.roa File: f2b0cb04-941b-37f0-b04f-1ba092f8e313.roa (raw, json) Hash identifier: TIQVk7fN7hkBYI7BYYyNhrjN3n3nPTR73MwPsKUgGOo= Subject key identifier: 8B:F3:C8:B4:98:32:DD:0E:DC:31:8C:78:8B:1F:E6:21:6B:B6:B5:5B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848CDE114F8BB771926518C7B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2b0cb04-941b-37f0-b04f-1ba092f8e313.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7155 IP address blocks: 99.198.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:14:f8:bb:77:19:26:51:8c:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=b41cf44c-aa50-4598-94f2-cb0bee6f8678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:00:1e:53:db:c3:0d:65:7a:84:2f:54:dd:15: ae:39:cc:60:2c:06:90:b6:78:24:9a:ee:8f:7c:d1: d0:6d:cc:cc:4e:0b:a5:00:5e:c3:ff:9c:60:ef:44: e0:79:07:ad:5f:70:7b:ef:14:04:28:0f:e9:8f:44: ba:79:7c:16:5c:c1:b2:f5:1a:d9:1d:19:a4:c4:53: f9:a6:8a:97:ee:5c:a1:13:8f:4a:91:3d:eb:db:cd: df:9d:f2:5d:42:e7:b6:78:91:a7:cd:b5:ec:dd:5f: da:15:70:4c:03:b4:e4:25:8c:0d:aa:78:08:bf:6f: 99:6a:2e:4c:d5:f1:f2:10:4e:33:17:fd:47:cc:b7: b7:67:1d:ba:60:93:10:2d:f2:7d:16:fb:64:b8:95: 0e:fc:0b:ee:e8:5d:2d:e3:7f:61:b5:9b:10:72:d7: 05:83:96:ea:81:34:88:69:b0:85:36:bb:41:e4:30: da:0f:7b:e8:26:10:92:38:bb:93:f2:b9:d9:f3:99: 40:15:b6:bc:12:bd:66:4e:d8:c5:6e:a5:13:af:98: 4b:6e:f0:00:06:71:00:30:b9:ee:1f:b0:3f:4d:22: 8a:56:91:b5:df:3b:5a:77:11:39:28:a8:37:16:3f: cc:1e:fe:f8:ce:fe:bd:f7:6b:2d:dc:f7:09:f9:b1: 6d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F3:C8:B4:98:32:DD:0E:DC:31:8C:78:8B:1F:E6:21:6B:B6:B5:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2b0cb04-941b-37f0-b04f-1ba092f8e313.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:fe:0b:41:aa:23:b3:f3:97:16:67:38:9a:5f:ef:56:9a:de: 14:ba:c4:2d:f0:ed:7d:c4:98:1a:64:88:27:16:d9:9e:34:1c: 7b:df:50:79:d3:b0:41:5c:a3:93:37:e4:d7:b7:3d:36:43:ee: b4:81:93:36:20:c0:84:d1:05:44:0a:99:e5:5f:89:1a:e8:4f: 36:8f:1d:dd:ae:85:8f:d9:88:d9:cc:0b:ca:42:67:b1:9e:87: ed:e1:a8:2e:35:6c:fd:af:8c:ff:c3:26:00:a1:d7:2c:b3:c2: 7a:6b:f5:01:50:f3:6b:46:2e:38:a9:a4:87:24:df:47:cb:8b: 40:70:3b:d7:a8:f8:ec:a6:45:94:c8:2b:05:ef:4b:cc:02:4b: 35:35:8f:39:d5:e1:38:d2:c5:f0:16:ef:6e:2c:4e:fe:5b:80: 61:1c:c6:34:1d:09:56:87:c9:b8:c6:89:ea:60:4b:ed:47:47: 31:1c:d6:18:0d:40:f5:52:be:1a:3e:d6:20:b2:52:57:7f:11: 26:28:53:5e:7f:cd:32:53:44:0b:8e:1a:34:3a:4b:78:31:9a: 27:4a:35:9b:bd:69:c3:8c:91:99:55:74:3e:e7:d8:73:7c:c1: af:48:6f:88:e5:58:2c:8a:3c:b8:ef:2f:16:de:fd:5a:12:96: e1:f2:88:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RT4u3cZJlGMe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk YjQxY2Y0NGMtYWE1MC00NTk4LTk0ZjItY2IwYmVlNmY4Njc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugAeU9vDDWV6hC9U3RWuOcxgLAaQtngkmu6P fNHQbczMTgulAF7D/5xg70TgeQetX3B77xQEKA/pj0S6eXwWXMGy9RrZHRmkxFP5 poqX7lyhE49KkT3r283fnfJdQue2eJGnzbXs3V/aFXBMA7TkJYwNqngIv2+Zai5M 1fHyEE4zF/1HzLe3Zx26YJMQLfJ9FvtkuJUO/Avu6F0t439htZsQctcFg5bqgTSI abCFNrtB5DDaD3voJhCSOLuT8rnZ85lAFba8Er1mTtjFbqUTr5hLbvAABnEAMLnu H7A/TSKKVpG13ztadxE5KKg3Fj/MHv74zv6992st3PcJ+bFtbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvzyLSYMt0O3DGMeIsf5iFrtrVbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjJiMGNiMDQtOTQxYi0z N2YwLWIwNGYtMWJhMDkyZjhlMzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCY8YsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/+C0GqI7PzlxZnOJpf71aa3hS6xC3w7X3EmBpkiCcW2Z40HHvfUHnT sEFco5M35Ne3PTZD7rSBkzYgwITRBUQKmeVfiRroTzaPHd2uhY/ZiNnMC8pCZ7Ge h+3hqC41bP2vjP/DJgCh1yyzwnpr9QFQ82tGLjippIck30fLi0BwO9eo+OymRZTI KwXvS8wCSzU1jznV4TjSxfAW724sTv5bgGEcxjQdCVaHybjGiepgS+1HRzEc1hgN QPVSvho+1iCyUld/ESYoU15/zTJTRAuOGjQ6S3gxmidKNZu9acOMkZlVdD7n2HN8 wa9Ib4jlWCyKPLjvLxbe/VoSluHyiAA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:21 2025 by rpki-client