$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f348cceb-237b-32d7-bc4d-1fd065e65a00.roa File: f348cceb-237b-32d7-bc4d-1fd065e65a00.roa (raw, json) Hash identifier: tHviL17yuEa5t8kPKKaIen4qO75R01zcuERr2NsC1Z4= Subject key identifier: 93:E3:98:68:4C:AB:A5:2C:D6:12:E5:F1:E2:F1:CC:94:F1:59:8F:01 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581BF13867FC5C803F86450 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f348cceb-237b-32d7-bc4d-1fd065e65a00.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:bf:13:86:7f:c5:c8:03:f8:64:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=943e81af-e2d3-4692-977b-7d09900e5546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bd:20:c0:70:69:73:6d:20:7a:7a:ed:f6:79: 24:bb:71:ab:2c:3f:e2:97:e9:64:68:f5:92:e5:e0: c6:a4:8e:1f:c6:34:10:42:e3:c0:69:b9:c0:82:f6: 13:85:67:df:60:cc:e2:b1:b2:18:eb:a6:22:4a:38: 93:20:1b:f1:33:ab:ac:4a:ec:07:25:7a:5c:1e:89: be:82:5e:c1:43:8b:c2:b7:b2:61:2f:2f:02:41:96: 30:13:c3:94:3c:a8:6a:22:d8:94:f9:0e:e1:96:a1: 38:04:40:04:14:c1:14:1b:60:73:73:b1:83:7a:00: 67:a5:ed:13:77:cf:62:fe:8f:af:73:8d:38:91:ba: 64:75:05:60:be:70:64:7a:68:60:2e:ec:29:93:2e: 30:d4:85:fd:04:a7:58:95:ad:86:d5:49:c8:bb:74: 62:ba:37:d7:83:88:5e:b8:3d:d6:80:de:61:c9:dc: 64:85:c3:64:9a:6d:b1:4f:24:5d:57:cc:22:6a:cf: 7b:23:e7:5f:04:e8:40:b5:5a:99:ed:e6:97:f5:28: f3:5d:0d:90:32:2c:42:ff:40:ac:8e:54:b0:f2:30: d6:4f:fe:cd:3a:17:f9:2b:b0:f8:fe:22:07:f9:36: 7d:52:30:dc:a8:7f:c7:24:44:c1:7c:a6:bf:79:3a: 00:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E3:98:68:4C:AB:A5:2C:D6:12:E5:F1:E2:F1:CC:94:F1:59:8F:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f348cceb-237b-32d7-bc4d-1fd065e65a00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:40:74:22:6f:7a:b2:a6:e9:ed:46:e6:93:20:9c:e2:ae:ca: d7:c6:d6:38:2f:c7:6d:b7:d5:66:b8:8d:92:b0:1f:37:54:55: b1:d9:ba:17:f1:dc:f3:8b:96:59:a3:e8:70:4c:4f:80:e6:e7: b1:66:9e:41:db:92:8c:f1:37:0c:22:fd:00:d4:7f:bc:fd:a0: 4d:e7:22:81:59:be:f7:7b:06:34:83:fd:18:35:a2:65:21:dd: e4:e2:25:8a:24:40:63:1e:fb:57:ed:ba:25:6a:67:28:86:b7: 25:f7:6e:a7:29:b9:65:87:b4:da:11:87:b9:37:6b:4e:8c:43: c4:19:ea:ab:58:c6:25:2f:eb:67:18:96:b1:2e:b0:da:ef:cd: 7a:ef:c6:a9:54:a0:86:2d:46:35:d4:8b:86:df:ee:2d:4e:09: 4f:65:ae:cf:20:c1:e0:01:0a:3a:16:ef:7b:08:28:e5:39:f1: 81:66:c1:ce:ac:58:1a:af:a0:06:29:56:4e:d8:ef:f9:32:d6: fa:9d:a6:77:07:94:06:b9:a3:7a:8b:f3:33:e7:bb:19:51:cd: ca:90:b2:b3:02:bc:28:1c:a0:6b:b9:5e:0f:7f:1d:01:7b:7b: aa:ab:2e:b0:65:c8:cb:2e:7a:c7:89:75:f3:e8:68:04:0d:8a: d1:f2:cf:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgb8Thn/FyAP4ZFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTQzZTgxYWYtZTJkMy00NjkyLTk3N2ItN2QwOTkwMGU1NTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib0gwHBpc20genrt9nkku3GrLD/il+lkaPWS 5eDGpI4fxjQQQuPAabnAgvYThWffYMzisbIY66YiSjiTIBvxM6usSuwHJXpcHom+ gl7BQ4vCt7JhLy8CQZYwE8OUPKhqItiU+Q7hlqE4BEAEFMEUG2Bzc7GDegBnpe0T d89i/o+vc404kbpkdQVgvnBkemhgLuwpky4w1IX9BKdYla2G1UnIu3RiujfXg4he uD3WgN5hydxkhcNkmm2xTyRdV8wias97I+dfBOhAtVqZ7eaX9SjzXQ2QMixC/0Cs jlSw8jDWT/7NOhf5K7D4/iIH+TZ9UjDcqH/HJETBfKa/eToAawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPjmGhMq6Us1hLl8eLxzJTxWY8BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjM0OGNjZWItMjM3Yi0z MmQ3LWJjNGQtMWZkMDY1ZTY1YTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8Q9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxAdCJverKm6e1G5pMgnOKuytfG1jgvx2231Wa4jZKwHzdUVbHZuhfx 3POLllmj6HBMT4Dm57FmnkHbkozxNwwi/QDUf7z9oE3nIoFZvvd7BjSD/Rg1omUh 3eTiJYokQGMe+1ftuiVqZyiGtyX3bqcpuWWHtNoRh7k3a06MQ8QZ6qtYxiUv62cY lrEusNrvzXrvxqlUoIYtRjXUi4bf7i1OCU9lrs8gweABCjoW73sIKOU58YFmwc6s WBqvoAYpVk7Y7/ky1vqdpncHlAa5o3qL8zPnuxlRzcqQsrMCvCgcoGu5Xg9/HQF7 e6qrLrBlyMsueseJdfPoaAQNitHyz84= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:07 2025 by rpki-client