$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff3d76ef-6265-32e0-8ac6-268e7d47f0c2.roa File: ff3d76ef-6265-32e0-8ac6-268e7d47f0c2.roa (raw, json) Hash identifier: RsTnQKGXPaHL3TaStUbuKjXLKz5x33t/IzcrlCLHPGo= Subject key identifier: BB:D6:7F:70:9C:E8:97:ED:44:21:81:2C:13:B8:6A:C3:DE:E6:B9:28 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5813493FA17FD2583F68500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff3d76ef-6265-32e0-8ac6-268e7d47f0c2.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 99.196.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:34:93:fa:17:fd:25:83:f6:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=1cc59ecd-fc1e-4d65-baf7-59e2914a4c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:24:13:c4:27:40:e7:aa:7f:c8:6b:a1:e8:9e: cf:8a:ca:7b:11:a7:47:6b:26:73:07:b5:9f:2c:05: 06:91:db:5e:0d:a5:7e:14:8e:fd:6d:21:45:eb:9d: a5:7c:e6:bb:77:e2:35:b9:8a:04:1e:ae:cf:dc:af: c4:8c:22:41:86:3b:cb:18:3b:b1:19:44:7c:fe:df: 6e:c2:60:59:62:6c:76:39:c4:a9:95:65:c3:46:6d: fe:eb:69:b8:0e:2f:81:b0:03:4c:08:ff:2b:95:7d: 32:c5:52:49:18:17:23:aa:89:09:c5:ca:33:82:79: 40:84:6c:88:e5:d8:dd:36:c3:ff:7d:2c:e3:2c:db: d8:f0:81:b5:d1:63:f2:27:13:e0:7e:bb:5b:d6:43: 61:75:c3:cd:eb:72:22:fe:58:cb:dc:ed:57:85:2d: 86:17:6b:0f:70:e5:aa:4a:eb:e4:bc:c3:11:d8:ce: eb:6b:06:4b:85:5d:73:8e:37:34:e4:ef:6d:62:7f: ee:b4:7a:6f:d6:d2:c0:80:12:3d:27:7b:3b:28:74: 3a:cb:d8:a3:60:4b:cb:b3:78:76:e7:32:ad:b7:e6: 94:36:74:65:6a:e5:6d:bb:48:ac:cf:c0:38:b4:0e: 92:bf:c4:19:a0:16:86:28:23:d0:5f:58:1d:86:c8: ed:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D6:7F:70:9C:E8:97:ED:44:21:81:2C:13:B8:6A:C3:DE:E6:B9:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff3d76ef-6265-32e0-8ac6-268e7d47f0c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:03:1d:18:6c:ae:1b:5f:1d:70:5a:66:f2:29:71:c8:b7:99: 53:1e:0b:75:9a:b9:d5:cd:84:72:a2:72:cc:e1:bf:7c:0d:1c: df:9c:ba:4f:c8:42:e4:b7:ef:4c:26:05:97:c0:20:ce:fe:fb: b6:f3:46:25:ea:0e:04:f8:9e:ee:29:dc:48:86:a4:9e:bb:a9: 91:20:7a:fa:6b:45:85:eb:fa:2a:c3:1d:36:1d:93:f9:43:c3: 7a:07:ec:72:96:a9:bc:d6:af:35:b6:52:94:a1:31:53:8f:23: e2:ce:de:36:43:36:ee:5f:29:cb:c4:a0:49:4d:5e:90:f5:1d: 4e:70:33:e6:27:79:a4:99:be:66:11:1c:ee:70:9e:c2:d3:e8: bc:f5:95:dc:14:9d:c4:e4:ab:ee:12:a8:dc:99:45:f9:83:6d: 27:43:15:02:c4:1f:e2:88:b2:30:19:75:2d:97:4f:51:e1:d6: e4:9f:99:30:76:61:39:d6:71:3f:2f:d7:14:be:ff:a1:98:81: 18:50:0f:99:cc:3b:1f:6b:41:02:7a:36:4b:a6:61:28:ea:01: e7:69:74:55:67:d6:52:47:2e:ac:24:15:48:73:92:40:17:0e: 6a:68:e8:27:8f:ca:17:b9:35:ee:f9:6f:b2:24:e5:fa:f0:ee: b1:ce:65:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgTST+hf9JYP2hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MWNjNTllY2QtZmMxZS00ZDY1LWJhZjctNTllMjkxNGE0YzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSQTxCdA56p/yGuh6J7Pisp7EadHayZzB7Wf LAUGkdteDaV+FI79bSFF652lfOa7d+I1uYoEHq7P3K/EjCJBhjvLGDuxGUR8/t9u wmBZYmx2OcSplWXDRm3+62m4Di+BsANMCP8rlX0yxVJJGBcjqokJxcozgnlAhGyI 5djdNsP/fSzjLNvY8IG10WPyJxPgfrtb1kNhdcPN63Ii/ljL3O1XhS2GF2sPcOWq SuvkvMMR2M7rawZLhV1zjjc05O9tYn/utHpv1tLAgBI9J3s7KHQ6y9ijYEvLs3h2 5zKtt+aUNnRlauVtu0isz8A4tA6Sv8QZoBaGKCPQX1gdhsjtFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvWf3Cc6JftRCGBLBO4asPe5rkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmYzZDc2ZWYtNjI2NS0z MmUwLThhYzYtMjY4ZTdkNDdmMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8S+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4DHRhsrhtfHXBaZvIpcci3mVMeC3WaudXNhHKicszhv3wNHN+cuk/I QuS370wmBZfAIM7++7bzRiXqDgT4nu4p3EiGpJ67qZEgevprRYXr+irDHTYdk/lD w3oH7HKWqbzWrzW2UpShMVOPI+LO3jZDNu5fKcvEoElNXpD1HU5wM+YneaSZvmYR HO5wnsLT6Lz1ldwUncTkq+4SqNyZRfmDbSdDFQLEH+KIsjAZdS2XT1Hh1uSfmTB2 YTnWcT8v1xS+/6GYgRhQD5nMOx9rQQJ6NkumYSjqAedpdFVn1lJHLqwkFUhzkkAX Dmpo6CePyhe5Ne75b7Ik5frw7rHOZaE= -----END CERTIFICATE-----Generated at Fri Apr 11 23:52:33 2025 by rpki-client