$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00b53504-d201-3183-abec-a767fa62601e.roa File: 00b53504-d201-3183-abec-a767fa62601e.roa (raw, json) Hash identifier: pkdbylAn7vCJWuvH8sr5Q/GtRyMR78WDa1qDc+EKVDU= Subject key identifier: C2:65:7F:24:5D:0F:EC:76:E8:59:18:9B:21:DA:01:75:E8:A3:5A:2D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB2252A13B51131F769D40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00b53504-d201-3183-abec-a767fa62601e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.197.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:22:52:a1:3b:51:13:1f:76:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ec4808ac-2599-40ef-a691-c0b7c377d209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d2:89:48:b9:e3:0a:4b:fc:84:a8:ff:09:6c: 2b:2f:fa:fe:27:02:18:1f:0c:9a:d9:39:14:bb:63: 04:b5:07:68:65:20:4f:ab:b4:c2:85:4a:a7:5f:df: 37:d3:0b:22:1c:c7:12:e8:7a:f5:55:eb:b9:f6:2f: 71:b8:fe:62:80:be:c0:93:4e:82:c9:3b:ad:bf:4d: 93:a4:d4:36:80:93:64:7b:f6:1c:36:23:37:45:da: 42:b1:ab:c5:cf:ae:ff:97:79:17:bb:ce:b6:50:22: 3e:d1:42:1d:04:b8:1c:00:bc:af:15:44:9e:1c:21: c6:a8:53:f9:9a:c0:8c:ad:f6:cf:7b:2b:89:01:e6: d3:8f:87:06:c9:fa:56:d4:66:b4:18:1a:05:93:a7: cf:0f:8d:09:b3:e0:c5:e6:e5:41:d5:1b:07:2e:d3: ab:b6:67:52:a5:ae:84:48:fe:e6:c4:33:e2:55:7d: 71:fa:90:5f:44:5b:53:b0:28:6b:f3:6d:30:4e:ae: 51:74:6d:50:a6:74:61:0d:ba:db:35:69:b2:73:f8: ca:bc:b9:6f:9f:68:6f:56:7c:e5:8f:bf:d2:74:2e: a5:68:7f:e4:4f:86:e8:f8:26:ec:3a:e6:ae:4d:eb: b6:1c:db:18:ae:2d:4c:7d:60:56:eb:1c:b1:3d:cb: e5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:65:7F:24:5D:0F:EC:76:E8:59:18:9B:21:DA:01:75:E8:A3:5A:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00b53504-d201-3183-abec-a767fa62601e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:82:5a:48:39:d9:4f:9a:9f:80:37:a8:eb:2a:b0:a4:0f:70: b1:3b:9a:24:5a:94:b7:99:d1:47:90:88:72:83:f6:f1:41:43: e3:f3:36:fa:b2:ca:51:47:16:c9:d5:e1:07:fc:43:bc:26:56: 0b:3d:b2:7b:41:fa:c8:70:3b:69:b5:4d:59:1b:b3:38:34:82: e5:3a:57:ce:8c:53:77:cb:f2:2b:12:7e:52:72:04:82:1a:ad: a0:5f:f8:85:5b:35:f8:0a:3e:10:a9:85:90:1a:2d:04:35:89: ce:ed:db:32:a4:3d:a1:48:ad:79:fa:2b:35:46:cf:d8:dc:6f: 9f:1b:18:a7:9f:34:22:ae:4c:1e:89:30:c7:37:85:a7:22:75: 85:c9:9a:cc:d0:64:bd:07:9c:80:e8:a3:ba:c0:01:65:e6:72: 93:54:5d:00:f2:06:1a:a7:b9:9f:18:86:8e:65:7c:49:a1:f2: 92:11:02:2b:8e:0d:c5:db:70:69:57:0d:84:b0:4c:df:ff:dc: 18:8d:0e:d3:8f:74:cf:03:de:0e:09:42:a6:4a:cb:a5:ee:73: dc:a8:10:0f:e8:22:a7:22:f6:cd:19:37:be:07:a6:12:ae:7e: a8:26:8e:11:9f:9e:ca:9e:5b:07:eb:41:92:e6:ea:64:9f:cf: 50:85:ef:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuyJSoTtREx92nUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZWM0ODA4YWMtMjU5OS00MGVmLWE2OTEtYzBiN2MzNzdkMjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNKJSLnjCkv8hKj/CWwrL/r+JwIYHwya2TkU u2MEtQdoZSBPq7TChUqnX9830wsiHMcS6Hr1Veu59i9xuP5igL7Ak06CyTutv02T pNQ2gJNke/YcNiM3RdpCsavFz67/l3kXu862UCI+0UIdBLgcALyvFUSeHCHGqFP5 msCMrfbPeyuJAebTj4cGyfpW1Ga0GBoFk6fPD40Js+DF5uVB1RsHLtOrtmdSpa6E SP7mxDPiVX1x+pBfRFtTsChr820wTq5RdG1QpnRhDbrbNWmyc/jKvLlvn2hvVnzl j7/SdC6laH/kT4bo+CbsOuauTeu2HNsYri1MfWBW6xyxPcvlcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJlfyRdD+x26FkYmyHaAXXoo1otMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDBiNTM1MDQtZDIwMS0z MTgzLWFiZWMtYTc2N2ZhNjI2MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8UhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGCWkg52U+an4A3qOsqsKQPcLE7miRalLeZ0UeQiHKD9vFBQ+PzNvqy ylFHFsnV4Qf8Q7wmVgs9sntB+shwO2m1TVkbszg0guU6V86MU3fL8isSflJyBIIa raBf+IVbNfgKPhCphZAaLQQ1ic7t2zKkPaFIrXn6KzVGz9jcb58bGKefNCKuTB6J MMc3hacidYXJmszQZL0HnIDoo7rAAWXmcpNUXQDyBhqnuZ8Yho5lfEmh8pIRAiuO DcXbcGlXDYSwTN//3BiNDtOPdM8D3g4JQqZKy6Xuc9yoEA/oIqci9s0ZN74HphKu fqgmjhGfnsqeWwfrQZLm6mSfz1CF7xU= -----END CERTIFICATE-----Generated at Sun Apr 27 01:43:51 2025 by rpki-client