$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fba406d-88a0-3265-baee-3b7e6bcccc3c.roa File: 1fba406d-88a0-3265-baee-3b7e6bcccc3c.roa (raw, json) Hash identifier: oB/JZJDghwDuGpcIO95qswT+CWoxCXM18zqIn2yp5yg= Subject key identifier: 4C:89:2B:81:51:48:1F:DD:D5:20:15:BE:80:18:42:0F:0D:C7:26:9E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA8550025EF85701EE19C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fba406d-88a0-3265-baee-3b7e6bcccc3c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.197.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:85:50:02:5e:f8:57:01:ee:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=45fe7784-7837-4cec-8bc7-ecee33d29191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bc:8d:e1:f7:e3:d5:c6:ba:9f:b2:7b:45:04: 15:9d:8e:dc:ae:84:80:86:69:fd:27:90:1b:55:1a: eb:ea:77:80:e2:42:d1:3f:51:70:6b:a6:e6:bf:fb: 5c:fc:c1:cd:09:4e:47:fa:60:dc:8d:1f:43:06:4d: 20:d5:76:0b:a9:95:34:3a:92:1e:13:c5:40:45:dd: ad:6e:91:89:4e:5b:c5:36:4c:70:1b:3e:80:ed:1e: e0:41:40:5a:41:7a:34:b7:8f:d7:ff:be:c1:ec:dd: db:99:4e:d3:84:ac:8d:45:2b:a7:6d:58:dd:a5:5c: fb:ed:8d:b8:d3:04:94:d9:92:bd:ac:5e:4f:7a:ee: c4:e4:a9:97:ea:fe:e5:dd:db:77:7d:06:d6:fd:80: d4:29:7d:51:07:5b:fd:ff:46:5a:0d:22:2e:b7:24: 98:1f:25:60:ec:74:1c:f4:ee:01:0d:ae:7a:d4:9d: 8e:eb:8f:27:4c:c5:af:82:84:0f:42:d6:7d:72:58: 2b:98:cf:cb:40:61:8f:5a:98:21:7e:cb:a8:0a:f3: 24:6b:f8:50:c6:15:b8:f9:61:67:5b:c4:e5:10:9a: b4:ee:05:ca:71:f8:b0:7f:d6:00:8c:18:45:a4:83: 39:3f:b7:9a:43:88:fb:80:c2:c7:a2:b4:a7:c9:0e: 4f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:89:2B:81:51:48:1F:DD:D5:20:15:BE:80:18:42:0F:0D:C7:26:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fba406d-88a0-3265-baee-3b7e6bcccc3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a4:fd:9e:1c:a0:f5:5b:c0:44:70:0a:03:b2:86:68:d6:be: 60:64:36:41:57:91:c3:2c:44:a4:2b:65:c4:95:2d:81:f4:5e: e3:b1:52:fb:64:81:f5:c5:c1:50:5d:62:72:59:53:ae:fb:81: 89:0b:a3:f7:86:63:57:c4:bd:a7:d3:94:ea:c7:cd:53:57:bb: b7:66:87:21:cc:70:89:7a:25:89:26:8e:39:49:21:2d:02:79: 2c:47:60:39:b7:54:70:38:31:bc:8d:65:b3:32:d3:a6:cb:3d: 57:8d:25:48:99:93:e8:f0:1e:10:2e:c9:74:bf:e1:ed:f3:0e: 60:72:00:93:d6:76:2e:e6:68:7b:87:b0:5d:b2:e4:85:bc:ae: 7f:e7:a4:c8:3a:73:4e:bf:0d:5d:0f:1d:cb:a9:48:53:e3:1c: 92:6f:06:2d:d3:b5:e4:5a:5c:74:2e:66:fd:2a:d7:1e:62:c3: b6:90:80:ce:ad:63:00:d4:f2:e0:42:9e:41:ba:c4:2b:45:d0: 66:23:58:e8:46:44:e8:57:f9:c9:53:26:d6:8f:82:cc:d6:24: 65:4b:4b:29:f7:d5:4a:0c:ee:05:3c:6c:24:2a:92:31:b8:31: 6a:41:e5:2c:1f:98:f3:7f:94:0f:35:0a:ea:bb:7c:8a:3b:23: 67:0b:15:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuoVQAl74VwHuGcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDVmZTc3ODQtNzgzNy00Y2VjLThiYzctZWNlZTMzZDI5MTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LyN4ffj1ca6n7J7RQQVnY7croSAhmn9J5Ab VRrr6neA4kLRP1Fwa6bmv/tc/MHNCU5H+mDcjR9DBk0g1XYLqZU0OpIeE8VARd2t bpGJTlvFNkxwGz6A7R7gQUBaQXo0t4/X/77B7N3bmU7ThKyNRSunbVjdpVz77Y24 0wSU2ZK9rF5Peu7E5KmX6v7l3dt3fQbW/YDUKX1RB1v9/0ZaDSIutySYHyVg7HQc 9O4BDa561J2O648nTMWvgoQPQtZ9clgrmM/LQGGPWpghfsuoCvMka/hQxhW4+WFn W8TlEJq07gXKcfiwf9YAjBhFpIM5P7eaQ4j7gMLHorSnyQ5P8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyJK4FRSB/d1SAVvoAYQg8NxyaeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWZiYTQwNmQtODhhMC0z MjY1LWJhZWUtM2I3ZTZiY2NjYzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8V+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+k/Z4coPVbwERwCgOyhmjWvmBkNkFXkcMsRKQrZcSVLYH0XuOxUvtk gfXFwVBdYnJZU677gYkLo/eGY1fEvafTlOrHzVNXu7dmhyHMcIl6JYkmjjlJIS0C eSxHYDm3VHA4MbyNZbMy06bLPVeNJUiZk+jwHhAuyXS/4e3zDmByAJPWdi7maHuH sF2y5IW8rn/npMg6c06/DV0PHcupSFPjHJJvBi3TteRaXHQuZv0q1x5iw7aQgM6t YwDU8uBCnkG6xCtF0GYjWOhGROhX+clTJtaPgszWJGVLSyn31UoM7gU8bCQqkjG4 MWpB5SwfmPN/lA81Cuq7fIo7I2cLFQY= -----END CERTIFICATE-----Generated at Sun Apr 27 07:27:55 2025 by rpki-client