$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36bf10e0-b4ef-360f-b244-22addc1c6a31.roa File: 36bf10e0-b4ef-360f-b244-22addc1c6a31.roa (raw, json) Hash identifier: LytvvQtSbB7VSMRYQShFjQ6PwkXk731CzWtEx8PvGpM= Subject key identifier: 48:1B:3F:03:32:46:4D:7D:58:FA:79:43:22:06:0D:4E:76:66:6B:82 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA85E145F017506D2E0930 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36bf10e0-b4ef-360f-b244-22addc1c6a31.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.197.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:85:e1:45:f0:17:50:6d:2e:09:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c8bf7ac6-ffd3-44e9-b8db-fd34be59f142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ad:8d:1e:e3:3d:2b:48:37:52:85:f2:4b:21: f2:7b:4f:a8:29:d2:1f:a0:57:59:2b:72:c2:01:ba: a6:c8:d4:16:de:08:76:0e:b6:42:9f:7f:38:88:ed: 25:c3:cf:e9:fc:ea:a3:59:fd:b7:e4:c8:71:f9:5c: 8a:9b:97:db:9b:37:6c:2c:8b:23:63:14:89:2a:5d: ed:f4:a5:2f:eb:3d:d7:32:c1:13:38:d9:0c:4f:ad: 32:17:b1:a9:b6:84:93:dc:0a:32:b6:14:15:f1:e0: 82:1d:3d:e2:57:20:b7:c8:fc:7b:50:04:71:ec:96: 08:8c:a6:9c:62:4a:76:03:43:eb:1c:50:37:c2:30: 05:cb:fa:08:af:b4:25:b4:50:6f:32:ba:6b:35:7e: f5:c7:f6:68:2b:05:6a:6e:10:48:58:67:94:cc:a2: 44:b6:ba:04:73:df:57:11:c1:9c:db:ab:35:84:03: 0f:34:5b:1f:39:71:25:a0:a8:a8:12:f1:45:c6:09: ee:2e:da:cb:2b:70:92:5b:27:5b:65:0d:c0:9c:9c: 53:c9:4e:71:06:14:e3:2d:7d:b5:c8:56:51:45:e2: 88:36:7c:22:bf:86:71:9e:8b:b4:74:b8:d8:90:7c: 7a:f8:ec:92:db:10:ab:64:49:90:06:55:19:71:b0: 88:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1B:3F:03:32:46:4D:7D:58:FA:79:43:22:06:0D:4E:76:66:6B:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36bf10e0-b4ef-360f-b244-22addc1c6a31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e8:33:9e:56:79:eb:36:6a:cd:2c:92:dc:3d:fa:a5:2d:94: 27:95:ff:27:47:ef:26:fc:15:56:74:6c:fb:cb:35:f3:a3:69: 29:a6:df:84:6f:e0:aa:e8:77:86:21:c6:71:16:93:41:6e:60: 41:a4:e6:f0:31:72:de:3b:f1:06:85:27:01:25:f4:95:b3:cc: a5:ea:37:78:57:45:f8:0b:3a:8e:51:44:4b:56:64:ae:d1:fd: 15:26:ae:92:66:ee:68:81:09:79:24:98:9d:ab:da:96:f7:77: f9:c7:db:0c:47:e8:96:5a:94:97:ba:35:db:5a:3a:e8:8a:b4: b8:33:ab:be:7c:b7:c6:c7:ba:59:84:c2:bb:e5:c8:3a:0a:dd: af:cb:42:0a:7f:90:86:78:50:c0:02:d2:e3:54:7a:7e:4d:97: c3:34:10:3b:ca:e9:48:79:91:e5:01:b4:69:92:b8:6f:9e:03: f1:05:a8:11:1a:79:43:52:0d:61:2c:af:50:1c:d0:6e:8e:24: 23:a8:84:f9:f1:78:55:29:02:fe:9f:f3:be:4a:15:bd:ee:67: 02:30:c2:38:6b:b0:21:fe:a9:71:e9:2e:e3:43:63:07:43:03: b3:13:97:c6:d1:91:7d:e8:d6:c7:32:38:d5:a0:2f:e4:98:2b: d8:5d:00:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuoXhRfAXUG0uCTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzhiZjdhYzYtZmZkMy00NGU5LWI4ZGItZmQzNGJlNTlmMTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq2NHuM9K0g3UoXySyHye0+oKdIfoFdZK3LC AbqmyNQW3gh2DrZCn384iO0lw8/p/OqjWf235Mhx+VyKm5fbmzdsLIsjYxSJKl3t 9KUv6z3XMsETONkMT60yF7GptoST3AoythQV8eCCHT3iVyC3yPx7UARx7JYIjKac Ykp2A0PrHFA3wjAFy/oIr7QltFBvMrprNX71x/ZoKwVqbhBIWGeUzKJEtroEc99X EcGc26s1hAMPNFsfOXEloKioEvFFxgnuLtrLK3CSWydbZQ3AnJxTyU5xBhTjLX21 yFZRReKINnwiv4Zxnou0dLjYkHx6+OyS2xCrZEmQBlUZcbCIjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgbPwMyRk19WPp5QyIGDU52ZmuCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzZiZjEwZTAtYjRlZi0z NjBmLWIyNDQtMjJhZGRjMWM2YTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAToM55Wees2as0sktw9+qUtlCeV/ydH7yb8FVZ0bPvLNfOjaSmm34Rv 4Krod4YhxnEWk0FuYEGk5vAxct478QaFJwEl9JWzzKXqN3hXRfgLOo5RREtWZK7R /RUmrpJm7miBCXkkmJ2r2pb3d/nH2wxH6JZalJe6NdtaOuiKtLgzq758t8bHulmE wrvlyDoK3a/LQgp/kIZ4UMAC0uNUen5Nl8M0EDvK6Uh5keUBtGmSuG+eA/EFqBEa eUNSDWEsr1Ac0G6OJCOohPnxeFUpAv6f875KFb3uZwIwwjhrsCH+qXHpLuNDYwdD A7MTl8bRkX3o1scyONWgL+SYK9hdAD8= -----END CERTIFICATE-----Generated at Sun Apr 27 16:41:09 2025 by rpki-client