$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a3c02d4-9dc3-38a5-bcf7-1fd7d76e9c80.roa File: 3a3c02d4-9dc3-38a5-bcf7-1fd7d76e9c80.roa (raw, json) Hash identifier: UfiqFdseKFqw3IXp41CQxPFeEc6y3ycpvezp0oTKWQg= Subject key identifier: 17:EA:17:56:4E:96:8C:6F:C5:63:34:6E:68:87:DF:9A:05:B7:E5:DF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB2A933256468124D40C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a3c02d4-9dc3-38a5-bcf7-1fd7d76e9c80.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.198.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:2a:93:32:56:46:81:24:d4:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d3e67d7a-c3bb-40a1-acc8-942a0fdcecaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:04:8e:ab:7f:6c:33:59:d2:da:d1:24:96:69: ed:cb:21:5a:5a:2b:e2:5f:7d:9c:5d:59:df:29:41: 27:a4:ca:bd:68:55:9c:97:d7:41:a3:18:a3:60:82: 06:6a:a3:dd:52:84:0c:df:84:b5:71:69:f6:e1:3e: 34:9c:f6:1d:42:7f:41:8d:af:5a:bc:d0:7b:79:8b: 2d:96:e0:64:79:0b:f0:8a:eb:77:11:49:a9:c4:5f: 58:f0:a2:7d:fc:04:40:be:5f:ae:c2:be:3b:f0:0f: 2f:4e:de:71:80:1d:9e:28:ad:3b:65:72:7e:25:37: 45:46:a4:73:54:62:cd:bd:91:45:24:e0:12:39:d8: df:7c:00:59:6f:26:6f:1d:e7:43:18:da:51:4f:ca: a4:5c:62:74:20:43:a4:38:da:8c:af:02:9a:e7:45: 8f:59:d8:c7:d4:b7:ac:68:b2:aa:f1:46:96:0f:15: 8d:7a:71:58:2b:15:3b:69:6a:9d:56:1a:18:9b:17: 61:d9:24:44:3a:07:e3:84:ac:95:11:7a:a5:b9:94: 31:c7:56:c5:4b:11:34:26:4e:ff:f2:39:b9:32:9f: e5:6a:91:13:f4:75:74:ac:fc:a9:0a:1b:f4:88:ea: af:f0:28:da:cc:0a:a8:52:6a:fe:91:f5:9d:b5:8d: 4f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EA:17:56:4E:96:8C:6F:C5:63:34:6E:68:87:DF:9A:05:B7:E5:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a3c02d4-9dc3-38a5-bcf7-1fd7d76e9c80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:5a:2f:28:17:f7:82:0a:2b:b7:72:04:18:0a:0e:42:b7:1b: ea:ce:9b:a8:c6:4e:1f:99:46:fe:25:4e:5e:f8:69:5c:bf:31: 30:a4:9e:d8:b2:a8:5f:99:da:a8:53:2d:a7:95:53:91:30:e4: 7f:4d:6a:9c:ed:51:9b:82:b5:65:be:69:03:e2:14:86:4a:67: 79:fe:ec:2c:4c:66:29:62:5a:e8:f5:68:60:f0:21:4c:58:a6: 48:02:39:20:59:03:80:ad:ea:8a:0e:ac:36:71:35:93:43:a1: b8:21:ec:bc:64:7c:31:83:2c:21:e6:c3:54:85:82:54:2b:30: d2:16:07:5d:de:a4:f0:d8:d2:94:6c:3f:5d:90:f0:f6:7a:b5: e0:d0:88:e2:7f:29:5a:40:bf:b7:9a:1a:95:88:e4:57:88:ed: 3c:62:bc:c4:15:8a:df:09:50:c8:f2:bb:96:d7:6b:70:a3:e5: af:87:f8:60:d8:f9:ce:de:f6:b0:3e:4b:f1:85:1d:c0:04:93: 20:50:89:23:88:f9:97:e9:08:fd:53:36:60:86:d3:6a:3f:40: e1:31:b3:f9:ab:0f:43:aa:f1:eb:9b:a3:2f:40:a5:14:bd:2c: 82:9e:68:fa:01:ba:41:8f:c3:e1:ff:83:45:7a:b2:38:b2:b2: 72:48:2e:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuyqTMlZGgSTUDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDNlNjdkN2EtYzNiYi00MGExLWFjYzgtOTQyYTBmZGNlY2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwSOq39sM1nS2tEklmntyyFaWiviX32cXVnf KUEnpMq9aFWcl9dBoxijYIIGaqPdUoQM34S1cWn24T40nPYdQn9Bja9avNB7eYst luBkeQvwiut3EUmpxF9Y8KJ9/ARAvl+uwr478A8vTt5xgB2eKK07ZXJ+JTdFRqRz VGLNvZFFJOASOdjffABZbyZvHedDGNpRT8qkXGJ0IEOkONqMrwKa50WPWdjH1Les aLKq8UaWDxWNenFYKxU7aWqdVhoYmxdh2SREOgfjhKyVEXqluZQxx1bFSxE0Jk7/ 8jm5Mp/lapET9HV0rPypChv0iOqv8CjazAqoUmr+kfWdtY1PZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfqF1ZOloxvxWM0bmiH35oFt+XfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2EzYzAyZDQtOWRjMy0z OGE1LWJjZjctMWZkN2Q3NmU5YzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8ZBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9aLygX94IKK7dyBBgKDkK3G+rOm6jGTh+ZRv4lTl74aVy/MTCkntiy qF+Z2qhTLaeVU5Ew5H9NapztUZuCtWW+aQPiFIZKZ3n+7CxMZiliWuj1aGDwIUxY pkgCOSBZA4Ct6ooOrDZxNZNDobgh7LxkfDGDLCHmw1SFglQrMNIWB13epPDY0pRs P12Q8PZ6teDQiOJ/KVpAv7eaGpWI5FeI7TxivMQVit8JUMjyu5bXa3Cj5a+H+GDY +c7e9rA+S/GFHcAEkyBQiSOI+ZfpCP1TNmCG02o/QOExs/mrD0Oq8euboy9ApRS9 LIKeaPoBukGPw+H/g0V6sjiysnJILik= -----END CERTIFICATE-----Generated at Sun Apr 27 03:15:23 2025 by rpki-client