$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a4c0eca-36d0-33ae-9d69-5f8affff2650.roa File: 3a4c0eca-36d0-33ae-9d69-5f8affff2650.roa (raw, json) Hash identifier: 8wpgijGH1JvUwQB2wo5F9NRTQVc54niMfB9XSwtFrgE= Subject key identifier: B3:E0:44:77:1F:3A:62:B8:4A:E2:9D:53:C9:F9:D0:E3:23:92:AB:91 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA7C49902A55DE63824340 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a4c0eca-36d0-33ae-9d69-5f8affff2650.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.196.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:7c:49:90:2a:55:de:63:82:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=0c4bfc1a-8207-40c0-8a70-a48253dd920c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:02:29:a9:9c:01:17:25:b9:ae:dc:6f:77:88: 4c:ac:41:05:03:9d:ee:24:16:e5:f0:bd:56:58:38: 74:83:3a:1d:28:f9:d7:61:11:99:44:1e:d1:67:ac: 3d:5a:97:fb:c5:81:68:8a:a2:f2:6e:88:c1:3b:d1: 7b:0f:ff:28:bd:cd:86:22:af:8d:cf:0e:00:d9:c9: fa:11:1f:18:dd:d1:b2:dd:45:18:50:c8:a9:38:a2: 2a:10:7c:92:71:63:28:bd:b0:33:3f:6a:22:41:0b: 5f:6f:19:39:4b:10:0c:33:e2:54:ed:99:1a:31:b3: 12:a1:23:2a:fd:91:3c:ee:f7:93:3f:20:b4:9a:26: bf:88:16:f5:90:86:f5:19:55:bd:e0:8a:44:0e:d9: 53:5e:4e:03:b6:23:d3:68:eb:34:2d:90:7a:8f:b2: 78:bf:0f:35:6f:f7:99:9a:19:f6:f9:26:f2:a8:ca: 07:c9:81:c7:bd:b3:e0:b0:29:13:de:70:dc:fe:9c: 17:ba:6c:ad:ca:4f:a0:7b:af:17:fe:68:86:a5:b7: dc:c4:78:f2:ac:02:1d:df:be:69:64:df:9a:92:ea: e9:79:66:a0:af:29:5a:ac:fa:82:fb:9b:91:49:bd: 7e:4f:d0:1a:72:d6:19:15:e3:93:31:11:75:44:10: 03:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E0:44:77:1F:3A:62:B8:4A:E2:9D:53:C9:F9:D0:E3:23:92:AB:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a4c0eca-36d0-33ae-9d69-5f8affff2650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:99:9e:2f:a9:50:5c:4c:76:2f:1a:4d:bf:7c:95:c8:de:96: 6b:03:c6:7d:ca:1c:a5:c9:cb:16:0f:51:75:36:a4:c0:6b:7d: cf:db:09:27:48:48:2a:8d:09:b2:e9:ec:2a:2a:51:c3:88:dd: eb:44:89:b6:34:54:5b:f3:62:7a:ac:a6:8c:59:d7:87:cc:ae: d6:b0:a1:32:eb:51:05:4b:af:8b:d9:3d:ac:22:52:4a:1c:b6: 08:c7:1c:01:ce:47:7c:c6:69:38:6c:e8:79:61:f1:32:cd:47: e6:e2:dd:56:ed:07:a6:0d:ab:b7:e1:59:9f:60:20:3c:60:40: dd:ab:99:d6:91:99:ee:04:be:ac:ad:7b:8a:c3:75:ee:fc:99: 32:39:66:b9:b7:08:7e:0c:be:eb:48:98:e8:7b:e9:8b:18:2d: e9:5f:ee:e6:db:b8:52:6a:fe:48:37:07:d1:4b:cf:ec:9f:dd: 27:69:21:18:3f:16:66:79:77:82:39:82:83:8b:d0:77:77:cc: 53:5f:e7:24:50:96:a0:2b:c1:b1:77:d6:ad:2d:72:3a:ac:0f: 35:99:2a:6d:b9:ac:0a:b0:f2:ff:38:9b:4f:59:df:47:db:48: f2:90:a4:a8:e4:71:66:7b:94:98:84:3d:38:af:2b:e2:35:b6: 7d:b6:f3:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkunxJkCpV3mOCQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MGM0YmZjMWEtODIwNy00MGMwLThhNzAtYTQ4MjUzZGQ5MjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9QIpqZwBFyW5rtxvd4hMrEEFA53uJBbl8L1W WDh0gzodKPnXYRGZRB7RZ6w9Wpf7xYFoiqLybojBO9F7D/8ovc2GIq+Nzw4A2cn6 ER8Y3dGy3UUYUMipOKIqEHyScWMovbAzP2oiQQtfbxk5SxAMM+JU7ZkaMbMSoSMq /ZE87veTPyC0mia/iBb1kIb1GVW94IpEDtlTXk4DtiPTaOs0LZB6j7J4vw81b/eZ mhn2+SbyqMoHyYHHvbPgsCkT3nDc/pwXumytyk+ge68X/miGpbfcxHjyrAId375p ZN+akurpeWagrylarPqC+5uRSb1+T9AactYZFeOTMRF1RBADtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPgRHcfOmK4SuKdU8n50OMjkquRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2E0YzBlY2EtMzZkMC0z M2FlLTlkNjktNWY4YWZmZmYyNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6Zni+pUFxMdi8aTb98lcjelmsDxn3KHKXJyxYPUXU2pMBrfc/bCSdI SCqNCbLp7CoqUcOI3etEibY0VFvzYnqspoxZ14fMrtawoTLrUQVLr4vZPawiUkoc tgjHHAHOR3zGaThs6Hlh8TLNR+bi3VbtB6YNq7fhWZ9gIDxgQN2rmdaRme4Evqyt e4rDde78mTI5Zrm3CH4MvutImOh76YsYLelf7ubbuFJq/kg3B9FLz+yf3SdpIRg/ FmZ5d4I5goOL0Hd3zFNf5yRQlqArwbF31q0tcjqsDzWZKm25rAqw8v84m09Z30fb SPKQpKjkcWZ7lJiEPTivK+I1tn2284c= -----END CERTIFICATE-----Generated at Sat Apr 26 23:59:42 2025 by rpki-client