$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f73f6be-cbc3-3833-b4a1-533442804977.roa File: 3f73f6be-cbc3-3833-b4a1-533442804977.roa (raw, json) Hash identifier: VElIKqCtk/dvZP8CjkVOf4kGvYxoLApaXHSuG7cnqBA= Subject key identifier: 3B:92:14:A4:CB:2E:FA:4E:FB:8F:41:81:62:43:A8:9F:7F:51:F9:97 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB1D382E750E4C1E0EB800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f73f6be-cbc3-3833-b4a1-533442804977.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.196.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:1d:38:2e:75:0e:4c:1e:0e:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=165f5132-003c-4f78-90e8-04ea7b45c16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e4:83:b3:16:95:16:f3:9a:83:82:de:e4:af: d4:36:c7:e0:4d:86:6a:bd:1b:7c:65:55:4f:71:5b: 1c:b3:14:26:3a:81:ec:32:c1:74:5e:54:6a:af:c8: 95:a1:b5:d6:ea:4c:93:0c:67:fc:04:f6:20:41:9f: 6a:e8:75:45:d1:5b:15:b7:a5:03:49:58:fd:cc:8c: d8:9f:06:af:be:85:d2:5b:02:2c:a5:93:0e:27:00: fe:a6:07:8d:49:79:29:20:f6:aa:9a:e7:8c:13:43: 27:cc:8b:2c:21:21:94:e8:c8:5f:67:69:f6:eb:9f: c3:cd:97:b7:f4:04:fc:59:ad:b0:ea:60:64:70:22: 3a:30:d5:04:4e:06:4c:c0:05:3b:48:2f:6b:9f:54: 82:22:8c:5c:d5:72:6a:30:a0:6f:e5:d6:4f:7f:dc: 74:ba:7e:41:73:d7:f8:3d:39:74:35:ba:c2:b8:9b: c4:14:6f:32:b5:1d:51:9e:05:25:87:2e:ef:0b:87: b1:cc:af:66:de:a0:34:f3:1e:6a:c0:26:d6:bd:52: 28:79:c5:b3:3c:ba:88:3f:65:f0:17:ab:b8:f4:83: df:10:81:c3:6d:3a:21:86:38:d3:4d:aa:92:1f:e4: 0a:11:91:1b:9b:fa:b4:c4:a5:89:d0:19:30:98:73: 0b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:92:14:A4:CB:2E:FA:4E:FB:8F:41:81:62:43:A8:9F:7F:51:F9:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f73f6be-cbc3-3833-b4a1-533442804977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:89:2b:b4:f5:d1:45:1c:0f:ca:78:b5:87:1d:e2:96:4e:6a: 27:34:41:02:29:32:10:a0:c1:33:6d:c9:eb:18:84:17:ed:37: 1a:fc:fd:83:f0:f6:2f:30:36:8e:a2:5b:13:7c:ee:29:bf:dc: 72:0b:ce:18:2f:06:f1:b8:3f:2e:eb:4c:10:d2:f7:d0:c4:04: 2b:2f:96:83:5a:bb:92:ac:e3:83:b7:67:ff:90:22:ff:d2:08: 9b:7a:4c:8d:1a:d9:85:a7:69:73:cc:dd:da:3b:67:ab:18:2d: 01:08:fb:b0:bc:94:39:f5:17:6d:17:da:61:22:4a:2b:00:b2: 80:df:0f:ed:09:b8:99:dd:12:51:ff:e3:b0:d3:5d:18:cf:63: 98:ac:6a:f8:b9:7a:13:32:41:0b:6b:dd:72:de:a6:6b:5a:78: 73:36:f4:27:d0:a8:3b:ff:fd:80:a6:4f:be:ff:f5:84:0b:28: a0:7f:8c:66:c2:7d:a2:90:3e:36:c0:78:a8:70:f1:81:39:61: 71:5b:54:da:b3:c4:dc:1d:85:56:5c:89:2a:4f:9f:7d:18:1f: d2:50:60:7b:d1:40:90:5f:9c:8b:b5:0e:c2:86:e6:11:8b:7f: 18:ac:ee:55:ff:95:9c:f5:cf:7f:2d:e6:07:d8:10:e4:b9:cb: 39:7f:1e:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkux04LnUOTB4OuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTY1ZjUxMzItMDAzYy00Zjc4LTkwZTgtMDRlYTdiNDVjMTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouSDsxaVFvOag4Le5K/UNsfgTYZqvRt8ZVVP cVscsxQmOoHsMsF0XlRqr8iVobXW6kyTDGf8BPYgQZ9q6HVF0VsVt6UDSVj9zIzY nwavvoXSWwIspZMOJwD+pgeNSXkpIPaqmueME0MnzIssISGU6MhfZ2n265/DzZe3 9AT8Wa2w6mBkcCI6MNUETgZMwAU7SC9rn1SCIoxc1XJqMKBv5dZPf9x0un5Bc9f4 PTl0NbrCuJvEFG8ytR1RngUlhy7vC4exzK9m3qA08x5qwCbWvVIoecWzPLqIP2Xw F6u49IPfEIHDbTohhjjTTaqSH+QKEZEbm/q0xKWJ0BkwmHMLdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuSFKTLLvpO+49BgWJDqJ9/UfmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2Y3M2Y2YmUtY2JjMy0z ODMzLWI0YTEtNTMzNDQyODA0OTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8ROMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGJK7T10UUcD8p4tYcd4pZOaic0QQIpMhCgwTNtyesYhBftNxr8/YPw 9i8wNo6iWxN87im/3HILzhgvBvG4Py7rTBDS99DEBCsvloNau5Ks44O3Z/+QIv/S CJt6TI0a2YWnaXPM3do7Z6sYLQEI+7C8lDn1F20X2mEiSisAsoDfD+0JuJndElH/ 47DTXRjPY5isavi5ehMyQQtr3XLepmtaeHM29CfQqDv//YCmT77/9YQLKKB/jGbC faKQPjbAeKhw8YE5YXFbVNqzxNwdhVZciSpPn30YH9JQYHvRQJBfnIu1DsKG5hGL fxis7lX/lZz1z38t5gfYEOS5yzl/HiU= -----END CERTIFICATE-----Generated at Sun Apr 27 02:06:02 2025 by rpki-client