$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41b2d9c1-5ef1-34ae-95f8-7d84b3d5741e.roa File: 41b2d9c1-5ef1-34ae-95f8-7d84b3d5741e.roa (raw, json) Hash identifier: fz4RIMkHER2XboqA29x62Tr6vJmXbrVfULeI5Ef+jV0= Subject key identifier: B7:74:53:01:A5:45:5C:72:BD:97:7D:E8:48:76:1F:FA:E3:05:EC:D8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB29AE708E13FC215A5DC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41b2d9c1-5ef1-34ae-95f8-7d84b3d5741e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.198.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:29:ae:70:8e:13:fc:21:5a:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9cdf0b55-b5b1-45e9-ab6f-9d4a1870c34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:47:77:87:fd:a3:b7:2e:3a:46:1a:8c:4b:e6: 51:76:bb:74:30:ca:31:b6:89:37:6d:6a:ae:ed:58: af:32:36:86:a5:cf:dd:b0:05:41:c6:1d:cd:14:b9: 4a:87:b5:b1:cd:46:ab:88:bd:c2:34:3a:77:a2:90: 2c:37:3e:9f:8c:0d:86:4f:40:ac:cf:a2:f4:97:d3: 1c:bb:14:63:a6:e0:7f:18:75:4c:a3:26:c4:5b:3d: 63:45:54:17:38:30:69:90:7d:d1:11:9d:fe:a8:03: 17:02:93:0d:95:4c:33:ea:08:61:25:3e:41:6c:a8: 53:bb:16:86:5a:d3:77:8a:6b:f7:87:ef:19:a2:6c: 68:a0:1f:47:07:85:ba:bd:f5:4a:25:7a:7b:bc:45: 87:1b:66:f7:29:06:13:92:66:ef:75:00:1f:17:e2: 43:7a:1d:07:24:d7:cc:37:e2:46:30:e1:92:f4:28: 6c:61:39:e4:45:3a:05:43:47:e4:d8:7a:92:d0:d2: 7c:c3:95:6a:ef:ff:09:af:ca:d1:58:e7:5c:1f:8b: c4:dc:5c:66:f3:22:48:a0:60:33:38:65:5f:d8:c6: 75:e1:47:ce:42:fd:6a:d5:75:13:48:b4:62:1a:a1: 3a:42:cb:d7:88:4b:c3:e2:2e:ce:3c:f7:58:de:c6: 42:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:74:53:01:A5:45:5C:72:BD:97:7D:E8:48:76:1F:FA:E3:05:EC:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41b2d9c1-5ef1-34ae-95f8-7d84b3d5741e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:96:45:7c:c2:2d:f5:b4:3e:96:30:fa:0b:9e:7f:2a:cd:21: 09:ed:03:69:27:a4:9e:f5:0c:10:10:66:ab:f0:8f:32:54:3d: c5:e0:74:65:e1:72:7f:3e:48:f2:c2:4c:dd:a2:27:0a:01:26: 47:f5:1d:67:a9:04:41:ef:32:f9:82:e6:f5:09:9d:95:54:e8: 45:dc:03:a2:26:e1:cb:49:5c:91:77:26:3b:e4:38:7e:4b:41: 82:f3:d6:71:3c:7f:24:57:ea:c0:16:91:cc:45:0b:90:49:1c: cc:f4:c1:58:61:19:cf:6c:51:e5:95:37:3c:2b:0d:e0:e0:64: 26:d1:50:fd:fa:56:e7:73:fe:3a:ec:f5:5c:d1:34:55:fb:1f: 52:6e:f3:ca:47:04:19:47:28:d8:0e:90:87:6d:c8:1f:db:f3: 54:6c:95:6c:4a:0b:9f:2e:46:16:2c:e7:53:22:fd:92:82:ad: 78:eb:bf:11:22:b1:c8:90:24:e6:fa:6e:47:91:ca:1a:78:ad: c8:fa:bc:30:b4:94:60:45:15:70:ee:0d:7b:99:8b:e6:fb:32: 12:21:c5:25:58:0e:09:92:e3:56:40:22:53:1b:45:36:24:b9: c8:57:e0:9c:91:75:be:dc:0d:0c:2c:55:2a:66:58:79:3c:0a: d4:2b:e8:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuymucI4T/CFaXcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWNkZjBiNTUtYjViMS00NWU5LWFiNmYtOWQ0YTE4NzBjMzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ed3h/2jty46RhqMS+ZRdrt0MMoxtok3bWqu 7VivMjaGpc/dsAVBxh3NFLlKh7WxzUariL3CNDp3opAsNz6fjA2GT0Csz6L0l9Mc uxRjpuB/GHVMoybEWz1jRVQXODBpkH3REZ3+qAMXApMNlUwz6ghhJT5BbKhTuxaG WtN3imv3h+8ZomxooB9HB4W6vfVKJXp7vEWHG2b3KQYTkmbvdQAfF+JDeh0HJNfM N+JGMOGS9ChsYTnkRToFQ0fk2HqS0NJ8w5Vq7/8Jr8rRWOdcH4vE3Fxm8yJIoGAz OGVf2MZ14UfOQv1q1XUTSLRiGqE6QsvXiEvD4i7OPPdY3sZCyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLd0UwGlRVxyvZd96Eh2H/rjBezYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDFiMmQ5YzEtNWVmMS0z NGFlLTk1ZjgtN2Q4NGIzZDU3NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMCWRXzCLfW0PpYw+guefyrNIQntA2knpJ71DBAQZqvwjzJUPcXgdGXh cn8+SPLCTN2iJwoBJkf1HWepBEHvMvmC5vUJnZVU6EXcA6Im4ctJXJF3JjvkOH5L QYLz1nE8fyRX6sAWkcxFC5BJHMz0wVhhGc9sUeWVNzwrDeDgZCbRUP36Vudz/jrs 9VzRNFX7H1Ju88pHBBlHKNgOkIdtyB/b81RslWxKC58uRhYs51Mi/ZKCrXjrvxEi sciQJOb6bkeRyhp4rcj6vDC0lGBFFXDuDXuZi+b7MhIhxSVYDgmS41ZAIlMbRTYk uchX4JyRdb7cDQwsVSpmWHk8CtQr6Bg= -----END CERTIFICATE-----Generated at Sun Apr 27 05:40:42 2025 by rpki-client