$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa File: 4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa (raw, json) Hash identifier: wUCjr45cviZGPbGgUTqT5RIvNMgzC7c6k9tAnIK3Tws= Subject key identifier: 7A:5F:3F:0E:09:31:22:41:F9:C8:65:64:ED:40:30:99:A4:D8:C5:B4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB287B9AC2D45D5076F1C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.197.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:28:7b:9a:c2:d4:5d:50:76:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e85b5f48-2811-41d3-8d67-828dc0a4c656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:81:f9:63:8c:e1:dc:e3:52:9b:9b:eb:31:11: 48:b6:4c:87:f2:8b:32:c9:7b:af:dc:34:10:4c:78: b8:19:b9:5f:50:2e:87:49:c8:27:79:3b:84:4b:22: bd:0d:09:80:52:77:14:34:6f:50:6f:39:3f:09:c4: 4a:23:f9:a1:f3:e8:c7:5a:2a:51:64:d5:06:00:57: ea:30:89:fc:fa:46:89:1e:e9:45:27:77:0a:6a:62: 6a:89:77:59:ee:a3:f8:cc:84:09:45:62:d6:33:a4: 7f:0b:b4:64:c1:c8:6b:9d:f4:0d:b7:40:99:41:3d: f8:53:91:25:b4:e5:2e:7c:8e:a9:d8:1b:fe:ad:41: b5:d6:4c:33:c0:f0:65:02:5a:7e:1a:e0:4a:41:37: 5c:42:d1:0d:6e:31:fc:18:37:4a:df:53:65:bf:e9: 75:ab:b9:63:b8:4c:9c:94:07:e3:7b:6c:50:1a:05: 20:2e:af:e2:fc:ca:56:02:e9:69:45:3d:09:02:49: ee:3a:1c:6b:7f:83:f5:22:d9:81:fc:b0:8f:9a:a3: 38:6f:09:0b:66:e3:f1:78:87:83:7b:fd:6e:b2:07: d7:15:e6:0c:df:d1:f3:76:73:a3:76:55:df:ae:46: fa:74:71:8d:63:46:13:85:e1:e3:5f:b8:8c:d0:0e: e0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5F:3F:0E:09:31:22:41:F9:C8:65:64:ED:40:30:99:A4:D8:C5:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ad:60:c2:a0:39:df:e1:62:c2:58:85:dc:84:9e:e0:a9:dd: 64:71:c0:7c:a9:c9:ee:42:b9:e6:d0:9b:d8:09:5c:ec:90:fb: 8e:09:c5:51:15:e8:5f:d0:63:00:bb:f5:55:e0:13:69:49:2d: 76:99:3f:f2:c9:40:ef:f4:7f:f9:50:58:22:3b:60:e1:2a:f8: 51:2e:ec:0a:c7:fa:97:30:85:e6:73:4d:a2:3b:a9:ce:31:ca: 63:4e:3a:5a:26:db:46:d2:26:c3:9d:40:30:73:2c:c4:5e:27: 10:9a:77:18:14:00:84:95:b9:75:65:8f:4b:28:6e:90:97:19: 47:0e:02:2d:8e:cf:68:07:34:ed:15:5d:2f:a9:5c:e3:49:d3: 3b:1a:61:0f:45:84:6d:d0:49:5c:db:84:bb:38:f5:30:a8:ac: 81:ba:46:d1:4a:48:60:dd:c8:77:25:bf:cf:7f:ad:3f:8e:20: 33:ff:2b:d7:25:e1:78:4e:6a:d6:01:3f:98:67:c7:9d:9b:09: 2a:22:cd:d1:3d:f7:d6:7d:6f:fc:58:a7:65:37:9e:05:7d:07: 77:45:43:46:1f:eb:1b:e2:23:d7:2f:21:a8:e2:18:d5:25:40: ec:b2:3a:ce:19:d6:38:b8:e6:cf:45:88:13:14:53:9c:e1:d9: cc:38:df:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuyh7msLUXVB28cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTg1YjVmNDgtMjgxMS00MWQzLThkNjctODI4ZGMwYTRjNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4H5Y4zh3ONSm5vrMRFItkyH8osyyXuv3DQQ THi4GblfUC6HScgneTuESyK9DQmAUncUNG9Qbzk/CcRKI/mh8+jHWipRZNUGAFfq MIn8+kaJHulFJ3cKamJqiXdZ7qP4zIQJRWLWM6R/C7RkwchrnfQNt0CZQT34U5El tOUufI6p2Bv+rUG11kwzwPBlAlp+GuBKQTdcQtENbjH8GDdK31Nlv+l1q7ljuEyc lAfje2xQGgUgLq/i/MpWAulpRT0JAknuOhxrf4P1ItmB/LCPmqM4bwkLZuPxeIeD e/1usgfXFeYM39HzdnOjdlXfrkb6dHGNY0YTheHjX7iM0A7gVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpfPw4JMSJB+chlZO1AMJmk2MW0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDU5OWQ5ZDMtZjBhYS0z NzM0LWFmZjEtMjFhNWYxZmNiYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8X2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICtYMKgOd/hYsJYhdyEnuCp3WRxwHypye5CuebQm9gJXOyQ+44JxVEV 6F/QYwC79VXgE2lJLXaZP/LJQO/0f/lQWCI7YOEq+FEu7ArH+pcwheZzTaI7qc4x ymNOOlom20bSJsOdQDBzLMReJxCadxgUAISVuXVlj0sobpCXGUcOAi2Oz2gHNO0V XS+pXONJ0zsaYQ9FhG3QSVzbhLs49TCorIG6RtFKSGDdyHclv89/rT+OIDP/K9cl 4XhOatYBP5hnx52bCSoizdE999Z9b/xYp2U3ngV9B3dFQ0Yf6xviI9cvIajiGNUl QOyyOs4Z1ji45s9FiBMUU5zh2cw43zw= -----END CERTIFICATE-----Generated at Sun Apr 27 04:07:35 2025 by rpki-client