$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48812888-1769-36a0-aa5d-b6e90fe1bb90.roa File: 48812888-1769-36a0-aa5d-b6e90fe1bb90.roa (raw, json) Hash identifier: Q9UR1ysmtVxVjOYI3lCvJvVeDJrSugpyTABlPff9SMk= Subject key identifier: 25:98:7E:BE:EC:31:01:52:11:3E:AD:1F:72:04:3C:50:F8:0F:51:E3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB1F833F4D156ED482E520 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48812888-1769-36a0-aa5d-b6e90fe1bb90.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.196.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:1f:83:3f:4d:15:6e:d4:82:e5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5d0866f8-a07f-44be-a5cf-877beb44424c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:9c:ca:20:8d:c2:5c:6b:98:1c:04:fa:02: dd:8b:3c:25:bb:64:8c:2c:90:e8:bb:24:72:05:98: 1f:21:17:90:45:cf:17:b8:5b:e4:b5:61:66:bc:f9: 98:b6:17:76:18:d5:b3:79:71:1c:b9:a0:33:a9:8c: dc:2e:39:c0:1c:58:45:3b:b9:ca:c0:17:82:5a:81: 15:49:c2:8b:a3:36:57:96:b2:07:38:aa:e6:74:75: 15:b6:48:30:30:61:b4:89:06:a4:f6:e7:c9:99:3e: bd:db:83:33:1d:5d:6e:09:33:f3:9e:40:d0:ec:44: 1b:54:5e:b7:45:b3:b8:49:5a:eb:08:d6:25:04:74: 32:3c:f6:e0:89:61:95:c6:40:8f:96:c0:01:30:fa: 45:94:97:03:b1:6f:e5:7e:f6:c4:24:5d:b4:51:fa: 90:61:06:dc:d1:45:3b:a3:70:24:00:9d:4b:8d:a5: 4e:b4:b3:bf:04:7b:d8:5c:e8:9f:98:16:7a:56:51: 2f:fa:7b:dc:ba:b9:4f:1a:3e:c5:ba:28:be:4f:9a: 7d:20:b3:11:84:3f:67:22:8e:c1:b1:42:a5:94:67: ca:1c:38:9c:ec:63:dc:90:b3:79:12:70:f5:67:58: 5c:eb:9d:4e:e8:ef:50:37:4b:c9:3c:7d:25:22:cd: 47:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:98:7E:BE:EC:31:01:52:11:3E:AD:1F:72:04:3C:50:F8:0F:51:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48812888-1769-36a0-aa5d-b6e90fe1bb90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ee:77:34:d7:2e:9c:b0:25:0b:8f:c9:45:01:22:02:5f:f0: 04:b7:db:a6:01:19:15:12:66:54:70:5b:78:1b:96:4a:58:93: 04:06:2d:6a:42:7a:da:87:9c:12:aa:e8:f8:f9:4b:db:34:b4: 9b:a1:8b:40:6c:6c:62:21:f8:8b:68:93:ef:4d:27:15:75:68: d9:d2:b6:a5:9e:8d:ef:f4:54:67:3e:00:37:50:c6:8e:8d:01: be:8c:1c:9e:7f:11:96:18:9b:0c:48:bb:83:8a:72:20:e3:2c: 2a:e4:da:35:0f:6a:26:b6:06:ca:1c:cb:6e:b5:31:eb:70:28: 9e:47:b3:85:0a:56:63:ff:08:9c:a5:25:c6:39:ca:5d:16:7f: ba:ae:be:85:dc:b3:ed:26:86:b4:3a:f5:d0:19:62:76:b4:31: a6:74:d8:a8:79:1a:14:6b:da:ec:41:fe:7b:d0:44:83:58:9b: 7f:cd:5a:ec:fd:b2:d8:0f:aa:3b:7d:14:99:2b:96:92:53:25: 0e:b1:a9:62:54:3a:67:7c:c0:24:56:6b:d9:d7:ff:4a:d2:20: c2:04:31:d6:e6:96:af:1c:10:39:65:a4:10:d7:df:4a:ba:6f: 9a:fd:9d:13:4b:07:a3:ea:70:df:66:0c:a3:3e:36:b7:47:09: 69:bc:cd:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkux+DP00VbtSC5SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NWQwODY2ZjgtYTA3Zi00NGJlLWE1Y2YtODc3YmViNDQ0MjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquScyiCNwlxrmBwE+gLdizwlu2SMLJDouyRy BZgfIReQRc8XuFvktWFmvPmYthd2GNWzeXEcuaAzqYzcLjnAHFhFO7nKwBeCWoEV ScKLozZXlrIHOKrmdHUVtkgwMGG0iQak9ufJmT6924MzHV1uCTPznkDQ7EQbVF63 RbO4SVrrCNYlBHQyPPbgiWGVxkCPlsABMPpFlJcDsW/lfvbEJF20UfqQYQbc0UU7 o3AkAJ1LjaVOtLO/BHvYXOifmBZ6VlEv+nvcurlPGj7Fuii+T5p9ILMRhD9nIo7B sUKllGfKHDic7GPckLN5EnD1Z1hc651O6O9QN0vJPH0lIs1HsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWYfr7sMQFSET6tH3IEPFD4D1HjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDg4MTI4ODgtMTc2OS0z NmEwLWFhNWQtYjZlOTBmZTFiYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvudzTXLpywJQuPyUUBIgJf8AS326YBGRUSZlRwW3gblkpYkwQGLWpC etqHnBKq6Pj5S9s0tJuhi0BsbGIh+Itok+9NJxV1aNnStqWeje/0VGc+ADdQxo6N Ab6MHJ5/EZYYmwxIu4OKciDjLCrk2jUPaia2Bsocy261MetwKJ5Hs4UKVmP/CJyl JcY5yl0Wf7quvoXcs+0mhrQ69dAZYna0MaZ02Kh5GhRr2uxB/nvQRINYm3/NWuz9 stgPqjt9FJkrlpJTJQ6xqWJUOmd8wCRWa9nX/0rSIMIEMdbmlq8cEDllpBDX30q6 b5r9nRNLB6PqcN9mDKM+NrdHCWm8zVc= -----END CERTIFICATE-----Generated at Sun Apr 27 11:32:07 2025 by rpki-client