$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/49db7ff5-91a2-3b02-a913-94c979f50383.roa File: 49db7ff5-91a2-3b02-a913-94c979f50383.roa (raw, json) Hash identifier: jd58cF+5I0OCLlnpOLdaJEivF+tiY3bGrUKf7Mvb8Tc= Subject key identifier: 7C:00:04:77:17:EB:C3:CD:85:A8:1B:32:C6:1F:62:5F:FC:A1:70:C7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA7FCE029B63A825076B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/49db7ff5-91a2-3b02-a913-94c979f50383.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.196.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:7f:ce:02:9b:63:a8:25:07:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3c44afa4-b0d6-4bc0-a239-9b560b1f468b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d6:ed:2c:9d:66:4b:b8:6c:c8:79:fa:25:28: c3:62:39:7b:28:d7:36:bf:87:0d:57:ab:c5:c3:c1: e6:3a:4b:76:08:15:0c:f1:35:4d:7c:1e:0f:11:67: df:73:3f:11:25:8b:c0:e3:e0:08:5b:f4:f8:af:fd: 61:3a:79:44:f0:f8:79:c8:d9:6b:71:37:b1:e9:5d: ac:bf:7c:93:b4:b8:f8:53:eb:aa:4f:da:4c:d2:d8: a0:8c:39:49:7b:d3:13:d4:83:0d:06:f8:dc:0d:8b: e5:fc:dc:4b:ab:f1:6a:cc:18:98:40:ea:0d:a2:68: d5:a8:fd:b0:af:32:7e:ce:85:01:e6:e8:6f:3b:a4: f6:09:4e:bd:d6:95:26:cf:90:96:77:a4:94:a7:3e: c5:22:d3:e3:2a:c1:26:20:5f:ca:f2:79:ab:53:02: 19:55:4c:1b:8e:8d:b7:11:f4:0d:4a:b1:5c:8d:9e: 5d:ad:90:1d:e7:b4:aa:fb:ab:b8:af:e9:e1:cd:5e: 64:dc:d0:69:83:dc:9d:2b:f1:fe:3f:85:4b:6d:40: c6:76:1b:7e:58:c7:82:2d:7c:06:87:d9:61:f1:d7: 83:55:fd:5c:c5:3a:60:fc:82:c6:9b:dd:96:c1:40: 9e:df:a9:b1:0f:97:f0:21:bb:e4:75:b4:b1:30:3b: 6c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:00:04:77:17:EB:C3:CD:85:A8:1B:32:C6:1F:62:5F:FC:A1:70:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/49db7ff5-91a2-3b02-a913-94c979f50383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:ba:00:2e:bb:1d:c4:58:4a:ab:23:81:b7:2e:6f:80:d4:03: 9a:58:c6:dd:05:22:11:1a:f7:cb:55:f6:4e:8b:bd:44:e8:79: 5f:a0:59:61:3b:0a:a5:0e:cb:21:dd:94:ac:8b:67:91:9b:8d: e4:2a:8a:7c:31:41:0d:fc:ef:73:93:81:fb:89:d1:d4:8b:25: 5f:42:b5:31:91:dc:bf:fd:00:3f:93:bd:41:4a:53:a0:e7:01: f0:b3:64:5d:e9:94:ae:ae:70:ee:ff:db:68:8b:37:24:1d:36: 25:73:3d:d4:c6:8a:fa:5d:34:e1:bd:5e:60:49:00:af:b4:67: df:7a:db:8b:9e:ee:24:a2:a5:0c:cc:84:fc:2b:88:a1:8a:de: 29:04:7e:1f:6d:ab:37:82:fb:1a:49:08:8c:71:c4:2c:ce:c6: b4:d5:23:72:1b:51:3c:d3:83:1e:c1:19:68:46:fa:38:91:89: 5e:64:dc:aa:7e:e2:43:b8:64:8b:46:f5:29:79:91:aa:41:96: 94:ca:d0:47:22:57:b8:5a:f4:bc:39:52:f5:4b:8b:20:fc:cb: e3:e3:fe:42:9b:f4:2e:e1:14:91:33:4e:9f:da:a8:1e:07:0c: 0c:25:f9:12:d6:22:1f:3d:be:e4:c4:39:9f:48:17:f4:3d:d2: ca:40:e5:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkun/OAptjqCUHawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2M0NGFmYTQtYjBkNi00YmMwLWEyMzktOWI1NjBiMWY0NjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dbtLJ1mS7hsyHn6JSjDYjl7KNc2v4cNV6vF w8HmOkt2CBUM8TVNfB4PEWffcz8RJYvA4+AIW/T4r/1hOnlE8Ph5yNlrcTex6V2s v3yTtLj4U+uqT9pM0tigjDlJe9MT1IMNBvjcDYvl/NxLq/FqzBiYQOoNomjVqP2w rzJ+zoUB5uhvO6T2CU691pUmz5CWd6SUpz7FItPjKsEmIF/K8nmrUwIZVUwbjo23 EfQNSrFcjZ5drZAd57Sq+6u4r+nhzV5k3NBpg9ydK/H+P4VLbUDGdht+WMeCLXwG h9lh8deDVf1cxTpg/ILGm92WwUCe36mxD5fwIbvkdbSxMDts8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwABHcX68PNhagbMsYfYl/8oXDHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDlkYjdmZjUtOTFhMi0z YjAyLWE5MTMtOTRjOTc5ZjUwMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL+6AC67HcRYSqsjgbcub4DUA5pYxt0FIhEa98tV9k6LvUToeV+gWWE7 CqUOyyHdlKyLZ5GbjeQqinwxQQ3873OTgfuJ0dSLJV9CtTGR3L/9AD+TvUFKU6Dn AfCzZF3plK6ucO7/22iLNyQdNiVzPdTGivpdNOG9XmBJAK+0Z99624ue7iSipQzM hPwriKGK3ikEfh9tqzeC+xpJCIxxxCzOxrTVI3IbUTzTgx7BGWhG+jiRiV5k3Kp+ 4kO4ZItG9Sl5kapBlpTK0EciV7ha9Lw5UvVLiyD8y+Pj/kKb9C7hFJEzTp/aqB4H DAwl+RLWIh89vuTEOZ9IF/Q90spA5Zo= -----END CERTIFICATE-----Generated at Sun Apr 27 23:01:03 2025 by rpki-client