$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c22d3b0-82e0-3df5-af12-75c68e589d2e.roa File: 4c22d3b0-82e0-3df5-af12-75c68e589d2e.roa (raw, json) Hash identifier: FsbPGZDWOIpfk4KIsOZ/XwIlbVWRxWQUXVgnGiil+zM= Subject key identifier: 6E:B5:3F:79:7B:29:C3:E2:1D:15:83:6E:47:B3:12:5D:72:1E:2C:F6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA888BCA559D68F45B7000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c22d3b0-82e0-3df5-af12-75c68e589d2e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.198.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:88:8b:ca:55:9d:68:f4:5b:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2a301c9c-2514-4998-9d0f-30adede65bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1e:ad:a8:d7:23:6b:52:a2:79:e1:96:61:7d: e8:59:6f:82:83:84:6a:f7:75:53:3c:7d:69:12:e2: 8e:e3:28:d3:08:f2:4f:8e:fc:1b:3c:cb:a9:6f:65: a7:06:2d:87:02:f3:04:62:49:2a:41:48:fa:0a:34: 25:95:fb:28:9f:1e:2b:a8:c7:37:91:a7:5f:07:a0: 5f:41:57:e7:20:73:c4:76:25:0e:c4:b6:55:5f:26: fe:d0:50:11:90:f9:09:4d:7a:36:3d:60:a4:30:28: 68:83:ca:16:fa:23:1d:2b:32:e4:0d:37:5a:b4:d7: 9f:9d:73:95:c5:24:8b:76:1a:ed:bf:22:d3:11:eb: 0a:7d:41:3b:2c:9d:cc:fe:79:86:92:f6:ed:1e:12: 2c:8c:68:a6:05:9b:3d:6d:2a:bb:1b:48:09:8f:89: 21:46:a1:98:e2:dd:58:f8:a3:1e:a1:9c:8e:70:f7: 55:d4:44:29:95:df:1c:16:f1:69:10:28:55:d3:cf: 93:c6:b7:23:7c:d5:0f:c7:10:7a:b9:72:2e:97:3a: 47:98:0e:9f:b9:c8:81:ef:74:ae:1a:11:96:95:2c: ce:f4:6a:1d:c1:ae:b0:e0:aa:78:ec:c1:85:30:44: a5:9e:47:24:1c:1e:f3:f3:09:df:27:bf:a6:2b:82: 20:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B5:3F:79:7B:29:C3:E2:1D:15:83:6E:47:B3:12:5D:72:1E:2C:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c22d3b0-82e0-3df5-af12-75c68e589d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:1a:4c:a6:0a:0d:28:61:72:02:8c:86:ea:fc:6b:04:75:0c: 58:5b:36:e8:1e:b9:a1:81:af:66:6b:ac:05:47:2f:17:ca:c7: f9:e6:b9:af:c0:17:98:c7:66:b1:99:cf:d6:24:36:45:2b:30: c8:86:2e:38:6c:91:77:e2:7c:b9:6e:c1:14:8c:a8:9d:0d:13: 52:ef:94:1f:7c:13:61:40:38:01:8d:35:9c:c6:1c:93:19:13: 48:6e:84:b9:08:4c:49:18:59:1f:01:e5:a0:45:39:04:2e:f3: ff:0c:52:bd:53:79:ba:51:83:64:c6:7e:ff:97:43:7a:bb:98: 25:23:e2:94:22:53:7e:49:cd:02:ea:da:ca:17:cd:17:68:77: bd:52:28:49:b8:06:2e:53:83:32:80:f8:87:07:a5:d6:4e:14: a6:1d:80:e9:ab:54:23:8b:bf:7f:a2:9f:83:7a:67:74:41:1a: 3e:65:46:18:15:8e:b8:c5:c1:c8:4a:76:7c:69:90:f9:69:ab: 86:6d:ef:cb:ef:f8:e1:bd:38:f7:a5:30:22:74:1c:7b:c7:3b: 11:b1:9b:48:21:7d:55:f4:00:9b:ec:ec:f4:8e:cf:24:1a:43: d7:41:5e:76:ea:79:ca:ad:b2:5a:0a:53:f5:e4:88:10:e9:73: ea:48:31:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuoiLylWdaPRbcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmEzMDFjOWMtMjUxNC00OTk4LTlkMGYtMzBhZGVkZTY1YmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx6tqNcja1KieeGWYX3oWW+Cg4Rq93VTPH1p EuKO4yjTCPJPjvwbPMupb2WnBi2HAvMEYkkqQUj6CjQllfsonx4rqMc3kadfB6Bf QVfnIHPEdiUOxLZVXyb+0FARkPkJTXo2PWCkMChog8oW+iMdKzLkDTdatNefnXOV xSSLdhrtvyLTEesKfUE7LJ3M/nmGkvbtHhIsjGimBZs9bSq7G0gJj4khRqGY4t1Y +KMeoZyOcPdV1EQpld8cFvFpEChV08+TxrcjfNUPxxB6uXIulzpHmA6fuciB73Su GhGWlSzO9Godwa6w4Kp47MGFMESlnkckHB7z8wnfJ7+mK4Ig7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG61P3l7KcPiHRWDbkezEl1yHiz2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGMyMmQzYjAtODJlMC0z ZGY1LWFmMTItNzVjNjhlNTg5ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8aTKYKDShhcgKMhur8awR1DFhbNugeuaGBr2ZrrAVHLxfKx/nmua/A F5jHZrGZz9YkNkUrMMiGLjhskXfifLluwRSMqJ0NE1LvlB98E2FAOAGNNZzGHJMZ E0huhLkITEkYWR8B5aBFOQQu8/8MUr1TebpRg2TGfv+XQ3q7mCUj4pQiU35JzQLq 2soXzRdod71SKEm4Bi5TgzKA+IcHpdZOFKYdgOmrVCOLv3+in4N6Z3RBGj5lRhgV jrjFwchKdnxpkPlpq4Zt78vv+OG9OPelMCJ0HHvHOxGxm0ghfVX0AJvs7PSOzyQa Q9dBXnbqecqtsloKU/XkiBDpc+pIMdA= -----END CERTIFICATE-----Generated at Sun Apr 27 12:54:36 2025 by rpki-client