$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50c6c70a-4eec-3e0f-95f6-71a7ac9c892f.roa File: 50c6c70a-4eec-3e0f-95f6-71a7ac9c892f.roa (raw, json) Hash identifier: 1K1YP68cJI3bbayRV9hb/rvyp4rrhKdJVvp3Mzp0n+s= Subject key identifier: D7:12:D0:C7:B4:CD:43:1E:83:D0:61:25:CB:09:6F:1C:03:51:3C:03 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA8835957DC83124D15880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50c6c70a-4eec-3e0f-95f6-71a7ac9c892f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.198.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:88:35:95:7d:c8:31:24:d1:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a333368d-6e95-42e8-89c6-45c15e21b21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:20:de:6f:cb:65:e0:e2:9c:09:c4:1e:87:6a: 2b:22:e3:00:9d:a2:3b:22:96:42:f8:6e:fb:ca:6a: f1:69:b3:8d:9e:32:e2:cb:70:fc:4c:86:07:64:4e: a8:11:0f:55:97:98:c1:e9:96:30:78:42:30:c5:f9: f3:1a:32:39:15:f9:e0:3c:24:45:38:23:24:33:52: f0:26:66:c9:48:0d:27:1e:89:f2:05:e4:9f:8b:9d: c0:31:8b:c2:a5:e9:14:c9:dc:07:93:56:66:ad:1d: 41:46:2b:51:89:52:8b:69:75:6d:d1:a2:9b:88:a3: d4:e3:54:d2:4a:2e:12:e7:0f:7f:2b:29:39:8d:4c: 17:ae:01:03:aa:0e:1f:21:14:5d:c2:0f:3e:4f:53: b6:a4:87:6c:a0:90:44:f6:fc:83:2e:96:8f:4e:9b: ef:a1:25:59:9c:a5:49:50:1d:0f:07:18:09:cf:ad: 2a:58:4a:00:3f:72:51:de:e5:7a:1d:44:a0:21:08: 56:e4:27:5f:23:1c:ac:c8:98:6c:a2:65:13:cc:da: 93:0c:cc:56:17:5e:55:49:01:57:ca:ac:f7:1b:d9: c5:83:09:df:d9:c1:82:02:23:b0:20:74:04:69:20: d5:ea:70:c1:98:c5:23:0e:65:18:f5:67:9c:29:5b: 37:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:12:D0:C7:B4:CD:43:1E:83:D0:61:25:CB:09:6F:1C:03:51:3C:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50c6c70a-4eec-3e0f-95f6-71a7ac9c892f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c8:7d:0e:90:31:ef:fe:6a:ad:25:f9:de:3d:54:14:b8:11: c2:df:e1:14:7a:81:97:0f:a5:fb:c3:76:98:0a:5d:71:16:53: e1:2c:d7:3f:5c:81:2c:bb:3f:fd:d6:b5:ae:aa:63:de:5c:dc: 8c:bb:94:9d:90:e0:82:71:45:34:24:24:f2:b6:bb:a9:12:c6: 49:f5:87:34:b2:90:a2:05:40:09:34:4d:63:02:b7:ff:98:86: 95:b6:b3:50:3f:c7:e4:c9:85:7d:7e:e2:45:22:03:4d:8d:05: 1d:8a:e0:e1:db:93:5c:e5:a2:3a:98:68:7e:ae:a0:a7:04:84: c9:4a:64:e9:93:26:be:f6:23:ed:c8:5b:1c:a9:1a:80:ce:0e: d3:9c:bd:69:86:6a:7b:96:5a:18:e6:13:32:4c:c1:5d:ce:d5: b7:45:2e:82:8c:15:a9:24:b8:95:ea:c9:ba:85:2c:fa:40:36: a2:37:26:f0:bd:18:e6:97:ad:11:e9:e7:73:0b:2c:99:e5:57: e9:25:d1:f5:86:55:7f:07:fa:dd:f0:a0:f9:74:d0:ab:53:0d: 93:6c:87:af:93:7a:f6:43:fd:30:1e:e9:0f:c6:63:63:80:bb: 4d:9e:bb:aa:29:39:64:18:8c:2d:2f:5b:e9:44:6a:d8:a6:c5: a0:99:f5:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuog1lX3IMSTRWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTMzMzM2OGQtNmU5NS00MmU4LTg5YzYtNDVjMTVlMjFiMjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCDeb8tl4OKcCcQeh2orIuMAnaI7IpZC+G77 ymrxabONnjLiy3D8TIYHZE6oEQ9Vl5jB6ZYweEIwxfnzGjI5FfngPCRFOCMkM1Lw JmbJSA0nHonyBeSfi53AMYvCpekUydwHk1ZmrR1BRitRiVKLaXVt0aKbiKPU41TS Si4S5w9/Kyk5jUwXrgEDqg4fIRRdwg8+T1O2pIdsoJBE9vyDLpaPTpvvoSVZnKVJ UB0PBxgJz60qWEoAP3JR3uV6HUSgIQhW5CdfIxysyJhsomUTzNqTDMxWF15VSQFX yqz3G9nFgwnf2cGCAiOwIHQEaSDV6nDBmMUjDmUY9WecKVs3WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcS0Me0zUMeg9BhJcsJbxwDUTwDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTBjNmM3MGEtNGVlYy0z ZTBmLTk1ZjYtNzFhN2FjOWM4OTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXIfQ6QMe/+aq0l+d49VBS4EcLf4RR6gZcPpfvDdpgKXXEWU+Es1z9c gSy7P/3Wta6qY95c3Iy7lJ2Q4IJxRTQkJPK2u6kSxkn1hzSykKIFQAk0TWMCt/+Y hpW2s1A/x+TJhX1+4kUiA02NBR2K4OHbk1zlojqYaH6uoKcEhMlKZOmTJr72I+3I WxypGoDODtOcvWmGanuWWhjmEzJMwV3O1bdFLoKMFakkuJXqybqFLPpANqI3JvC9 GOaXrRHp53MLLJnlV+kl0fWGVX8H+t3woPl00KtTDZNsh6+TevZD/TAe6Q/GY2OA u02eu6opOWQYjC0vW+lEatimxaCZ9WI= -----END CERTIFICATE-----Generated at Sun Apr 27 11:24:00 2025 by rpki-client