$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5dc1c872-d3fa-3d94-b390-9a45abc2ee38.roa File: 5dc1c872-d3fa-3d94-b390-9a45abc2ee38.roa (raw, json) Hash identifier: XDzROmUflEBxm/dYOr8xIqsuv+X/E+k387I9ziA9dJc= Subject key identifier: 2D:55:6B:39:E8:15:6A:C5:48:18:03:91:7B:FC:35:CA:93:3B:FD:47 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB29D1AAE53F1D787B5C40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5dc1c872-d3fa-3d94-b390-9a45abc2ee38.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.198.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:29:d1:aa:e5:3f:1d:78:7b:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9ca73dd6-98a9-4d81-8bfd-d7d5e6dfb25b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:a5:68:57:19:f2:88:f3:61:b4:4e:1b:e6: 55:13:2c:51:08:43:97:c0:6e:f6:55:6a:3a:9b:d6: 32:87:07:a2:f7:4d:97:99:55:50:7f:0c:5d:23:20: 65:fc:4f:e6:56:50:f5:40:85:15:cb:73:80:23:4e: 8a:35:4c:f1:7e:2e:14:ce:de:3b:ec:a9:20:c2:a6: f9:85:b2:28:cf:40:b6:1d:a4:22:d8:ee:e6:69:c7: 61:c4:84:cf:e2:a0:df:7b:1a:66:4a:aa:d1:93:68: 38:28:72:3f:b3:b2:eb:22:f8:bc:21:be:60:88:1e: 1d:2b:d5:af:f7:48:65:fd:d3:d7:cb:75:5d:30:10: c7:a9:a0:54:4b:53:c7:03:f5:bd:e3:92:a2:e5:9b: 53:c1:da:1e:7f:cb:60:00:48:3f:f5:19:e6:36:d3: 26:b9:71:ce:a1:2a:a6:6d:a2:aa:74:f1:82:0b:fd: 07:72:eb:0e:42:2c:2c:b0:73:4b:f8:17:e6:59:ee: e6:16:e9:7c:cb:44:94:e9:bb:4d:4d:ec:5b:17:32: 0a:d7:fa:15:06:6b:89:36:7e:1f:18:3c:01:a7:f0: 09:8f:d7:dc:34:ab:2a:a1:4e:18:f7:23:d9:f9:69: f0:2a:6a:ad:c9:92:96:e3:b9:6a:82:0f:a5:87:f1: 18:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:55:6B:39:E8:15:6A:C5:48:18:03:91:7B:FC:35:CA:93:3B:FD:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5dc1c872-d3fa-3d94-b390-9a45abc2ee38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6c:3f:7a:58:00:ed:2b:18:4c:9f:57:38:e8:a4:41:35:4f: e4:5d:4c:30:d6:fe:df:7d:c2:c7:27:db:86:6d:e2:69:95:e2: 31:a5:3d:ae:56:7e:08:c3:c7:d2:65:5a:4a:d6:46:a4:4c:59: 62:3e:67:3c:d1:a9:17:de:ff:81:19:09:50:ec:9d:5b:12:41: fa:a6:b5:1e:59:da:3a:de:ff:98:8d:79:8b:49:27:36:0b:fd: bd:ae:35:6f:3e:d5:fb:69:53:d5:ad:de:0c:52:bf:73:30:49: 70:01:08:11:60:15:03:7e:6f:fb:58:e5:ab:f7:cc:b8:58:c2: af:68:40:b7:0c:16:93:44:30:36:d2:f6:6d:16:3c:c8:e9:33: 2f:eb:9b:45:8e:37:12:97:b0:37:de:2d:d1:a2:69:a2:e0:f6: 60:74:77:75:08:f9:ff:55:1e:0d:84:6f:3f:f4:78:ce:3c:e6: f1:c6:3c:47:e3:7d:a1:40:9d:35:58:5e:04:8f:08:64:10:bc: 84:eb:d0:dc:42:09:0b:1e:34:56:61:3b:d4:8b:97:4d:f9:01: cb:76:2f:3e:4b:63:5a:bc:05:15:d2:85:78:25:1c:56:7b:af: cb:73:a9:18:92:50:f8:d0:24:b7:42:18:98:b9:99:db:75:ef: e7:54:cb:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuynRquU/HXh7XEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWNhNzNkZDYtOThhOS00ZDgxLThiZmQtZDdkNWU2ZGZiMjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJmlaFcZ8ojzYbROG+ZVEyxRCEOXwG72VWo6 m9Yyhwei902XmVVQfwxdIyBl/E/mVlD1QIUVy3OAI06KNUzxfi4Uzt477Kkgwqb5 hbIoz0C2HaQi2O7macdhxITP4qDfexpmSqrRk2g4KHI/s7LrIvi8Ib5giB4dK9Wv 90hl/dPXy3VdMBDHqaBUS1PHA/W945Ki5ZtTwdoef8tgAEg/9RnmNtMmuXHOoSqm baKqdPGCC/0HcusOQiwssHNL+BfmWe7mFul8y0SU6btNTexbFzIK1/oVBmuJNn4f GDwBp/AJj9fcNKsqoU4Y9yPZ+WnwKmqtyZKW47lqgg+lh/EYmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1VaznoFWrFSBgDkXv8NcqTO/1HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWRjMWM4NzItZDNmYS0z ZDk0LWIzOTAtOWE0NWFiYzJlZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBsP3pYAO0rGEyfVzjopEE1T+RdTDDW/t99wscn24Zt4mmV4jGlPa5W fgjDx9JlWkrWRqRMWWI+ZzzRqRfe/4EZCVDsnVsSQfqmtR5Z2jre/5iNeYtJJzYL /b2uNW8+1ftpU9Wt3gxSv3MwSXABCBFgFQN+b/tY5av3zLhYwq9oQLcMFpNEMDbS 9m0WPMjpMy/rm0WONxKXsDfeLdGiaaLg9mB0d3UI+f9VHg2Ebz/0eM485vHGPEfj faFAnTVYXgSPCGQQvITr0NxCCQseNFZhO9SLl035Act2Lz5LY1q8BRXShXglHFZ7 r8tzqRiSUPjQJLdCGJi5mdt17+dUy7o= -----END CERTIFICATE-----Generated at Sun Apr 27 01:11:42 2025 by rpki-client