$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/620c9921-4f80-34dd-840e-1c36b07b9504.roa File: 620c9921-4f80-34dd-840e-1c36b07b9504.roa (raw, json) Hash identifier: wXnSQKLI/0eQdgzG6K8B1PYVvciv8WBjipwL+VI8yNc= Subject key identifier: 5B:19:76:D1:DD:7B:CC:E0:11:C6:BE:3F:16:83:85:68:ED:C7:47:DF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB285972E474A1D8D8E1C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/620c9921-4f80-34dd-840e-1c36b07b9504.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.197.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:28:59:72:e4:74:a1:d8:d8:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1e8d1b5a-83c0-42db-91ef-7ca0f113f7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:e1:0d:58:31:3d:b5:4d:13:0c:48:43:8e: ab:c5:d7:46:7c:10:81:8e:6e:02:43:f4:98:e7:6a: 3f:d7:d8:09:94:71:26:40:fd:43:94:38:cd:67:0a: f0:b8:c2:f3:04:19:03:45:9e:d7:4d:f4:a8:3b:bb: 62:48:ed:d9:eb:53:7d:5c:dd:0d:95:1b:c2:94:50: b8:7d:84:eb:bf:55:81:72:ee:5e:19:04:48:3a:91: 9e:3d:d9:50:79:b3:c1:bc:3b:00:49:4c:70:02:06: 2a:b9:10:31:cf:a0:92:af:2d:d4:0e:71:7a:59:db: b3:18:f0:8a:3b:69:78:57:7b:33:6e:d2:34:f1:34: ea:fe:b1:74:93:d4:8d:6d:de:20:f4:ab:c9:c8:0d: d5:69:66:96:ab:27:b3:fe:09:73:e4:d4:83:81:0a: e6:63:a7:e3:af:73:10:a8:71:99:02:37:92:5d:a6: de:79:ae:9f:7f:3e:39:f9:ac:74:1a:0c:a4:a7:8a: 05:0c:92:68:4f:cd:95:e3:f9:ac:52:1f:1e:89:6c: 31:de:26:b3:48:e2:2c:3a:c7:7b:5b:c6:08:bf:5c: 48:39:73:41:26:47:b7:76:53:d1:1f:3c:b4:d6:67: 16:36:be:ad:3e:f0:6c:92:68:65:c5:80:68:a2:9a: 67:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:19:76:D1:DD:7B:CC:E0:11:C6:BE:3F:16:83:85:68:ED:C7:47:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/620c9921-4f80-34dd-840e-1c36b07b9504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:b6:53:2f:48:c9:22:cc:9f:d3:96:24:3c:7e:f2:74:ac:36: 9c:4f:77:43:f3:fa:ed:e7:0a:5f:ba:07:7a:57:f4:62:7e:e1: 20:e2:78:c8:59:6d:59:7d:3e:4a:8b:f7:02:18:c1:c8:db:91: 18:62:11:ca:59:27:0f:d5:3a:30:c3:a5:8a:e2:b5:03:f8:dd: f1:73:06:b7:d6:94:28:9e:c8:5e:a0:42:a2:8d:3b:33:7d:0d: 74:b4:1b:d4:34:fc:cb:e0:5c:d8:4d:c4:f8:46:63:29:6f:fb: 81:4d:3d:44:58:a2:eb:e4:17:05:72:cd:1d:b8:a1:4a:2e:c8: 07:84:99:c9:19:03:f6:75:ae:81:c4:18:b7:9b:c1:67:0f:ac: 8e:d7:ee:c6:d2:6f:2d:49:d2:23:64:44:d3:b2:5b:d5:30:26: 4c:24:e1:8c:8e:38:03:37:3f:f8:7a:eb:1a:33:a3:23:e3:e5: 35:9f:09:1a:60:77:22:16:cb:4f:fe:1d:09:af:30:e7:43:9c: dd:39:d2:d0:03:b7:fa:c3:33:ba:de:91:3a:7c:0e:85:fc:f1: be:38:ce:5a:fe:45:df:b8:f9:c0:45:c8:92:f4:76:75:5c:ad: 36:16:57:f8:5f:5f:e7:65:47:71:73:e6:60:73:0e:0f:a6:27: ef:2c:a2:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuyhZcuR0odjY4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MWU4ZDFiNWEtODNjMC00MmRiLTkxZWYtN2NhMGYxMTNmN2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkThDVgxPbVNEwxIQ46rxddGfBCBjm4CQ/SY 52o/19gJlHEmQP1DlDjNZwrwuMLzBBkDRZ7XTfSoO7tiSO3Z61N9XN0NlRvClFC4 fYTrv1WBcu5eGQRIOpGePdlQebPBvDsASUxwAgYquRAxz6CSry3UDnF6WduzGPCK O2l4V3szbtI08TTq/rF0k9SNbd4g9KvJyA3VaWaWqyez/glz5NSDgQrmY6fjr3MQ qHGZAjeSXabeea6ffz45+ax0Ggykp4oFDJJoT82V4/msUh8eiWwx3iazSOIsOsd7 W8YIv1xIOXNBJke3dlPRHzy01mcWNr6tPvBskmhlxYBooppnUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsZdtHde8zgEca+PxaDhWjtx0ffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjIwYzk5MjEtNGY4MC0z NGRkLTg0MGUtMWMzNmIwN2I5NTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALe2Uy9IySLMn9OWJDx+8nSsNpxPd0Pz+u3nCl+6B3pX9GJ+4SDieMhZ bVl9PkqL9wIYwcjbkRhiEcpZJw/VOjDDpYritQP43fFzBrfWlCieyF6gQqKNOzN9 DXS0G9Q0/MvgXNhNxPhGYylv+4FNPURYouvkFwVyzR24oUouyAeEmckZA/Z1roHE GLebwWcPrI7X7sbSby1J0iNkRNOyW9UwJkwk4YyOOAM3P/h66xozoyPj5TWfCRpg dyIWy0/+HQmvMOdDnN050tADt/rDM7rekTp8DoX88b44zlr+Rd+4+cBFyJL0dnVc rTYWV/hfX+dlR3Fz5mBzDg+mJ+8sovc= -----END CERTIFICATE-----Generated at Sun Apr 27 05:44:37 2025 by rpki-client