$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6cc58da9-ab4c-3049-982b-225fc40f5114.roa File: 6cc58da9-ab4c-3049-982b-225fc40f5114.roa (raw, json) Hash identifier: zxKq/BZyFnf37ql9ZmR/UANiX27T7JXxv7RXelZlpcQ= Subject key identifier: 28:1A:A6:71:0F:DF:87:9A:66:86:DD:E1:B5:5A:42:71:40:42:14:B8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA7E4B7E542BB1247A4C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6cc58da9-ab4c-3049-982b-225fc40f5114.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.196.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:7e:4b:7e:54:2b:b1:24:7a:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=26daf701-6e8e-49ce-8707-6aa2de6f6a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2a:c1:7f:0e:ec:fa:18:28:2d:48:de:a1:fa: 34:9e:cc:52:3e:e8:e6:49:47:2f:49:ee:82:19:15: 03:6b:07:78:58:2c:38:9b:b0:6b:17:84:00:56:f8: 7d:99:d6:55:85:ee:d2:76:ae:00:d4:02:e8:a1:f9: 61:68:5b:d8:10:53:ff:38:62:0f:57:65:34:1f:d6: ac:46:84:98:5b:3a:82:0d:01:9c:04:79:fa:b3:f9: 7d:25:81:23:b6:6b:05:f6:b8:bc:fb:84:03:d5:6e: 6b:2d:98:06:40:18:74:38:43:77:bc:f7:a7:1b:bb: 98:06:20:e9:1c:ff:be:ac:5d:bf:6a:12:10:01:1d: 96:d5:1a:35:99:37:58:4e:4f:21:43:d0:72:31:8f: 62:79:32:37:9c:96:bc:84:72:fa:02:6b:52:9b:35: 39:6b:b0:3b:89:a6:2f:87:59:46:cc:e0:99:42:d9: 10:0b:b6:cf:0d:a9:d6:62:e5:51:c6:7f:46:35:c1: 65:ac:82:e1:cf:81:a7:b0:9d:31:3f:93:c3:ba:92: 78:30:56:09:b3:e4:bf:d1:62:6e:b4:42:eb:bf:ad: 5f:34:59:ea:49:5e:5a:74:ab:a4:16:90:d4:e8:10: 8e:0f:b5:dd:67:f6:03:7f:b0:d8:c9:53:ce:99:6f: 35:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1A:A6:71:0F:DF:87:9A:66:86:DD:E1:B5:5A:42:71:40:42:14:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6cc58da9-ab4c-3049-982b-225fc40f5114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:dd:ac:ed:99:62:0e:d5:59:c7:3f:b4:65:a6:0e:0f:60:2c: c4:95:5a:24:bc:cf:48:ba:50:e7:65:ba:8c:79:85:5c:91:94: 71:cf:95:84:c8:0b:d3:db:82:c6:a3:05:e6:8b:66:25:36:ee: 28:f6:2d:e3:07:cd:e4:73:93:b8:ed:2b:9c:05:1e:2c:38:94: c9:a9:bd:48:32:b3:00:6f:b2:f1:cd:43:f9:61:22:14:39:ad: 9e:d2:4f:69:4c:ed:54:ad:93:64:42:03:30:31:33:fa:61:58: 72:55:af:f7:c3:0f:a7:72:e4:ef:2e:90:47:ea:8e:c2:98:6c: f1:7a:2b:a1:e8:ae:10:ce:00:4c:6d:0e:d1:7f:bd:00:56:96: 0a:90:2b:77:88:b6:df:25:d1:0a:75:19:03:ea:12:9a:58:1b: e9:0b:14:e1:de:ac:47:32:91:a8:4a:0f:46:f0:52:06:ee:d3: 98:df:5d:6b:4c:bf:e9:b7:9b:5f:38:d5:49:76:92:15:e3:9f: 08:1f:d0:6c:17:23:c3:1b:d5:e3:bf:f5:11:94:d2:f3:93:41: 25:df:3b:8d:e1:59:b5:89:83:3c:97:68:5a:a3:b7:5a:25:0e: ee:3c:ae:fc:d4:03:5d:87:7e:1b:5d:12:40:eb:7e:57:a2:d3: e7:40:9f:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkun5LflQrsSR6TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjZkYWY3MDEtNmU4ZS00OWNlLTg3MDctNmFhMmRlNmY2YThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCrBfw7s+hgoLUjeofo0nsxSPujmSUcvSe6C GRUDawd4WCw4m7BrF4QAVvh9mdZVhe7Sdq4A1ALooflhaFvYEFP/OGIPV2U0H9as RoSYWzqCDQGcBHn6s/l9JYEjtmsF9ri8+4QD1W5rLZgGQBh0OEN3vPenG7uYBiDp HP++rF2/ahIQAR2W1Ro1mTdYTk8hQ9ByMY9ieTI3nJa8hHL6AmtSmzU5a7A7iaYv h1lGzOCZQtkQC7bPDanWYuVRxn9GNcFlrILhz4GnsJ0xP5PDupJ4MFYJs+S/0WJu tELrv61fNFnqSV5adKukFpDU6BCOD7XdZ/YDf7DYyVPOmW81JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgapnEP34eaZobd4bVaQnFAQhS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmNjNThkYTktYWI0Yy0z MDQ5LTk4MmItMjI1ZmM0MGY1MTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHdrO2ZYg7VWcc/tGWmDg9gLMSVWiS8z0i6UOdluox5hVyRlHHPlYTI C9PbgsajBeaLZiU27ij2LeMHzeRzk7jtK5wFHiw4lMmpvUgyswBvsvHNQ/lhIhQ5 rZ7ST2lM7VStk2RCAzAxM/phWHJVr/fDD6dy5O8ukEfqjsKYbPF6K6HorhDOAExt DtF/vQBWlgqQK3eItt8l0Qp1GQPqEppYG+kLFOHerEcykahKD0bwUgbu05jfXWtM v+m3m1841Ul2khXjnwgf0GwXI8Mb1eO/9RGU0vOTQSXfO43hWbWJgzyXaFqjt1ol Du48rvzUA12HfhtdEkDrflei0+dAn1Y= -----END CERTIFICATE-----Generated at Sun Apr 27 13:06:08 2025 by rpki-client