$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/760aaa89-b59e-3b51-8ea7-de0ea665854b.roa File: 760aaa89-b59e-3b51-8ea7-de0ea665854b.roa (raw, json) Hash identifier: CFIrtQCgCXydVhI0eyL+FC7C7KXmO7L89ZY7/OZKYY0= Subject key identifier: 5F:33:66:E5:2F:73:A2:28:B5:AD:8E:30:2D:15:62:77:BF:71:47:13 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB200E941EB591A8074CC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/760aaa89-b59e-3b51-8ea7-de0ea665854b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.196.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:20:0e:94:1e:b5:91:a8:07:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=99c6a906-c936-41a0-bc48-1d548f7552f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:97:20:95:11:60:86:b2:a9:9e:e6:65:76:c5: ff:c1:ef:29:8a:25:2e:04:a9:3c:24:11:fe:74:91: e3:6e:c6:e2:4d:e0:08:16:8a:c8:3a:74:58:4f:66: 94:cb:61:2f:32:47:3b:19:c0:ae:82:a0:8b:f0:94: 53:30:5c:b9:5e:c9:8c:52:a9:57:e3:fe:db:c6:99: 50:17:3f:c2:43:8b:4d:c5:e3:52:b4:69:1b:9c:ca: 61:61:3e:95:d0:17:e0:58:6b:99:52:1f:51:4b:5d: 19:54:26:88:70:f9:5a:e3:89:0c:5c:a4:9a:ad:04: 47:6c:21:d2:0c:14:7f:75:1d:f7:7a:64:c5:71:3b: 31:20:ae:72:00:3d:91:ea:3f:25:26:67:70:c2:a9: 63:7f:15:9e:f4:57:8d:00:8f:67:94:34:33:7e:34: 8a:c2:33:f7:a2:69:f2:32:3f:90:96:a3:6e:9c:76: a4:0f:1e:0a:67:e1:fa:17:4c:f5:0f:86:17:28:2b: ca:ff:5a:67:88:71:87:e7:5c:6b:9d:f3:13:a0:8a: 4f:90:da:a9:88:cc:ae:55:3e:62:19:67:ed:3e:6e: ca:d9:39:3f:d1:dd:f4:06:1b:de:42:07:97:00:1d: a8:10:df:39:a3:c0:8f:49:8e:95:ae:c2:0e:a0:d3: b1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:33:66:E5:2F:73:A2:28:B5:AD:8E:30:2D:15:62:77:BF:71:47:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/760aaa89-b59e-3b51-8ea7-de0ea665854b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:2b:11:88:6e:73:fd:d2:e6:29:65:7f:4a:9b:b4:13:c0:f8: df:6b:ed:0b:9f:7f:8c:3d:cd:a8:35:94:83:22:ec:15:1a:84: 01:56:62:42:18:a9:7a:a2:0a:dc:fe:a0:d4:06:79:9a:a2:46: c2:91:d2:22:c8:a7:5d:c7:55:44:0b:84:a2:2e:e8:3d:10:5b: 24:d1:be:2f:bf:c4:0b:ff:e7:af:a8:b1:60:a0:b8:51:b6:6c: f9:bf:51:68:36:11:00:46:0a:e4:65:df:72:0a:6a:f4:36:40: db:d9:11:ef:d8:c4:02:4a:63:23:38:3d:d0:30:f4:dd:09:09: f4:cd:89:fc:41:15:5f:bf:e9:36:5b:5e:bb:72:ec:96:23:30: ba:b9:72:62:fd:01:f2:b3:a3:e5:f3:a3:ab:d3:fe:b8:01:7b: 07:3b:a2:97:39:fc:6f:81:f5:42:08:db:68:5e:c2:53:70:6d: 26:0c:82:11:7b:9d:83:9f:b5:b6:d6:ed:76:d0:82:37:7a:68: f4:29:13:5e:de:61:40:0d:93:3c:bf:aa:ce:00:ed:97:bd:54: ac:fd:71:d2:e6:c4:17:de:83:bc:1c:d9:22:8f:8f:75:67:57: aa:49:a1:af:20:fc:be:4f:89:98:a8:27:24:24:c6:b1:47:0c: 2c:11:54:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuyAOlB61kagHTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTljNmE5MDYtYzkzNi00MWEwLWJjNDgtMWQ1NDhmNzU1MmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupcglRFghrKpnuZldsX/we8piiUuBKk8JBH+ dJHjbsbiTeAIForIOnRYT2aUy2EvMkc7GcCugqCL8JRTMFy5XsmMUqlX4/7bxplQ Fz/CQ4tNxeNStGkbnMphYT6V0BfgWGuZUh9RS10ZVCaIcPla44kMXKSarQRHbCHS DBR/dR33emTFcTsxIK5yAD2R6j8lJmdwwqljfxWe9FeNAI9nlDQzfjSKwjP3omny Mj+QlqNunHakDx4KZ+H6F0z1D4YXKCvK/1pniHGH51xrnfMToIpPkNqpiMyuVT5i GWftPm7K2Tk/0d30BhveQgeXAB2oEN85o8CPSY6VrsIOoNOxKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8zZuUvc6Iota2OMC0VYne/cUcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzYwYWFhODktYjU5ZS0z YjUxLThlYTctZGUwZWE2NjU4NTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8S9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwrEYhuc/3S5illf0qbtBPA+N9r7Quff4w9zag1lIMi7BUahAFWYkIY qXqiCtz+oNQGeZqiRsKR0iLIp13HVUQLhKIu6D0QWyTRvi+/xAv/56+osWCguFG2 bPm/UWg2EQBGCuRl33IKavQ2QNvZEe/YxAJKYyM4PdAw9N0JCfTNifxBFV+/6TZb Xrty7JYjMLq5cmL9AfKzo+Xzo6vT/rgBewc7opc5/G+B9UII22hewlNwbSYMghF7 nYOftbbW7XbQgjd6aPQpE17eYUANkzy/qs4A7Ze9VKz9cdLmxBfeg7wc2SKPj3Vn V6pJoa8g/L5PiZioJyQkxrFHDCwRVPk= -----END CERTIFICATE-----Generated at Sun Apr 27 09:17:34 2025 by rpki-client