$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c9c8c1a-ef91-3ba2-9b8e-aa821022ac73.roa File: 7c9c8c1a-ef91-3ba2-9b8e-aa821022ac73.roa (raw, json) Hash identifier: hEhtxxgXpjQVfLdmbiaql2u1dsUueKEYxE8EVa/1eaU= Subject key identifier: 24:DC:AC:D4:6B:B8:35:6F:02:32:F2:0E:E7:0A:E0:F4:AD:65:22:7F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA8872D5F6E0AB803026F4 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c9c8c1a-ef91-3ba2-9b8e-aa821022ac73.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.198.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:88:72:d5:f6:e0:ab:80:30:26:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ff544b32-cb80-4407-a30d-86002b1e7b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ad:29:fd:26:f9:7f:5f:4e:3e:10:5f:86:e2: 59:f9:ad:28:af:2d:5a:ae:29:f6:17:f3:f6:ed:cc: 1d:b2:5e:78:b0:28:b9:00:87:0b:8f:1d:4d:ef:d9: be:f7:61:b3:c8:99:d4:f4:29:f0:d0:bd:5b:01:41: 32:99:86:b2:8f:96:a8:c4:7f:9a:2f:60:e0:39:d6: 1e:2d:b4:78:72:6b:38:0b:c9:fb:e3:77:59:c2:d4: 10:0e:24:6c:83:5a:ea:36:2e:8c:7f:d1:b2:00:c9: 27:b8:3b:4d:d3:ea:a4:d1:c5:96:d2:a9:8c:1b:26: c4:f3:00:dc:fd:3f:62:25:66:f1:60:1a:1b:e3:fe: 99:74:bd:0d:fe:77:f7:94:b9:01:5e:d4:52:e9:29: d6:ec:20:c2:cc:83:e5:65:8b:80:ea:19:a7:2d:da: df:93:9d:bd:d1:ad:aa:69:6d:2e:86:97:f3:34:af: 90:5d:a5:3d:55:b0:30:83:78:c3:5f:0d:62:39:b1: 76:b9:37:16:a8:cb:bc:2f:ea:46:e4:96:b7:03:5d: 15:53:28:6f:f5:d9:78:95:d3:dc:5b:3d:7d:61:3b: 20:4c:de:80:be:5a:e1:35:3c:eb:b2:b7:44:9e:6d: 0e:0a:66:07:28:dd:e0:89:87:76:8f:74:53:cd:cc: 95:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DC:AC:D4:6B:B8:35:6F:02:32:F2:0E:E7:0A:E0:F4:AD:65:22:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c9c8c1a-ef91-3ba2-9b8e-aa821022ac73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:73:a1:29:72:bf:f2:c5:86:70:52:92:c7:2f:53:50:94:6f: 89:06:9d:5d:1f:f3:6f:de:21:48:c6:40:dc:de:7a:bb:12:bb: 16:70:e6:69:98:9f:5a:a5:ea:21:2f:7b:11:b3:14:92:1c:26: 03:3b:46:5a:ae:49:9f:6e:ab:f0:c2:23:b4:77:06:cc:16:65: 27:d2:02:80:83:a0:4a:4b:dd:8f:cb:cd:9c:77:60:13:87:88: 3c:a5:ce:dd:98:ff:64:10:cd:b8:ae:c6:d0:13:ba:58:5c:5f: b9:f6:db:59:2d:b9:7f:26:02:90:8d:fa:05:3f:f2:b2:cc:5d: 6f:b5:af:36:13:bd:07:94:90:43:b9:cc:e9:70:e1:c7:99:d9: 9f:02:2c:88:c9:9d:31:16:64:a8:8c:92:1a:32:da:be:cd:4c: 7d:cf:36:17:21:42:d4:71:08:15:4f:6c:ce:29:ed:0c:93:86: d0:35:5f:48:53:a4:a0:1d:e6:1f:a7:86:9b:cf:57:28:4f:e4: e8:12:78:f9:c0:4e:9e:b4:12:cb:17:1a:b3:bc:6c:09:55:33: 0c:29:b4:13:15:e5:18:2f:54:16:46:8d:7c:64:f6:2e:00:aa: 88:6a:cc:70:51:46:f2:c9:67:60:0e:36:5f:5b:e2:fd:e3:56: 27:a8:a2:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuohy1fbgq4AwJvQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmY1NDRiMzItY2I4MC00NDA3LWEzMGQtODYwMDJiMWU3YjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK0p/Sb5f19OPhBfhuJZ+a0ory1arin2F/P2 7cwdsl54sCi5AIcLjx1N79m+92GzyJnU9Cnw0L1bAUEymYayj5aoxH+aL2DgOdYe LbR4cms4C8n743dZwtQQDiRsg1rqNi6Mf9GyAMknuDtN0+qk0cWW0qmMGybE8wDc /T9iJWbxYBob4/6ZdL0N/nf3lLkBXtRS6SnW7CDCzIPlZYuA6hmnLdrfk5290a2q aW0uhpfzNK+QXaU9VbAwg3jDXw1iObF2uTcWqMu8L+pG5Ja3A10VUyhv9dl4ldPc Wz19YTsgTN6AvlrhNTzrsrdEnm0OCmYHKN3giYd2j3RTzcyVuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTcrNRruDVvAjLyDucK4PStZSJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2M5YzhjMWEtZWY5MS0z YmEyLTliOGUtYWE4MjEwMjJhYzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtzoSlyv/LFhnBSkscvU1CUb4kGnV0f82/eIUjGQNzeersSuxZw5mmY n1ql6iEvexGzFJIcJgM7RlquSZ9uq/DCI7R3BswWZSfSAoCDoEpL3Y/LzZx3YBOH iDylzt2Y/2QQzbiuxtATulhcX7n221ktuX8mApCN+gU/8rLMXW+1rzYTvQeUkEO5 zOlw4ceZ2Z8CLIjJnTEWZKiMkhoy2r7NTH3PNhchQtRxCBVPbM4p7QyThtA1X0hT pKAd5h+nhpvPVyhP5OgSePnATp60EssXGrO8bAlVMwwptBMV5RgvVBZGjXxk9i4A qohqzHBRRvLJZ2AONl9b4v3jVieoooA= -----END CERTIFICATE-----Generated at Mon Apr 28 02:54:49 2025 by rpki-client