$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8bb9a80d-9dae-37ba-a568-be45320b52c8.roa File: 8bb9a80d-9dae-37ba-a568-be45320b52c8.roa (raw, json) Hash identifier: vfCYdo6TCP3R6tUpio8hzQ19jDI99VBGc5sQsgLe4P4= Subject key identifier: AF:74:20:FB:36:42:43:16:D0:18:E5:5F:99:EB:28:9B:20:78:8E:28 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA826C9B3F900AD829F700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8bb9a80d-9dae-37ba-a568-be45320b52c8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.197.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:82:6c:9b:3f:90:0a:d8:29:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f8f084b3-5d50-4b2d-a0d3-0fcbfca047f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d6:6c:78:2b:d7:08:08:b7:89:c5:0b:c4:b0: 8c:50:07:7f:02:5f:a0:f8:f9:32:97:1a:9a:71:c6: 5c:33:c5:ca:9b:3c:2f:c3:2b:51:55:14:f9:8d:70: 52:3c:04:f5:69:40:2c:0c:be:99:da:89:6a:d2:54: 67:01:02:32:c7:2f:3f:b5:92:c1:f8:c7:7f:de:aa: 0c:5f:2b:b7:42:0d:a6:88:5b:e5:2c:56:c1:4a:e7: 56:46:99:a1:95:e3:eb:e4:fa:cb:38:b9:20:db:77: 86:d0:8a:27:9b:22:13:cf:82:9f:75:b3:f6:04:2d: c5:fa:62:64:46:bb:62:4b:7b:dc:56:47:34:2f:aa: 4b:52:dd:94:55:e4:1a:61:00:d0:6e:e2:e1:d1:62: a4:f4:79:03:81:7a:29:d0:62:6c:10:2d:ff:9b:41: c0:6f:c2:80:85:87:b9:c7:5c:af:6c:49:15:2b:55: f6:34:3c:5d:6e:34:5a:e3:39:87:12:77:d5:ec:42: c0:9c:a1:44:3b:6c:82:f7:46:83:1a:22:84:97:33: 6d:83:9b:e7:1a:90:b0:ee:3d:d6:bc:a8:ce:1f:96: 8a:b0:eb:98:17:f0:79:ed:ca:6f:ec:9e:b2:6a:d6: ac:ac:dc:e8:d1:c1:26:18:73:df:40:65:e8:3e:83: c2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:74:20:FB:36:42:43:16:D0:18:E5:5F:99:EB:28:9B:20:78:8E:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8bb9a80d-9dae-37ba-a568-be45320b52c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f4:c5:2c:be:28:df:d9:22:26:3e:72:14:3f:aa:32:6b:11: 5e:89:41:22:ec:a9:ce:83:c7:5a:3f:17:b0:ef:59:98:65:93: a5:13:fb:bb:fa:34:45:a2:4e:89:d0:27:08:da:29:f7:86:c9: 2c:6d:c9:c2:15:0e:a2:2a:9f:69:b8:55:8e:c9:9f:31:85:c8: b1:58:ef:52:d2:85:30:c6:67:6b:d8:87:eb:6e:66:e9:64:d1: 22:30:a1:14:6d:fe:35:3f:f2:3b:dd:20:a9:af:b9:ef:f3:7c: b3:76:43:34:c7:48:1b:bd:8c:f0:19:5c:af:c7:2e:ab:d4:94: 93:c5:05:1c:c8:f6:29:26:c2:88:20:53:46:8e:fb:aa:96:db: 7b:88:1e:4a:c0:ac:24:d0:ae:b0:49:e1:16:91:75:62:e1:15: b4:b4:11:47:d1:c4:59:4d:2b:f8:64:f7:c6:ca:74:9e:24:01: 84:fb:ba:3a:e9:a5:e9:5f:48:90:81:b2:9c:ed:2a:b5:30:90: c7:49:e7:03:5e:1a:a6:a0:22:c7:04:f8:57:75:4b:9a:ee:7d: 93:96:6e:7c:5e:2f:08:57:e1:c6:74:f3:26:f7:7d:57:5f:cb: 1b:03:47:b1:33:e0:f9:bc:af:b1:4d:eb:f4:ea:46:0f:a6:17: b7:75:33:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuoJsmz+QCtgp9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjhmMDg0YjMtNWQ1MC00YjJkLWEwZDMtMGZjYmZjYTA0N2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitZseCvXCAi3icULxLCMUAd/Al+g+Pkylxqa ccZcM8XKmzwvwytRVRT5jXBSPAT1aUAsDL6Z2olq0lRnAQIyxy8/tZLB+Md/3qoM Xyu3Qg2miFvlLFbBSudWRpmhlePr5PrLOLkg23eG0IonmyITz4KfdbP2BC3F+mJk RrtiS3vcVkc0L6pLUt2UVeQaYQDQbuLh0WKk9HkDgXop0GJsEC3/m0HAb8KAhYe5 x1yvbEkVK1X2NDxdbjRa4zmHEnfV7ELAnKFEO2yC90aDGiKElzNtg5vnGpCw7j3W vKjOH5aKsOuYF/B57cpv7J6yatasrNzo0cEmGHPfQGXoPoPCqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK90IPs2QkMW0BjlX5nrKJsgeI4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGJiOWE4MGQtOWRhZS0z N2JhLWE1NjgtYmU0NTMyMGI1MmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8UHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI70xSy+KN/ZIiY+chQ/qjJrEV6JQSLsqc6Dx1o/F7DvWZhlk6UT+7v6 NEWiTonQJwjaKfeGySxtycIVDqIqn2m4VY7JnzGFyLFY71LShTDGZ2vYh+tuZulk 0SIwoRRt/jU/8jvdIKmvue/zfLN2QzTHSBu9jPAZXK/HLqvUlJPFBRzI9ikmwogg U0aO+6qW23uIHkrArCTQrrBJ4RaRdWLhFbS0EUfRxFlNK/hk98bKdJ4kAYT7ujrp pelfSJCBspztKrUwkMdJ5wNeGqagIscE+Fd1S5rufZOWbnxeLwhX4cZ08yb3fVdf yxsDR7Ez4Pm8r7FN6/TqRg+mF7d1M50= -----END CERTIFICATE-----Generated at Sun Apr 27 01:47:36 2025 by rpki-client